Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier: LRKw5L9mJ7mItA+bBULL4/yxzzeoFjQGP++lJPkGVTA=
Subject key identifier: 38:9B:BE:38:A2:E2:53:E3:F2:9D:9C:E6:1E:DA:22:76:6E:E9:91:0B
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 019CADC791786626AA50472D4414D4F31D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number: 1433
Signing time: Mon 02 Mar 2026 09:01:02 +0000
Manifest this update: Mon 02 Mar 2026 09:01:02 +0000
Manifest next update: Tue 03 Mar 2026 09:01:02 +0000
Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: DxdgXMqEjkNGORmXdS9vsdC6VGJKvHDCRjBZLxInAts=)
2: YlUOJaq43NpuLvhyIjdUpjtIh5k.roa (hash: CQMT/ddbiL7hLzG2QkDs7berkHQrguNEVB/e2zlXUlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:91:78:66:26:aa:50:47:2d:44:14:d4:f3:1d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: Mar 2 09:01:02 2026 GMT
Not After : Mar 3 09:01:02 2026 GMT
Subject: CN=389bbe38a2e253e3f29d9ce61eda22766ee9910b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:98:c0:ca:26:e4:39:ea:d4:62:0a:4b:ba:
c7:35:28:c2:03:45:ad:b2:13:2f:8b:5d:f0:31:43:
38:e3:7d:11:5f:7e:cb:f8:d6:d8:42:cc:73:20:ae:
0f:37:87:97:3f:13:61:34:fa:a9:5d:6e:91:8b:9b:
c0:36:16:63:c1:be:56:d1:8d:90:b8:83:97:7c:ca:
40:d9:93:aa:bf:be:00:7b:8a:59:fc:c8:ab:96:54:
c8:47:4c:f5:36:37:57:88:50:91:20:e4:9d:79:18:
40:95:58:c4:35:78:c3:f9:9f:54:94:27:38:7b:fc:
c0:7a:43:8d:9e:45:c3:dc:c2:17:c6:2e:0b:0e:d0:
73:c9:b2:b8:cd:92:00:b4:39:80:73:27:01:f9:be:
ef:f0:2e:58:a3:e7:8b:d7:81:f7:95:cb:58:b7:21:
c2:ae:86:97:56:f6:75:fd:a4:ef:a2:f0:41:c0:af:
8f:b3:88:41:1e:c8:f5:03:9e:b6:14:19:82:0c:40:
dd:0d:fb:86:fc:7e:61:be:fa:87:6f:9e:02:b2:c7:
5f:ad:14:dc:11:b0:a8:8f:6c:f2:6a:72:00:13:99:
ca:12:75:61:cd:c9:8e:b7:cb:35:a0:6f:42:54:d0:
c8:d6:c4:da:68:91:50:20:9a:2e:5d:5d:0f:be:c6:
a8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9B:BE:38:A2:E2:53:E3:F2:9D:9C:E6:1E:DA:22:76:6E:E9:91:0B
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:79:ec:c8:70:97:af:8e:ef:6b:b4:a1:1b:f9:be:5c:cf:d3:
35:91:5d:76:d5:0b:52:b0:2e:10:f6:31:04:ba:a2:1d:33:b1:
73:21:08:4c:8d:c0:f4:ef:99:ee:b1:a9:d5:33:01:cd:ce:e3:
48:a6:d5:33:78:8e:ed:33:6f:18:13:e3:ff:c6:dd:f5:a7:2d:
c9:ef:76:3e:26:0c:c2:0d:bd:ab:04:e2:08:fc:db:cf:ed:f7:
86:fd:13:23:1d:45:f2:89:8f:dd:b6:e5:e2:1b:af:6c:29:61:
26:95:15:97:5d:49:88:1b:74:7d:23:b0:ab:33:d3:e1:d5:ae:
68:45:b3:c6:90:10:90:01:01:4f:43:6b:ef:f2:b6:a0:6c:26:
5c:60:7e:ca:a7:c6:dd:76:18:02:73:ba:e4:b6:af:41:3d:5e:
0a:9e:33:02:4f:e7:a7:01:bf:8e:d2:c6:b1:f0:0c:06:4f:73:
a2:fd:00:ef:ef:26:1f:51:3b:32:a0:59:29:31:21:43:34:b3:
72:ff:bc:fe:28:cd:13:cc:51:9f:cd:83:73:9c:fc:ef:d9:1e:
35:a8:96:7e:4e:f0:f5:04:fd:02:99:15:1b:69:ac:2a:10:62:
68:94:f9:ed:ee:ab:5f:38:49:f9:d2:45:ff:cd:fa:2d:8c:6f:
54:2f:fa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:56 2026 by rpki-client