Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
File: 9TRtPtvsbacngHIsCkGr7qY2Ydg.mft (raw, json)
Hash identifier: YkrO7Ibb3OfR7f8KZS5od+i5/DJr3rDZ/OrGAyphypc=
Subject key identifier: D5:3B:94:F8:66:2E:6C:B3:BC:10:FD:00:6B:22:02:DC:EF:7D:C1:4A
Authority key identifier: F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
Certificate issuer: /CN=f5346d3edbec6da72780722c0a41abeea63661d8
Certificate serial: 019CABA1F509A6FBD25B71F2BBFB2B9C2448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:00:43 +0000
Manifest this update: Sun 01 Mar 2026 23:00:43 +0000
Manifest next update: Mon 02 Mar 2026 23:00:43 +0000
Files and hashes: 1: 9TRtPtvsbacngHIsCkGr7qY2Ydg.crl (hash: uiu93gAOo6cy09m/czomyuC22UmHGJY6oOW/Gj25Knc=)
2: D6pbu6PuaXGUO72aluwouFmWjyE.roa (hash: 8nTR6hgWB05NUmie1kc3rGQpyUGmaI7APNhiLwhFbGA=)
3: rcuhAyb47ghJSUkGluQz5xbi7a8.roa (hash: dSp7RJi/mX+RduoQcYjQOlir9QxlgPqiE3UuXIucR2M=)
4: tR_zS3A481vfOfnyyYvyFxLHia0.roa (hash: Qhq0h0WmbkiB7Z075UwkzQfNFRsgPnPMZNA9izf97NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:f5:09:a6:fb:d2:5b:71:f2:bb:fb:2b:9c:24:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5346d3edbec6da72780722c0a41abeea63661d8
Validity
Not Before: Mar 1 23:00:43 2026 GMT
Not After : Mar 2 23:00:43 2026 GMT
Subject: CN=d53b94f8662e6cb3bc10fd006b2202dcef7dc14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:1c:91:de:98:be:a3:71:66:c0:0f:76:6e:
68:e2:87:06:b8:41:f3:7a:c2:28:06:b6:a7:a0:82:
61:5a:70:89:96:57:8c:15:53:d1:05:3f:61:7d:50:
b8:2c:cd:5b:fa:37:60:90:c1:74:8f:de:b9:83:5e:
9e:fc:46:f7:b7:b2:62:02:02:8d:02:8b:63:3c:df:
75:63:45:d5:3f:31:d3:dc:7f:94:be:af:77:17:fa:
25:2e:ac:7f:13:65:95:ed:ce:c4:51:6f:e8:85:fd:
09:a7:b8:dc:d5:d0:b7:00:79:cb:44:34:1e:f5:65:
8e:1f:a0:4b:f8:42:32:e4:9b:c6:a4:55:d0:ab:8d:
4a:47:66:fd:2c:c7:5f:d4:04:cf:d6:54:42:ae:43:
0e:d2:73:96:98:58:0d:dc:e6:74:0a:46:cc:4a:f3:
0b:06:bc:4a:4c:a7:6f:e0:d5:c0:19:62:72:30:5d:
22:f1:83:1d:fb:ba:2e:40:72:2c:3b:d9:1a:d4:72:
db:e5:24:f7:3b:41:de:4f:af:d4:1f:24:e4:cd:f3:
1e:8c:10:12:d5:7e:ca:69:39:61:d7:fb:2e:25:1f:
61:94:f4:f1:eb:94:3b:71:a1:13:63:5b:8f:11:72:
d2:82:22:7b:a3:53:e7:b5:3b:48:20:03:b7:ba:73:
f5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3B:94:F8:66:2E:6C:B3:BC:10:FD:00:6B:22:02:DC:EF:7D:C1:4A
X509v3 Authority Key Identifier:
keyid:F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b2:6e:29:7b:12:fa:c7:fc:24:d4:f3:24:08:b8:a2:df:d9:
93:91:84:1e:0a:96:46:4a:2a:d8:12:f5:14:fd:b8:c5:9c:f6:
e5:95:ed:16:f9:bc:f9:7d:07:ad:8e:e3:d5:1b:a8:c9:57:e4:
bb:63:21:c6:64:ee:e8:ab:48:52:92:8e:aa:6b:5f:df:91:cb:
a7:20:c0:c0:f9:18:9b:ba:fd:42:d8:3a:3d:cb:9b:c9:4f:cc:
8e:da:88:8d:a3:40:57:b0:33:01:2f:9e:70:76:36:d7:34:91:
00:48:9a:d9:7b:dc:03:d1:cd:36:c1:4c:7e:ce:8a:61:79:0a:
c1:20:81:60:a7:5d:71:1c:e2:7f:74:76:45:cc:8b:c4:a5:78:
7f:04:3e:62:f5:2a:9a:e5:ba:c7:7f:fa:58:87:87:12:19:87:
82:90:15:48:07:91:bb:a8:c4:fb:38:4d:6a:0a:50:5e:63:6d:
e6:20:28:61:36:5e:bf:23:b7:bb:a7:be:2e:10:15:a5:ca:1a:
79:18:e4:d0:0d:35:27:3f:4a:d7:dd:e3:01:0d:b4:18:a5:df:
7a:25:09:0f:d3:73:a4:12:db:99:e2:fa:2f:bf:ce:e6:31:47:
8a:98:80:e6:f6:47:c4:a4:55:65:12:32:0d:c7:bf:68:a9:61:
37:da:30:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:21 2026 by rpki-client