Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: qdEKSb0cnlDFQfHN29amsAdA1+2qXWHbPurminLhzPw=
Subject key identifier: 05:A8:A0:2E:16:94:1B:2C:28:F6:83:3D:ED:26:FB:96:D6:B7:71:BC
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 019CAB3424BC90237C3879F14F106D498F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 08AD
Signing time: Sun 01 Mar 2026 21:00:47 +0000
Manifest this update: Sun 01 Mar 2026 21:00:47 +0000
Manifest next update: Mon 02 Mar 2026 21:00:47 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: SMXW+9fxl0LAWO9k77X98KTX8Gp0lF0NzJ7pnRq+GCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:24:bc:90:23:7c:38:79:f1:4f:10:6d:49:8f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Mar 1 21:00:47 2026 GMT
Not After : Mar 2 21:00:47 2026 GMT
Subject: CN=05a8a02e16941b2c28f6833ded26fb96d6b771bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:da:31:30:c3:14:16:cb:a7:f6:ae:2c:13:
47:29:25:92:ff:d8:db:cc:68:81:bd:51:1d:03:7a:
3e:9e:f6:5c:61:1f:38:03:ef:d9:41:04:a1:d3:b7:
c7:22:7a:78:52:ce:b7:62:24:48:6d:58:f1:c0:77:
ba:e1:e7:a1:fa:b4:22:4f:7a:a4:b7:50:ef:9c:37:
9d:59:03:9f:db:30:b9:c8:da:02:17:ee:39:1b:cb:
60:f8:2c:79:7a:b1:f1:12:50:2f:a2:35:c5:9d:d1:
66:00:85:8b:cb:5d:b1:25:19:36:83:81:c0:8a:09:
ea:1b:50:72:92:5d:ed:87:38:e6:cf:26:23:ef:35:
3b:25:ed:29:0c:98:69:ad:be:c9:c1:39:f7:b5:ca:
b3:b6:ec:65:72:2b:93:bc:14:ea:3d:1b:be:7b:5c:
ee:9d:bf:f3:2e:c8:ff:37:16:f4:3d:22:81:30:e6:
ee:69:c8:06:62:6c:af:37:eb:b5:72:f0:2d:6b:6d:
38:a4:67:91:99:cf:6a:da:74:30:82:0e:0c:ad:76:
c2:69:60:cf:2c:20:68:fa:5a:b1:92:34:cf:31:ba:
57:5b:b0:49:77:c4:4d:06:22:c1:41:bd:52:5f:1f:
9c:15:71:df:0a:48:45:58:da:86:4f:e7:44:dd:29:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A8:A0:2E:16:94:1B:2C:28:F6:83:3D:ED:26:FB:96:D6:B7:71:BC
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5e:db:0f:8a:ce:85:68:b7:fb:28:3f:e3:2e:94:04:bc:fc:
eb:92:d8:3b:d6:24:5f:57:87:14:34:e8:a6:30:60:db:ee:7b:
7a:c6:30:8e:7c:da:bc:52:af:18:b1:c9:0e:f1:b4:75:1a:ea:
e7:6d:cf:52:6f:f0:74:5e:bb:05:32:b5:ad:e4:d9:62:58:cf:
d9:64:9f:4f:bd:56:33:41:3f:6c:ea:3e:7e:7e:8a:34:4f:2b:
f9:df:27:a7:30:90:0b:84:51:a6:64:72:80:43:0a:c4:39:84:
de:1b:75:37:01:38:7b:e1:8c:f4:ac:db:09:39:8c:cb:bd:90:
01:3c:59:cf:88:97:00:cc:b2:e2:b9:64:26:63:c8:4b:95:cb:
21:f2:e1:7e:52:76:ff:c7:7e:3b:cd:16:3e:f7:96:a7:e2:b6:
c0:1d:41:0b:df:63:1d:af:7d:1b:79:dc:a9:2e:b1:44:ee:eb:
00:22:4f:6f:3c:d4:c2:ca:ba:51:af:9a:f8:ad:2f:c4:6a:1c:
2e:d1:f4:18:54:a0:d5:1f:1f:06:1b:8c:c2:28:a2:ec:d2:08:
ea:68:dc:c5:37:98:a9:29:c7:6b:a9:58:67:df:76:88:91:22:
a9:83:da:08:3a:8c:35:75:f3:85:85:79:72:02:e6:06:c1:85:
82:0c:ad:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:48 2026 by rpki-client