Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
File: 9YmCO6FHWAB83oc69L9H_Zw5c3s.mft (raw, json)
Hash identifier: swPjlhM6VcSpG5V0sq3v+zwMpCwnJI7c682XPXfJztc=
Subject key identifier: E2:0F:5A:F8:EB:A6:B5:D4:57:94:18:17:1A:50:DA:4E:AE:EF:8D:26
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Certificate issuer: /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial: 019CAC46FA0C9E8ED252D623CB15A6259864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
Manifest number: 1328
Signing time: Mon 02 Mar 2026 02:00:58 +0000
Manifest this update: Mon 02 Mar 2026 02:00:58 +0000
Manifest next update: Tue 03 Mar 2026 02:00:58 +0000
Files and hashes: 1: 9YmCO6FHWAB83oc69L9H_Zw5c3s.crl (hash: 97mMqeGywW3IB1eFfemqb0F6Ps0niO+PeOwEJxrWLew=)
2: OFBo8WU6Gs7COuii4ORJNULUJs0.roa (hash: oPB/MfmYFXGfvZ50KFNdFr2Mb2PYVu+UQptAAX9J79Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:fa:0c:9e:8e:d2:52:d6:23:cb:15:a6:25:98:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
Validity
Not Before: Mar 2 02:00:58 2026 GMT
Not After : Mar 3 02:00:58 2026 GMT
Subject: CN=e20f5af8eba6b5d4579418171a50da4eaeef8d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:ba:f6:3f:1a:71:ac:5c:00:06:ec:14:c4:
91:ec:f6:7d:2b:86:7c:95:1c:17:86:99:c8:8a:43:
11:e1:0e:bf:e7:b4:1b:19:27:2b:f3:77:7a:42:e1:
8b:d4:67:59:4c:f0:20:b1:38:53:c7:16:a3:9e:3b:
2d:7e:b9:63:50:f9:c1:3c:94:1e:c6:7e:db:db:3b:
4e:82:1e:2c:3c:ce:55:08:75:e7:c5:a1:5a:f0:96:
03:1a:3b:f1:d8:6d:43:19:f8:60:a8:79:0d:8d:4e:
56:9a:34:56:9e:07:d7:1e:6e:79:f4:2d:bf:6d:bf:
a3:f5:24:54:d5:8c:4f:4b:f2:33:02:9c:52:07:17:
d1:5d:bb:a1:70:2e:c5:a4:c2:24:a9:1b:fc:fb:ec:
1a:66:11:60:63:1a:8e:7e:98:17:8d:c0:e0:26:51:
f6:46:ab:44:07:0f:32:c6:2e:86:79:6a:0d:3c:7a:
09:26:c7:3c:6b:6c:7a:7b:cb:53:fb:cd:51:2b:af:
bf:53:3e:ad:37:88:91:f1:0c:7f:4a:5d:95:81:0a:
0a:d3:34:e3:f7:50:f0:f3:49:d0:c5:1f:cd:0c:66:
90:9f:ff:36:94:30:4d:10:f3:57:b2:82:57:4b:36:
ae:3a:fe:df:8f:fb:bd:54:2f:6c:d8:20:4d:ed:f8:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0F:5A:F8:EB:A6:B5:D4:57:94:18:17:1A:50:DA:4E:AE:EF:8D:26
X509v3 Authority Key Identifier:
keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:51:42:78:30:d4:86:0a:52:3d:ab:88:fc:38:18:fc:f7:6b:
fd:75:7d:b0:ed:1d:48:a9:8b:3e:56:93:1d:79:5e:73:a7:5e:
25:34:18:14:ff:08:01:2f:02:46:8f:49:67:54:7f:84:79:da:
d7:58:15:2c:f1:b4:f3:8a:5c:66:47:a8:00:94:52:a3:b5:65:
5e:b3:44:19:1b:36:4a:70:0e:d4:96:d8:ad:f5:25:16:ed:96:
ec:80:03:e2:91:c7:d4:39:72:da:11:42:ad:da:f9:50:75:44:
fb:c1:c0:36:11:73:50:81:c5:cf:49:e5:60:23:e3:8b:e2:8e:
df:7f:2e:a7:8c:04:ee:0d:36:78:c7:8d:11:ff:25:68:68:2f:
c2:92:7f:9c:b5:d8:dd:4c:45:8b:af:d2:d9:28:e8:4f:aa:29:
92:42:7c:d9:4e:d4:b2:9c:6f:3b:bb:e7:87:d3:26:a2:a7:f0:
9c:22:49:d2:91:83:d1:47:e1:ed:ae:0f:8a:91:06:f8:33:c0:
c5:8e:3b:14:45:54:c4:b8:1a:4a:ee:7b:1a:48:d1:57:c2:ec:
37:df:85:2e:47:e6:dc:e8:47:33:62:ff:7e:3e:71:65:9f:62:
a5:dd:cf:67:f0:ca:80:cd:86:0a:b1:83:b9:21:b7:b1:d0:4c:
d3:3c:8f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:37 2026 by rpki-client