Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
File: xU9qEXeCbFq2S9OvATiptXpLkeU.mft (raw, json)
Hash identifier: jjl11NiqCdYsA2WDU0Meh5iFmvgB9ybo9EEUkuw1OiY=
Subject key identifier: A6:F9:E9:E0:AE:4A:6B:0E:DF:6A:E6:92:AD:9F:A0:6E:9A:4A:5C:66
Authority key identifier: C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
Certificate issuer: /CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Certificate serial: 019CAD593B0C02E58F169838496C3FB7085E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
Manifest number: D9
Signing time: Mon 02 Mar 2026 07:00:31 +0000
Manifest this update: Mon 02 Mar 2026 07:00:31 +0000
Manifest next update: Tue 03 Mar 2026 07:00:31 +0000
Files and hashes: 1: AAL-YY9GVuWqbLX5GG1k3ImctWA.roa (hash: dOcDqpARrTucPUNtlVinnlKcwBaTZo2MLnDCrG84YIw=)
2: xU9qEXeCbFq2S9OvATiptXpLkeU.crl (hash: Vc64M74b39XQQ2nLqRi+oAJy8B5URUn+ndD5D14fHXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:3b:0c:02:e5:8f:16:98:38:49:6c:3f:b7:08:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Validity
Not Before: Mar 2 07:00:31 2026 GMT
Not After : Mar 3 07:00:31 2026 GMT
Subject: CN=a6f9e9e0ae4a6b0edf6ae692ad9fa06e9a4a5c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:34:f2:97:e5:26:41:95:1c:c7:6c:43:54:
8b:b1:8b:19:e6:f9:fa:46:f5:2e:bd:23:80:6d:5d:
3c:a5:78:c5:a2:59:11:7d:48:0a:57:e0:b0:18:69:
94:47:db:e2:9e:e1:2e:57:8e:b8:55:c3:b4:8b:4a:
a4:87:25:5f:74:c0:b6:de:66:b1:41:a6:0c:ce:de:
6b:7c:bc:f7:10:90:80:fa:a1:b0:5c:31:3a:d6:23:
9a:ee:cf:af:7a:f3:29:1b:cc:67:5b:9f:b7:1d:d3:
4d:32:95:56:ae:60:1d:90:f0:8b:62:c0:0a:61:19:
89:db:1f:76:f7:fc:6d:7e:69:4d:25:63:fe:f3:e6:
93:0a:20:6e:7d:2f:b7:75:5b:98:32:2d:46:9d:5f:
15:6a:e5:98:f7:7b:1b:1a:04:f4:be:d8:71:bd:cf:
fc:f9:0b:a5:30:68:37:5f:2f:ca:ab:fd:d8:cb:45:
06:3e:b4:43:c0:29:26:be:c4:b8:eb:e2:e2:38:d7:
81:50:eb:9c:6f:91:a3:a0:3f:9c:c9:14:d4:20:54:
a7:f7:06:97:e5:8f:a4:79:2c:32:d1:08:a9:67:f9:
74:dd:ce:e2:de:49:0a:80:94:ff:6c:4a:65:56:95:
90:bb:9d:56:60:61:77:1b:9b:6f:82:6e:18:76:91:
08:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F9:E9:E0:AE:4A:6B:0E:DF:6A:E6:92:AD:9F:A0:6E:9A:4A:5C:66
X509v3 Authority Key Identifier:
keyid:C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f3:fe:58:65:5a:cb:c3:dc:f2:bf:9a:a0:61:14:a3:29:02:
13:04:a7:50:6c:4f:92:db:95:ff:fb:40:1d:37:a6:a5:b8:ea:
be:1e:71:67:7c:a0:70:7b:e1:48:e5:5a:c0:e6:c4:c3:7f:7c:
25:08:2e:7c:a0:42:e8:d0:fa:b0:14:15:5a:6d:5c:0e:c3:0f:
df:05:20:94:95:d1:ea:c0:c1:c9:07:42:d5:1a:f9:c1:38:f7:
7c:32:80:54:3b:ee:46:60:60:64:f8:c2:ec:1c:1a:b7:3e:3c:
fa:33:40:a1:a5:72:ca:72:1a:4c:7a:18:cf:36:44:b4:ab:53:
43:13:0b:74:f4:4a:92:3d:b2:d4:2b:b4:e4:52:52:4a:1d:07:
6d:79:d0:a9:cc:4f:64:30:24:d2:18:7e:18:61:db:87:92:62:
86:cd:e7:a9:39:08:fb:2f:42:95:f7:19:86:5d:c7:06:8c:44:
af:4a:ec:fd:61:53:c4:46:45:f6:67:80:f7:9e:b1:52:bd:83:
cc:ab:36:1b:0f:d4:41:c3:3e:7f:12:08:e2:80:f9:b1:94:ed:
ba:8d:45:84:84:f0:8b:b4:0d:5b:51:85:b4:fc:c4:93:e8:af:
2c:9f:89:bc:65:fb:29:0b:cb:e9:7e:58:66:1e:3e:b2:e9:e8:
5b:e4:a6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:23 2026 by rpki-client