Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
File: 9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft (raw, json)
Hash identifier: pDiVRDbCOLBJv0BS81O964kE2LSd9vV98035GiAyHTc=
Subject key identifier: 95:C0:DC:49:85:87:B3:AA:50:38:D5:C2:8B:A8:4D:13:CA:BC:32:B6
Authority key identifier: F4:B2:51:1F:B0:74:F5:E1:65:85:35:BA:46:1E:45:80:DB:D8:41:37
Certificate issuer: /CN=f4b2511fb074f5e1658535ba461e4580dbd84137
Certificate serial: 019CADFE559D06F0208233638DCD686AFA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
Manifest number: 84
Signing time: Mon 02 Mar 2026 10:00:52 +0000
Manifest this update: Mon 02 Mar 2026 10:00:52 +0000
Manifest next update: Tue 03 Mar 2026 10:00:52 +0000
Files and hashes: 1: 9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl (hash: QmDbd2/G83rLZ6xTpBerNEYxVx1Z2lp6MerDof/wK9Y=)
2: w4OPW1w1cwaWMj4uXqpkKkiEaKk.roa (hash: jUe+lcC4F+1K+YbOo4TiwqXw96cjr2eJwGRjPOVvNjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:55:9d:06:f0:20:82:33:63:8d:cd:68:6a:fa:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b2511fb074f5e1658535ba461e4580dbd84137
Validity
Not Before: Mar 2 10:00:52 2026 GMT
Not After : Mar 3 10:00:52 2026 GMT
Subject: CN=95c0dc498587b3aa5038d5c28ba84d13cabc32b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:80:fa:e7:61:7f:c3:37:eb:03:e2:83:18:
9a:f5:e8:c5:5c:61:77:3c:3c:e4:65:ea:91:fc:04:
51:62:aa:94:cd:04:df:91:a4:c2:7a:17:b7:49:17:
4d:0c:b4:b8:df:d9:cc:39:e0:0e:ab:1b:d8:ad:4f:
5a:00:63:41:b8:bf:bd:be:1c:75:f6:df:6d:f5:db:
f6:ba:72:e8:ec:87:44:1d:4c:f9:64:13:7f:a2:ad:
11:95:62:9f:de:9b:95:fa:bd:d0:57:48:fc:26:b7:
23:89:fa:07:89:9b:67:b5:2c:9c:33:09:4c:47:9f:
db:30:ce:92:7a:98:a6:b2:94:a1:3b:97:a2:17:95:
07:9d:fa:d0:68:a1:65:6f:4b:f2:dc:d8:e4:05:11:
28:fd:33:88:d8:1c:bc:52:52:90:3e:01:19:76:88:
e2:e6:89:28:9d:97:c0:5c:96:3b:fe:72:e8:7e:2a:
13:4e:36:ad:9c:8f:b3:1a:5e:9c:71:3a:75:34:fe:
cd:12:02:54:1d:a5:94:d9:09:02:49:b3:b7:b5:7d:
67:ae:32:00:50:9b:3f:cc:5d:b0:17:78:03:48:14:
4d:c6:42:40:ff:77:4e:c9:c1:fd:e5:57:4e:6b:8e:
74:f4:5e:17:1e:f0:0b:50:d5:1e:1c:45:10:2d:d6:
a0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C0:DC:49:85:87:B3:AA:50:38:D5:C2:8B:A8:4D:13:CA:BC:32:B6
X509v3 Authority Key Identifier:
keyid:F4:B2:51:1F:B0:74:F5:E1:65:85:35:BA:46:1E:45:80:DB:D8:41:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9e:0a:cb:a9:c0:b2:a7:15:11:0c:5a:05:bb:92:d3:2c:10:
bd:fd:9a:e0:6a:db:d4:0b:0c:98:38:57:3d:41:a0:4f:ed:d4:
c1:08:e3:49:2e:ab:14:51:2a:6a:b5:33:d3:1f:88:c4:b6:05:
3d:b2:06:ba:3f:06:4c:6b:f1:3f:8e:10:eb:11:e8:68:92:fb:
0b:b7:a2:5f:65:eb:b5:82:71:77:dc:39:a1:95:71:2f:f5:69:
2a:04:2a:61:d5:3b:6c:61:7c:4e:2e:08:e4:98:a6:cb:ff:4d:
4c:fc:6c:1e:a5:72:11:b8:2d:10:4a:a5:5e:e6:be:18:50:14:
85:dc:24:0d:f6:58:c3:00:d1:52:b2:52:92:da:77:2e:da:6d:
0d:54:ee:30:98:32:a3:be:ba:bf:0c:0c:37:b2:70:80:8f:11:
78:18:fa:32:77:10:e8:15:25:2a:f0:4c:62:57:65:75:5a:d6:
f7:a2:78:7f:9c:92:da:65:99:3f:8c:4d:bf:9b:25:33:9b:f2:
f0:0e:ca:19:03:6f:b8:6c:96:b0:29:fd:cd:a8:0b:04:76:d0:
ea:ce:f1:e9:0b:76:37:ad:7c:7b:6b:7f:c2:1e:ab:cc:cc:13:
ab:ef:c1:ba:05:92:81:4e:6b:3f:74:e5:76:5c:31:0d:c7:8c:
f0:7d:15:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:22:37 2026 by rpki-client