Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: ddN9txkphliLd3J7ojOLKkHgTURKvYzTTVz/621AnZM=
Subject key identifier: 8F:BF:78:19:75:E4:D7:EF:9A:EA:06:4C:13:24:12:F1:E8:2C:21:07
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 019CA90F19FE054CD6C15DEE1DE226FEB241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 11:01:05 +0000
Manifest this update: Sun 01 Mar 2026 11:01:05 +0000
Manifest next update: Mon 02 Mar 2026 11:01:05 +0000
Files and hashes: 1: Qli-_KAiZO--cwXE6BiLVvkXnvE.roa (hash: XDHHjBldy51jEL7NRWc+r09QR8fWSiNl63GYDTe9i8c=)
2: dEbHBpx-Qlw4LJgcmplwQSKp84s.roa (hash: abREOFRAe+blSD0PVxwpI2VH/k4U+4z7iiH4ff/516k=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: lv2NxTQ+URkmVvLencj2twWU0wVPA3m1rHIoBniv0wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0f:19:fe:05:4c:d6:c1:5d:ee:1d:e2:26:fe:b2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Mar 1 11:01:05 2026 GMT
Not After : Mar 2 11:01:05 2026 GMT
Subject: CN=8fbf781975e4d7ef9aea064c132412f1e82c2107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f6:77:18:ae:55:01:1f:ef:12:f0:67:af:df:
8f:b0:b5:01:bd:3f:e7:af:42:97:b7:fa:0d:fc:f0:
05:2a:21:de:94:3a:91:55:84:43:73:58:6f:e2:e5:
d6:8b:57:3d:49:db:e6:77:fc:f2:88:a2:af:5c:f2:
bc:a2:db:91:b5:bf:05:27:5b:dd:a7:6b:e3:df:5c:
88:be:b9:17:fc:64:a1:c9:90:f2:b6:29:63:ea:db:
b9:b2:48:13:bb:87:31:18:4a:bd:a6:90:1a:38:a7:
ba:40:ab:c0:8a:e5:55:e1:2b:9e:50:27:4b:7c:54:
ff:a7:ac:69:2f:ab:41:1e:75:4a:00:56:51:e8:80:
25:6f:a1:9f:a3:75:43:06:1f:52:44:9d:62:dd:77:
56:dd:92:c6:44:64:9c:eb:c2:38:2a:3a:ba:6d:e4:
88:56:1c:8a:52:ef:2c:8b:b2:5a:9a:d0:33:83:18:
fc:af:be:b4:ee:2b:2e:10:e7:bd:b3:83:9a:1a:7a:
f7:8f:ae:10:8b:3b:15:0a:72:19:e0:0e:83:69:d4:
57:c2:88:3b:08:42:4f:ae:54:48:ea:80:c9:45:d9:
ab:59:b8:e8:b8:c7:1b:fc:f6:03:a2:56:a6:ff:99:
5c:c2:f1:51:28:cb:a4:39:e9:80:2b:52:39:18:76:
db:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BF:78:19:75:E4:D7:EF:9A:EA:06:4C:13:24:12:F1:E8:2C:21:07
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d5:14:bc:4d:7b:64:f5:fe:21:fe:a8:65:5e:b0:61:44:74:
e9:eb:4c:7c:7a:fa:f6:21:3b:a4:99:89:76:8d:c2:83:f8:8b:
7a:1e:a9:58:08:cb:29:33:fd:de:63:9e:df:08:6c:33:2d:5f:
6e:07:d7:d3:ad:ba:06:11:ae:23:0c:36:ff:98:2d:86:9c:3a:
2a:15:d2:f3:17:96:f0:48:87:c3:33:63:40:4a:ea:1c:ad:3b:
31:bc:9c:df:27:33:ca:4f:fd:d2:9b:dd:bb:86:4d:e2:b8:e7:
e5:8c:54:52:15:62:a2:d1:66:7a:fd:2c:aa:80:3f:5e:23:e2:
6c:92:e8:ff:bb:e4:01:b4:0d:17:95:6a:c4:e4:16:03:48:90:
1e:7d:c8:2f:4e:d5:9d:d9:c7:0d:d1:49:75:b4:bd:2e:6e:99:
d8:75:54:b7:e2:ef:11:d5:83:a3:51:58:7f:38:1e:d9:cf:42:
1c:d5:d8:f3:5a:82:f9:78:5e:81:4c:71:d7:9a:e4:29:77:f2:
58:fa:3d:71:6a:0e:a1:92:97:cc:ae:6e:89:47:ef:1d:2e:f5:
ef:7b:79:76:0b:4a:49:d3:41:07:f6:43:5c:ea:37:a8:9f:42:
59:7b:d3:13:d9:96:ca:5b:e8:3e:e3:09:8e:59:7e:2e:89:de:
5b:67:2d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:25:14 2026 by rpki-client