Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File: 9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier: zhx+higEA7K+Rn/pdqslKg9OOY23Lkw9fX5oaQHqJFk=
Subject key identifier: 4C:AC:30:76:D3:88:DC:8E:12:21:48:63:50:AA:C2:21:C0:D4:AA:8A
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer: /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial: 019CAC0FC044D62E517535217C3164F2B03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number: 0552
Signing time: Mon 02 Mar 2026 01:00:39 +0000
Manifest this update: Mon 02 Mar 2026 01:00:39 +0000
Manifest next update: Tue 03 Mar 2026 01:00:39 +0000
Files and hashes: 1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: lI5WqRzQFYrDLUQAE6oEJ9oapTeCHMnqXUmoSVpf/Ak=)
2: q_PyfNokBeIwV9ZVtxUDykAzbyo.roa (hash: nCsivWX18Ek0Fvcd2OhF9dAgd1gXwooWGtpWmt/HjOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:c0:44:d6:2e:51:75:35:21:7c:31:64:f2:b0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
Validity
Not Before: Mar 2 01:00:39 2026 GMT
Not After : Mar 3 01:00:39 2026 GMT
Subject: CN=4cac3076d388dc8e1221486350aac221c0d4aa8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d1:d5:c8:4b:2a:a2:ce:d9:e2:cf:16:55:73:
84:ab:46:7b:03:45:5e:85:94:ca:60:e0:b3:00:b7:
17:51:ae:f2:6a:96:11:56:91:2c:64:4a:4b:82:7a:
1c:d3:6b:12:f9:2b:3e:74:2c:6f:d9:56:ad:6d:c9:
ca:d0:bf:b9:53:66:11:83:33:f9:d2:0f:80:a7:68:
1b:6c:c2:45:d8:35:4a:11:1b:87:e2:d6:aa:db:9b:
58:da:cc:d0:d5:46:cb:b8:d1:d5:72:2e:03:59:3f:
a2:f4:2c:1f:aa:01:50:f4:57:ed:24:1a:84:0e:a0:
7e:bc:6c:18:7d:cf:70:22:9f:dc:9c:8b:b7:e7:4f:
64:f7:9f:cc:f4:11:5d:63:11:b9:51:06:c7:4e:e3:
ab:2a:7f:19:c5:87:3c:dd:df:d1:28:77:71:2e:57:
ff:bd:95:99:10:1c:07:91:e3:c0:c8:06:b0:29:71:
e6:11:f1:0b:00:4d:0d:36:7c:a5:e5:de:b2:f5:ab:
d9:2a:5c:4c:c9:b6:7b:90:54:1f:64:59:89:df:df:
1f:75:3b:fb:e8:76:9c:76:f5:d7:f6:e8:72:99:10:
46:1b:eb:96:8d:27:b8:20:92:9c:9e:16:a9:d8:47:
12:a2:cd:f9:1b:8a:c5:2c:9d:15:07:60:6b:9a:f1:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AC:30:76:D3:88:DC:8E:12:21:48:63:50:AA:C2:21:C0:D4:AA:8A
X509v3 Authority Key Identifier:
keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:33:0d:66:4c:19:0b:ab:5d:1a:88:ea:00:15:9b:98:9b:72:
74:2b:18:32:51:9d:37:94:86:ac:3f:bd:f4:c2:cc:67:27:e0:
23:33:bf:ab:67:6c:82:7b:a3:95:02:b5:0e:07:ea:35:87:4b:
56:b9:30:18:7b:f3:71:6d:35:b2:a1:03:cb:e7:0b:d7:5a:ba:
e3:17:c5:dd:77:ce:d3:fa:92:aa:11:1c:46:75:79:3e:15:af:
cf:bb:c7:19:b2:27:88:b0:b7:56:8e:a4:a4:a7:33:63:0c:8a:
bf:65:a0:2a:2e:fd:47:ce:3e:90:79:cd:7c:4d:34:bb:cb:60:
54:26:20:2d:1c:b1:7f:cb:66:e8:e4:77:0a:56:03:9b:14:91:
e5:18:ce:96:02:66:c8:13:81:a1:32:d3:3c:21:d8:6e:1e:41:
5d:3f:79:a3:8e:0d:7b:9a:ae:85:7c:e9:62:41:61:b2:c2:ea:
d5:f5:f5:f7:3b:cf:13:3f:27:6d:a7:8e:e7:be:ee:42:fd:bd:
db:93:6e:20:cf:43:69:bf:a6:7b:9b:af:04:d7:31:69:0c:e1:
ed:6c:0f:07:d2:08:9a:70:80:d6:ef:38:ed:6e:99:ba:14:7d:
6c:fd:5e:5e:c9:4b:00:62:2c:9a:81:b8:71:bb:d5:e8:fd:1b:
90:ff:f4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:39 2026 by rpki-client