Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
File: 9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json)
Hash identifier: wlAQDT/5txcPJQOhIP7LLP2R04JV2B3K+zUtxBbPHvc=
Subject key identifier: 8E:A0:82:42:4B:BA:5D:AE:76:78:FB:6A:14:23:77:AF:8D:8D:89:AB
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial: 019CAC46ED42ED74A77B5FE5E4E9ED8EC135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:00:55 +0000
Manifest this update: Mon 02 Mar 2026 02:00:55 +0000
Manifest next update: Tue 03 Mar 2026 02:00:55 +0000
Files and hashes: 1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: WM2XQ5T1/KJBzIkH4QIp/NE7NEiHuMQVW25qZn6WVUM=)
2: pY5anUcF6nGQjRStvwUsfXfpPT4.roa (hash: ikRAmfOVAxrB8DLsnpaLa+mv7owmfzH47WnehifEhhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ed:42:ed:74:a7:7b:5f:e5:e4:e9:ed:8e:c1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Validity
Not Before: Mar 2 02:00:55 2026 GMT
Not After : Mar 3 02:00:55 2026 GMT
Subject: CN=8ea082424bba5dae7678fb6a142377af8d8d89ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dd:52:3d:ee:57:6a:08:9f:3f:1f:ad:dd:a0:
5f:53:c5:01:f8:2f:a5:4f:bf:20:5d:bc:06:63:88:
8a:63:32:92:35:e4:61:53:43:69:ac:91:46:ab:cd:
26:25:b3:1d:bb:70:cf:76:7a:f1:de:84:7c:b2:5c:
19:77:ba:68:63:9e:7a:68:31:60:de:cc:a6:50:ec:
58:60:1a:24:92:20:aa:75:ff:1d:b8:b5:5d:84:79:
a3:1d:40:4d:7b:19:bd:de:63:89:49:b8:e0:be:49:
56:38:16:4a:dc:97:af:4d:7f:b4:31:71:6a:2e:42:
77:18:99:34:e4:8f:93:a7:39:06:60:a5:60:56:52:
b9:9d:57:85:7b:c2:61:d0:28:ea:17:1e:55:4d:35:
be:d5:15:c4:d6:78:32:37:ca:d6:46:6d:40:e7:01:
eb:f8:2e:df:93:6b:a7:15:01:2c:6e:ef:69:80:a9:
82:86:dd:0a:e0:cc:ad:2f:a0:05:52:07:79:16:03:
32:3b:e9:5b:c0:02:3c:15:a3:b1:e3:e2:83:8c:a0:
63:a9:fb:a5:f9:93:76:a6:e0:a5:eb:86:d3:d9:f1:
94:32:13:3b:67:6d:fd:46:25:ba:27:c0:90:e4:15:
15:e4:bf:66:3a:19:88:83:0c:6c:61:ed:25:ad:e2:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A0:82:42:4B:BA:5D:AE:76:78:FB:6A:14:23:77:AF:8D:8D:89:AB
X509v3 Authority Key Identifier:
keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:31:19:60:e4:bb:6a:a9:0b:ff:ec:62:b7:37:8f:4d:d8:c9:
fc:46:07:e3:9b:f7:88:bb:52:e1:fd:56:a8:f7:70:07:0b:78:
f1:b8:05:a9:cf:50:38:5b:76:63:fc:29:ac:87:df:61:f7:bc:
19:ee:79:c3:d1:a1:29:ad:c5:94:c7:04:d8:44:37:13:1d:ad:
75:73:1b:fd:72:06:74:a9:8f:48:35:d8:5d:1f:35:ba:f2:a1:
08:f4:e1:ef:78:64:a7:ab:a1:d9:00:93:83:a3:e9:d5:95:ec:
3a:04:52:9a:a9:55:37:81:ca:b8:18:81:d5:49:e4:fe:19:8f:
9c:dc:2b:ed:9a:21:8f:09:84:c7:84:ba:8a:7b:c6:d0:5f:6e:
b3:a1:29:8a:c1:df:79:db:e7:e1:30:60:59:b6:51:db:68:2f:
60:33:17:53:64:c3:1c:83:12:e4:b5:21:18:59:a2:eb:db:77:
c5:43:24:be:45:00:b5:2d:56:ed:ac:74:00:3f:94:8e:26:b5:
4c:54:80:29:00:f4:ba:ea:6f:47:0f:f8:9c:e5:1c:63:7b:3d:
8a:13:8a:82:bf:66:3a:66:59:4f:dc:53:a0:c2:29:ed:af:a4:
67:35:94:21:85:57:96:d2:94:c0:dc:af:a1:9b:f3:7c:d6:d1:
61:08:56:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRu1C7XSne1/l5OntjsE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NWU3NDIzZDNmN2IxYjJlN2FjYzFiYTFjZWUwMjQwYjdk
Njc5ZDYwHhcNMjYwMzAyMDIwMDU1WhcNMjYwMzAzMDIwMDU1WjAzMTEwLwYDVQQD
Eyg4ZWEwODI0MjRiYmE1ZGFlNzY3OGZiNmExNDIzNzdhZjhkOGQ4OWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA691SPe5XagifPx+t3aBfU8UB+C+l
T78gXbwGY4iKYzKSNeRhU0NprJFGq80mJbMdu3DPdnrx3oR8slwZd7poY556aDFg
3symUOxYYBokkiCqdf8duLVdhHmjHUBNexm93mOJSbjgvklWOBZK3JevTX+0MXFq
LkJ3GJk05I+TpzkGYKVgVlK5nVeFe8Jh0CjqFx5VTTW+1RXE1ngyN8rWRm1A5wHr
+C7fk2unFQEsbu9pgKmCht0K4MytL6AFUgd5FgMyO+lbwAI8FaOx4+KDjKBjqful
+ZN2puCl64bT2fGUMhM7Z239RiW6J8CQ5BUV5L9mOhmIgwxsYe0lreJApwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6ggkJLul2udnj7ahQjd6+NjYmrMB8GA1UdIwQY
MBaAFPZedCPT97Gy56zBuhzuAkC31nnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWw1MEk5UDNzYkxuck1HNkhPNENRTGZXZWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wMTMxNTMtYjYzYi00MDc0LWFjNWMt
ZjRkZDY2MzlmODc1LzEvOWw1MEk5UDNzYkxuck1HNkhPNENRTGZXZWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8wMTMxNTMtYjYzYi00MDc0LWFjNWMtZjRkZDY2MzlmODc1
LzEvOWw1MEk5UDNzYkxuck1HNkhPNENRTGZXZWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDEZYOS7
aqkL/+xitzePTdjJ/EYH45v3iLtS4f1WqPdwBwt48bgFqc9QOFt2Y/wprIffYfe8
Ge55w9GhKa3FlMcE2EQ3Ex2tdXMb/XIGdKmPSDXYXR81uvKhCPTh73hkp6uh2QCT
g6Pp1ZXsOgRSmqlVN4HKuBiB1Unk/hmPnNwr7ZohjwmEx4S6invG0F9us6EpisHf
edvn4TBgWbZR22gvYDMXU2TDHIMS5LUhGFmi69t3xUMkvkUAtS1W7ax0AD+Ujia1
TFSAKQD0uupvRw/4nOUcY3s9ihOKgr9mOmZZT9xToMIp7a+kZzWUIYVXltKUwNyv
oZvzfNbRYQhWKg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:11 2026 by rpki-client