Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
File: 9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json)
Hash identifier: /eFG670rf8IcVBFUsRT8A1jHr6jm0vSw9BZdj7yFDTk=
Subject key identifier: 2B:E5:E5:CA:52:DD:3B:7F:75:81:F4:48:54:6C:91:D6:AA:3E:0C:28
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 019CAC4771D7A5318EC588D85258742BB84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:01:29 +0000
Manifest this update: Mon 02 Mar 2026 02:01:29 +0000
Manifest next update: Tue 03 Mar 2026 02:01:29 +0000
Files and hashes: 1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: mEYrV7qRIlJnPuVH2KK/s/4LsRWjSD600Vtpz7UHr4Y=)
2: mGKvGN6mzAi9Xi9OgEnQnIpovsQ.roa (hash: AZAga0gvOyoyk29F5YS9oe0dyqX933PqnZoBR7aFkQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:71:d7:a5:31:8e:c5:88:d8:52:58:74:2b:b8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: Mar 2 02:01:29 2026 GMT
Not After : Mar 3 02:01:29 2026 GMT
Subject: CN=2be5e5ca52dd3b7f7581f448546c91d6aa3e0c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:66:16:12:eb:2d:43:93:03:6e:f0:63:04:
fb:3e:23:b3:45:3a:53:f7:89:1a:24:3b:a8:0a:b2:
fe:63:3c:23:3e:12:3b:a8:1f:a8:d7:7b:5d:d8:84:
26:aa:a2:15:e1:32:f1:7a:cc:d9:d2:af:6a:13:18:
b3:4b:a4:a8:21:f4:83:c7:01:aa:fb:37:00:2e:37:
25:4f:db:a4:a2:7a:16:2c:77:a4:df:c2:4f:1e:40:
90:4e:81:30:2f:f7:ca:6c:ee:03:6b:d9:24:5d:28:
55:bf:76:64:54:f7:8b:13:8f:9a:d7:68:0b:ae:13:
fb:42:6d:fe:2e:86:05:73:f2:0c:40:c2:54:8d:4a:
70:2f:d3:20:b4:e2:1c:56:36:6a:45:92:16:02:3d:
ed:66:d4:95:89:af:cf:6e:67:5d:4c:66:22:9f:f3:
86:ff:ac:29:f8:cd:2e:9d:34:11:fe:8c:d1:bb:d8:
24:28:74:8f:65:83:68:13:dc:2d:7b:64:40:37:8d:
06:82:ca:d7:d7:8f:fc:91:9a:6a:35:6e:c4:40:42:
04:13:49:f1:36:37:96:7c:42:04:ee:05:6a:a3:45:
80:7e:cc:26:56:e9:9c:e9:a3:2c:fd:b7:3c:ec:be:
e4:62:c0:0b:af:45:37:1c:75:db:38:e8:60:a2:6f:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E5:E5:CA:52:DD:3B:7F:75:81:F4:48:54:6C:91:D6:AA:3E:0C:28
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bb:e9:f0:a6:c3:49:10:53:d1:10:0f:1b:ff:eb:ec:37:8d:
c9:ca:e0:7e:47:ec:49:2e:62:58:09:73:48:20:d7:65:5e:a4:
ae:c5:2f:85:5e:49:83:02:33:82:b0:0d:75:98:72:3d:e9:47:
d0:0f:05:eb:c8:5a:46:a1:a7:5a:86:ef:d3:8f:19:7f:9b:4d:
7d:0b:6d:25:1b:ac:92:a1:fa:4a:0d:34:99:ac:aa:9f:2b:02:
59:86:89:a6:1e:13:37:5e:fc:65:24:6e:d8:81:ed:7d:00:d4:
c8:3b:3f:ea:90:e5:b3:9a:c2:f0:2f:f6:63:4b:69:bb:c7:42:
d6:fd:7b:35:68:cd:89:b7:b2:1e:98:3f:a2:52:95:d6:b7:44:
ca:82:dd:32:ba:b8:48:cc:b0:b9:e8:fe:db:37:29:99:03:ef:
69:c8:fc:d5:04:e3:d4:e6:8d:af:fd:f0:ff:fb:9d:89:ff:44:
f2:76:af:61:77:df:5d:b4:bd:4b:18:56:a4:1b:ee:dc:fe:b5:
59:79:a9:79:20:a5:ec:ad:0c:05:29:1c:20:22:95:e0:e2:fd:
86:33:ce:fe:9e:34:e5:11:73:46:61:1a:38:22:de:d6:ad:33:
28:68:30:6f:59:6c:bc:29:d7:4c:6e:0c:0e:a3:c9:41:d2:00:
0e:18:40:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:06 2026 by rpki-client