Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
File: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft (raw, json)
Hash identifier: p9UwyP6JCAvHRTxTrN84uaYGvp+fuzFQaZbdWZFK0+s=
Subject key identifier: CE:07:0F:07:FA:63:33:19:86:6C:CB:26:BC:36:BC:BA:ED:B3:F8:57
Authority key identifier: F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
Certificate issuer: /CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Certificate serial: 019CADC81515A86269CE485A224187BC14E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
Manifest number: 045F
Signing time: Mon 02 Mar 2026 09:01:36 +0000
Manifest this update: Mon 02 Mar 2026 09:01:36 +0000
Manifest next update: Tue 03 Mar 2026 09:01:36 +0000
Files and hashes: 1: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl (hash: JoeoDKbyFj8s3/h2wxlXsqw4ambKniuawv/gIkbYfD8=)
2: uNoepfaXDI1VoCnimpxHCf9Ihpc.roa (hash: Y1lvrGMwjV5DGLBf//Ugh3tArJ+z6zA+0q1mFnD1D78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:15:15:a8:62:69:ce:48:5a:22:41:87:bc:14:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Validity
Not Before: Mar 2 09:01:36 2026 GMT
Not After : Mar 3 09:01:36 2026 GMT
Subject: CN=ce070f07fa633319866ccb26bc36bcbaedb3f857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:5b:5d:71:c1:a0:72:1b:7b:59:45:80:cd:
54:fe:07:78:e7:03:2d:28:b7:fc:ca:98:82:2a:12:
64:1a:a2:fa:b4:02:c3:d6:e9:ac:0c:0f:3a:cf:da:
98:21:16:06:d4:8f:75:c3:8c:9e:a6:04:16:84:91:
b1:1a:8a:e9:7c:9f:9c:26:03:94:da:b0:e7:1e:b7:
4b:68:9d:5e:4b:74:3b:55:05:bf:05:7b:0d:98:25:
64:d1:b6:e2:1e:94:c0:86:dd:fa:f6:15:00:23:19:
79:47:c0:91:c3:94:ae:ed:a0:30:2a:80:cd:99:21:
e5:7c:34:0b:17:bc:c9:c3:f0:e9:01:06:7a:03:ba:
2d:d7:5d:91:0a:a1:c3:28:36:60:19:3c:c0:da:87:
3d:be:99:59:38:0f:ab:c7:1f:e3:f4:c2:0a:c4:e8:
69:35:4b:15:1a:2a:74:6d:6c:fc:68:d4:95:24:30:
85:bb:f1:37:28:fa:12:f6:ea:e5:6f:b7:ea:92:35:
13:8c:54:df:a1:70:fa:b4:45:54:05:9a:02:0b:87:
cc:8c:4a:76:a9:0f:e9:c8:46:a5:bc:e0:8b:d2:d4:
d5:ab:06:7e:76:ed:2a:c6:e1:6f:8a:c0:bd:ab:96:
94:22:0a:e6:a0:a1:f6:6f:1d:98:2f:65:b8:73:2a:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:07:0F:07:FA:63:33:19:86:6C:CB:26:BC:36:BC:BA:ED:B3:F8:57
X509v3 Authority Key Identifier:
keyid:F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:64:7b:a1:27:de:de:80:3e:89:4e:11:77:aa:82:25:5f:63:
90:a9:e3:91:7e:b6:39:9f:b2:05:fe:be:4f:09:50:60:7c:dc:
46:15:a7:21:34:84:01:4d:7f:ff:c1:89:78:1e:3d:a7:ee:e9:
5c:48:a0:0c:9f:9b:e8:18:1f:ae:41:ba:c6:1d:2e:e0:1c:29:
fe:13:8e:fc:8e:60:40:1f:22:e4:3d:5c:42:8e:f6:f5:3f:8e:
81:55:90:35:75:ef:0b:12:66:09:d1:23:19:e6:b2:a2:a6:b4:
21:d0:d9:c9:68:08:2d:19:d4:bb:38:8a:d2:15:68:32:f6:16:
d1:ea:14:ec:d8:eb:0c:5b:76:8f:a2:ac:fc:8a:45:61:db:42:
08:17:cf:d6:af:43:b4:dd:85:16:1d:df:83:6e:b5:51:ba:42:
15:58:59:19:00:94:52:0b:d6:2d:3c:bf:88:d8:da:92:d7:6a:
79:a6:53:6f:1f:b5:8a:7c:cb:f8:5f:b2:a1:e3:90:36:3d:f0:
5e:69:fb:d2:be:06:69:38:ad:89:8b:82:0b:0f:a8:8a:a1:71:
50:9a:ee:84:fc:4f:0b:25:a7:4b:e6:b5:df:4d:70:63:2b:62:
0a:8f:f3:15:77:b2:85:eb:86:ba:4c:2e:1d:4a:79:50:49:df:
4a:4b:31:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:58 2026 by rpki-client