Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: y4tv+vyqhTw/NcBYcVldXNhPbxs4EI9fDv1Ae9Lw5ko=
Subject key identifier: 19:EC:AC:50:B2:FB:D2:20:B8:82:26:F6:C7:80:4A:B0:A0:AF:4F:67
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 019CAC0FDC1A0050FCA237CFEB08F49EB9E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:00:46 +0000
Manifest this update: Mon 02 Mar 2026 01:00:46 +0000
Manifest next update: Tue 03 Mar 2026 01:00:46 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: fVPlCBgu8cMPyYY1Jn/fO3EvSHqXvl4vRYeitZpRIxs=)
2: BqRJvB_nPRiPWuTGUs43OFgE1cg.roa (hash: CouaUfaCJlCnH6IGbuUpQJc4a6XZQ+ovYHzWhnqUp88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:dc:1a:00:50:fc:a2:37:cf:eb:08:f4:9e:b9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Mar 2 01:00:46 2026 GMT
Not After : Mar 3 01:00:46 2026 GMT
Subject: CN=19ecac50b2fbd220b88226f6c7804ab0a0af4f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:25:86:3f:ee:ae:3e:fc:85:d0:ea:98:74:c1:
37:a2:e0:79:7f:2f:03:0f:88:46:31:21:72:05:5d:
51:66:ae:2e:77:39:3c:30:65:d5:89:e6:8f:09:4a:
fc:88:c5:d9:d9:3a:6b:96:06:40:05:e8:5f:48:c9:
1a:80:77:6b:4a:87:88:21:a9:f9:0f:1d:8b:23:32:
4b:6e:bd:2c:74:0e:b7:65:da:ad:7f:db:56:39:10:
a2:5e:05:fa:bb:b5:73:cd:53:d1:6c:d0:11:2d:dc:
83:47:c9:58:c4:c8:ce:f0:84:b3:4a:0a:ac:b0:03:
d3:00:e6:50:ed:9a:51:13:b8:b7:ab:24:47:f6:8b:
c4:9a:df:58:bb:79:2c:bf:ce:9d:7a:30:93:ae:9c:
f3:34:4b:29:04:76:50:36:bd:e8:cb:24:c6:12:cd:
43:04:8e:94:78:74:d6:bf:4e:75:00:e7:78:3e:af:
cf:d7:06:31:97:e5:ba:af:a5:63:4f:f4:24:ab:42:
86:7d:5a:6e:43:ac:79:1c:9e:c3:fa:ec:a7:c3:2b:
89:1b:7a:6d:60:64:39:96:f0:2e:98:bd:8b:55:a4:
7a:f5:66:23:e7:f7:7e:99:7b:52:58:69:20:85:55:
85:38:2b:57:ea:88:dc:ce:fe:bf:de:04:7d:23:f3:
a3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EC:AC:50:B2:FB:D2:20:B8:82:26:F6:C7:80:4A:B0:A0:AF:4F:67
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:af:b7:5c:84:51:b6:18:99:3d:19:4a:fd:b0:6e:04:6d:94:
28:aa:72:3e:7c:15:96:16:1b:9e:9c:db:b3:e1:71:f5:07:72:
14:b2:c0:bc:b6:38:7b:91:77:25:3d:f5:a2:b1:b0:3d:c0:30:
e9:ce:94:5d:20:60:55:e9:9c:d3:82:32:89:5f:dd:4c:71:e7:
74:20:29:d1:66:42:d1:7a:a8:9d:50:59:b7:da:0f:6a:de:3c:
00:da:ba:56:06:af:b3:85:01:ca:17:9e:ab:0b:0c:91:d1:ab:
16:d4:b0:86:1e:90:4f:80:2c:19:a8:68:f8:2b:95:b1:cd:0d:
ea:98:35:8a:51:79:95:01:6e:3b:3b:cb:4c:a3:ab:f1:c9:41:
83:d1:bb:72:12:ad:c5:60:d4:ff:d5:77:be:89:cc:64:45:a3:
d7:26:8e:62:46:19:03:ea:10:90:df:67:f0:b4:96:f1:f0:e1:
82:cd:c4:83:45:91:c1:8a:c7:93:a7:45:09:e8:7a:b6:e7:4a:
dd:55:f8:e5:9d:37:a8:f2:f0:eb:59:b9:c7:e5:9f:9b:59:9c:
fd:d6:c2:e8:ef:d3:22:cd:00:cc:15:54:42:bb:2c:a9:e5:ec:
79:93:59:a2:7a:16:67:9b:e3:5d:b6:5d:2a:6d:b0:4d:44:c8:
84:d2:88:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:37 2026 by rpki-client