Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
File: f9GKakmRDMMx3JERSuWbcYXV8w0.mft (raw, json)
Hash identifier: urhYMgKIUjHPwev4QFMz9D7KeHFmpAPw5NoOLbhWzos=
Subject key identifier: F1:79:84:C0:E2:5F:2A:C1:A6:28:7A:C9:A7:80:50:9D:F2:68:B1:5C
Authority key identifier: 7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
Certificate issuer: /CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Certificate serial: 019CAB6AD50D72BDCF6254E65E8FC496F1A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 22:00:31 +0000
Manifest this update: Sun 01 Mar 2026 22:00:31 +0000
Manifest next update: Mon 02 Mar 2026 22:00:31 +0000
Files and hashes: 1: CYtuVU0sbWBUALYLU6zRKuDdNos.roa (hash: p/Z6mIOgkBgm2djYUHmco8dUrJgppMghuSCBMeA0BPY=)
2: f9GKakmRDMMx3JERSuWbcYXV8w0.crl (hash: ERqoGXFEQOAlocuPjOVPtYRydcb/nJQlL8EN+XFsAwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d5:0d:72:bd:cf:62:54:e6:5e:8f:c4:96:f1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Validity
Not Before: Mar 1 22:00:31 2026 GMT
Not After : Mar 2 22:00:31 2026 GMT
Subject: CN=f17984c0e25f2ac1a6287ac9a780509df268b15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c2:8a:75:5d:42:6e:45:02:3a:cb:16:0a:ed:
6d:8f:08:95:40:08:43:ab:fd:0c:04:bb:5c:84:ee:
41:01:d1:60:40:1f:7c:f6:dc:15:aa:3e:15:dc:b4:
49:d4:ee:a8:ad:d6:70:92:1b:ae:0d:2d:5b:06:c0:
8c:1a:e1:3a:7f:89:48:0d:1d:e3:0c:81:ed:09:84:
cc:f1:2c:e7:8b:1b:3f:31:44:04:16:c0:4a:a2:76:
e7:3f:16:00:bd:7e:22:13:2c:0c:e6:ae:02:23:88:
c2:7c:72:2e:3c:eb:10:28:8e:84:6c:5e:b4:c5:7b:
9d:70:04:64:f6:e1:24:5b:79:d3:36:14:94:ba:fe:
b4:6e:a6:10:78:f8:46:4f:c2:db:57:c4:d0:53:6f:
fd:de:37:01:02:70:db:69:e5:1c:f3:2e:e9:c9:00:
30:c9:0b:35:c7:e1:d0:89:0a:26:60:2d:88:b1:f8:
64:75:df:ad:d7:44:4a:db:9c:7c:d2:7b:db:c5:98:
0b:c3:55:e7:c4:0b:b5:63:08:82:f1:3e:51:59:c5:
85:b0:2f:2f:65:bc:0b:9c:da:f9:6b:65:5b:46:61:
f1:42:cd:b6:95:52:8d:30:ea:68:7c:2a:ba:5a:10:
a4:96:2d:8d:ed:fc:2c:bf:aa:ec:ed:3a:6a:a0:9e:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:79:84:C0:E2:5F:2A:C1:A6:28:7A:C9:A7:80:50:9D:F2:68:B1:5C
X509v3 Authority Key Identifier:
keyid:7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2f:bd:b5:53:9a:9b:7b:c2:47:f3:b8:80:85:94:b4:35:ce:
1c:18:2a:f8:f1:4a:13:01:b7:0b:8b:2c:6b:4e:ff:94:21:07:
36:8c:68:00:fa:cb:d4:2f:6d:32:2e:5f:c8:1a:7d:79:bb:1a:
10:70:c2:c9:f2:1f:b9:71:cf:80:2b:54:12:6d:8a:b3:77:cf:
c9:ce:51:7c:8a:d6:45:36:5d:7c:3e:02:dd:8b:31:d0:38:00:
5a:34:30:19:b3:dc:2a:9a:9e:71:28:46:5c:bc:36:d3:45:d1:
ae:ea:4f:28:51:45:6e:9f:9f:62:e9:a7:2d:99:4d:41:d2:ff:
96:c5:49:a9:5b:65:be:d2:8d:13:f2:28:52:a9:ca:eb:81:6f:
80:a2:2d:51:5b:d3:ca:41:c4:20:be:43:e6:c6:92:9c:92:97:
ce:06:69:b4:65:c8:f3:ec:92:1e:1b:99:c8:e6:7c:5e:1b:35:
2f:d8:50:c9:7d:8c:8c:16:e5:2f:52:a0:6a:f0:78:e9:01:48:
74:0d:c4:40:cd:db:3a:37:d2:5a:8e:af:fa:57:03:dd:46:ee:
7f:f6:31:61:18:3d:45:83:7a:04:cf:e5:bf:03:6a:85:19:43:
d6:50:4d:23:f0:d5:89:90:7c:b1:5d:50:33:45:42:62:07:95:
1c:0b:b3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:12 2026 by rpki-client