Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
File: my2tSBy6VIO6qw16DM3BregyrRY.mft (raw, json)
Hash identifier: eC1UJ5mETt7sNwN9zLzwqjUu0ZkhzBfjPtWSJXykecA=
Subject key identifier: 4B:A1:A7:78:0B:32:89:84:85:96:CE:46:9A:92:0E:3A:68:93:20:89
Authority key identifier: 9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
Certificate issuer: /CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Certificate serial: 019CAAC66EB1BD601E9584CB6E243A539C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
Manifest number: 09E1
Signing time: Sun 01 Mar 2026 19:00:56 +0000
Manifest this update: Sun 01 Mar 2026 19:00:56 +0000
Manifest next update: Mon 02 Mar 2026 19:00:56 +0000
Files and hashes: 1: my2tSBy6VIO6qw16DM3BregyrRY.crl (hash: MKgi7w1WNZVVgLDJ/XjXcPsE/G/pnMPzM7G8pSZ1AgI=)
2: qi2McZp71fHBoWBI2ZHbtQCvE4o.roa (hash: i0mtBmOyDYgRrM3+GxWl4R2NJ84ChiPy81fprThNQJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:6e:b1:bd:60:1e:95:84:cb:6e:24:3a:53:9c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Validity
Not Before: Mar 1 19:00:56 2026 GMT
Not After : Mar 2 19:00:56 2026 GMT
Subject: CN=4ba1a7780b3289848596ce469a920e3a68932089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:00:cb:28:77:7e:d3:14:4a:3e:6a:d9:31:54:
93:44:83:7e:6f:48:9a:11:9f:cd:fa:95:bd:c0:9b:
bc:bd:f8:ab:03:70:b8:38:56:fa:75:a9:b6:b9:64:
d6:d3:7f:b1:4d:48:85:5d:fd:06:0e:9f:ac:b9:61:
fc:e7:fe:5e:fb:fb:84:9f:98:14:a2:97:19:ea:30:
11:bb:60:92:ea:33:7b:46:8f:87:9d:bd:59:48:c6:
2c:f5:f9:33:41:a2:9a:d2:95:91:cc:56:9b:14:ee:
09:5d:c7:71:98:14:85:07:fa:33:92:d8:4c:df:b4:
18:5b:fb:57:00:f2:c0:28:c8:a1:57:01:a5:f7:76:
0b:fb:24:00:dc:02:ed:b1:bc:25:b6:6d:65:2d:78:
12:65:57:e1:7d:30:be:38:7e:40:7e:59:4d:b8:1b:
ba:34:57:d0:64:61:01:13:cf:c8:7b:50:bd:3c:3a:
c6:49:1d:2f:a3:21:40:7d:26:2d:6c:b3:76:fa:fe:
f6:49:e4:bc:38:33:9b:90:7d:87:a9:d9:94:13:4e:
86:ab:11:e5:55:46:dd:2d:e5:63:56:ea:fa:f1:85:
76:85:04:8b:29:3e:2c:b3:34:44:ec:69:e5:3a:f7:
66:d0:f1:5c:5a:c3:ef:5a:b4:0f:dc:e3:1d:24:b6:
e2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A1:A7:78:0B:32:89:84:85:96:CE:46:9A:92:0E:3A:68:93:20:89
X509v3 Authority Key Identifier:
keyid:9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bf:05:25:cb:29:ce:e9:27:31:b8:8d:aa:23:c6:27:aa:35:
c4:e1:24:d0:78:ae:f2:9a:fd:05:c3:87:f9:d9:06:f8:25:69:
b9:39:3a:25:30:31:43:46:58:1f:f1:b4:02:8f:14:04:0f:0b:
3e:3e:89:da:1d:ff:e4:99:a7:11:09:b9:5e:6f:f2:19:7f:80:
e1:ee:a0:a6:2f:dd:21:f7:2f:69:8e:b8:4b:fe:9d:24:d8:5f:
60:c6:69:a2:aa:cf:85:51:c5:9c:fb:70:96:e3:58:b5:22:da:
5c:39:07:a8:6d:cb:1f:9a:b2:b5:47:52:4b:25:8f:5e:16:44:
a4:53:5a:bb:0a:e3:0b:f8:c4:33:95:6d:92:69:ed:0c:f2:6e:
f5:a2:a9:ba:c7:de:cf:c1:85:b8:d6:ec:a4:a0:fc:d9:f0:1d:
49:4b:7f:b7:6a:62:6b:fe:66:d1:25:2b:22:6f:0c:17:1e:c9:
a8:83:f5:f7:ac:ed:06:58:e1:eb:45:a9:12:2a:e8:57:02:e1:
58:ab:2a:b0:e5:83:0c:9f:72:e2:6c:f4:3c:93:e4:93:87:94:
aa:7a:fa:e7:4a:67:de:18:96:76:bd:e1:25:cf:97:6f:04:fa:
1b:d5:10:60:ca:97:79:2e:70:20:ca:7c:8d:9a:aa:09:78:31:
5b:fb:f1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:48 2026 by rpki-client