Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
File: 9pRmi6ds9VDEE5wXMAFgB33OoFk.mft (raw, json)
Hash identifier: Fntg7EuQRqxcUgQGPlZUsImCiNk0rGBQhfIV3GoVvUA=
Subject key identifier: D3:E1:F1:6A:5D:EA:BA:C6:9C:CA:65:E4:D6:1E:A3:CA:CB:EE:4D:D8
Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Certificate issuer: /CN=f694668ba76cf550c4139c17300160077dcea059
Certificate serial: 019CAC46811C11EFE732315B1959A7CBABEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
Manifest number: 11BF
Signing time: Mon 02 Mar 2026 02:00:27 +0000
Manifest this update: Mon 02 Mar 2026 02:00:27 +0000
Manifest next update: Tue 03 Mar 2026 02:00:27 +0000
Files and hashes: 1: 9pRmi6ds9VDEE5wXMAFgB33OoFk.crl (hash: S+OpMWdhNloB9USGPhXiNTpHpDET/WCWH9KNZJIXi6U=)
2: orL4sli2jaSeBff9va-I5ykDyO4.roa (hash: X71IZvpi5dNFJsBMRCrrWRzDFuE1IqQEepJ3uFR5Q4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:81:1c:11:ef:e7:32:31:5b:19:59:a7:cb:ab:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f694668ba76cf550c4139c17300160077dcea059
Validity
Not Before: Mar 2 02:00:27 2026 GMT
Not After : Mar 3 02:00:27 2026 GMT
Subject: CN=d3e1f16a5deabac69cca65e4d61ea3cacbee4dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:d9:83:05:88:23:4b:16:d5:be:1c:0e:02:
d7:28:7c:38:53:60:fa:c4:ec:34:07:36:80:d7:bc:
2a:76:62:e6:ac:98:f2:d0:54:74:cf:4c:96:f8:2f:
30:4e:a5:cb:18:0f:45:c6:a3:10:35:b6:13:e7:da:
c1:de:f6:27:f8:53:ec:01:5b:4f:07:45:0d:0c:57:
52:b1:38:06:8e:48:a9:7d:e6:35:7c:ad:1f:ab:e9:
15:49:a9:83:05:33:5c:d0:13:80:2d:42:2b:94:0a:
55:67:b9:f1:f7:05:70:65:dc:2b:d6:30:12:15:df:
59:70:3e:f6:e2:12:2c:bb:e7:bb:90:3b:76:8f:46:
47:e3:9a:ed:aa:bf:15:0f:ad:89:f9:c3:1f:21:5f:
cd:58:50:bb:12:f4:95:ce:ec:3b:95:91:4c:ea:f3:
9b:8e:93:24:08:95:4e:b4:fa:ee:aa:6e:a3:b8:27:
5c:50:4a:47:e2:bf:1b:d0:1d:23:aa:09:bf:dc:97:
fc:51:f0:c9:84:b3:b1:bd:72:25:0e:8b:13:16:67:
ee:8f:b1:03:24:a8:09:a3:98:38:be:51:76:a5:db:
ca:8b:5e:3d:fe:ca:95:e6:1f:e8:24:ab:e5:48:94:
87:00:dd:f5:70:b6:8b:ce:10:4c:3f:0e:19:ef:2c:
1f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E1:F1:6A:5D:EA:BA:C6:9C:CA:65:E4:D6:1E:A3:CA:CB:EE:4D:D8
X509v3 Authority Key Identifier:
keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d3:46:01:10:17:90:fd:a6:40:49:7c:15:04:a4:a9:cb:50:
e6:f8:e1:2c:77:c5:b1:27:3d:96:a2:80:1b:04:29:26:5e:52:
0b:52:50:e1:a0:fd:3e:6e:59:6d:2a:f7:f6:dc:d4:ff:2f:2f:
e1:7a:e3:de:f0:43:cc:a8:76:73:7b:83:93:19:dd:12:f1:f0:
16:28:1b:29:ff:6c:27:90:4d:d7:e6:bb:da:ef:7d:78:49:80:
e9:43:1f:a5:fb:d7:55:ed:68:68:8c:92:31:63:a8:15:ef:dc:
36:40:ba:da:2f:d0:64:7f:79:78:98:ad:b9:05:7a:89:20:ae:
87:75:74:f4:59:aa:d4:03:4a:37:99:26:8e:4a:bb:7c:e5:59:
82:c1:40:3b:f0:fc:c0:34:7b:37:91:9f:1c:5c:52:f3:51:25:
92:5b:82:c4:e8:06:f5:9e:05:bf:f2:0c:b0:5b:da:47:3d:fb:
da:d8:24:84:ea:6c:a4:21:91:4b:be:7e:9e:97:7f:38:ee:96:
ec:de:0c:9f:4f:a6:21:fe:71:53:45:67:f7:21:48:37:88:1e:
c4:74:a3:90:ce:6f:9d:c8:d2:2c:3a:7f:dd:51:fa:b8:db:0f:
f7:56:5e:8c:b7:e0:ee:da:81:6c:28:f3:c1:d4:5b:88:6a:39:
7b:7e:12:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:11 2026 by rpki-client