Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
File: iD9yYGUAJrlzoYp_PplY0yHs4ds.mft (raw, json)
Hash identifier: wOcVKPse6ezKLOoTl5ln/8d2D6knfIomdfMukO8Xb98=
Subject key identifier: 2E:10:4B:41:39:2D:C2:C1:7F:30:5D:40:22:9B:63:4D:8F:AB:20:66
Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db
Certificate serial: 019CAEA2F5961D4A4E27B7C71F2438E6BFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
Manifest number: 0292
Signing time: Mon 02 Mar 2026 13:00:41 +0000
Manifest this update: Mon 02 Mar 2026 13:00:41 +0000
Manifest next update: Tue 03 Mar 2026 13:00:41 +0000
Files and hashes: 1: _nHQVX4gUfRcsyUXq5yHaGKdYhU.roa (hash: R3LVcKNvDMfvVqa7EK825MNQi2hSPcfWJhILpOzo+sU=)
2: bZGmBUJyBwx1sWA4_0env9myjwE.roa (hash: 4tsqiBWMFE9lEeiy6ibqGVOqXOKllflXzZwV282QLH8=)
3: iD9yYGUAJrlzoYp_PplY0yHs4ds.crl (hash: BB8DVgf8yZ3LvB1bi4TCaH81RvBOAyiXBy6IgNDUUyQ=)
4: yWPZuql0MvhSm3JMA1hMhAx0qW8.roa (hash: 2i2jlPPD7IE9jQ4n5YA8j4oeQ4N7jBY19i7lQ4cGyLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:f5:96:1d:4a:4e:27:b7:c7:1f:24:38:e6:bf:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db
Validity
Not Before: Mar 2 13:00:41 2026 GMT
Not After : Mar 3 13:00:41 2026 GMT
Subject: CN=2e104b41392dc2c17f305d40229b634d8fab2066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c3:dd:11:43:5d:a5:bd:dc:8b:7b:f4:2f:ea:
1c:cf:1e:1d:11:c6:06:c3:99:94:ef:04:ff:58:f7:
63:93:c9:a3:c3:8d:f3:9b:2f:df:8b:fa:0b:cb:ad:
6a:37:d7:73:cd:6c:15:9a:88:33:5a:86:b3:f0:d5:
66:2b:79:42:ab:3b:d7:09:a7:2a:f6:21:e1:27:45:
19:60:3c:c5:a1:12:a0:e2:28:c7:d1:24:be:b7:e5:
2f:8b:44:45:de:33:59:16:b8:cc:bc:73:a0:e4:3b:
39:48:8a:38:8d:b0:3a:af:9d:cf:66:d9:ad:5f:75:
ff:2a:ac:78:9c:eb:82:99:2f:06:43:24:8d:5f:bb:
55:eb:58:03:31:79:9a:59:17:e7:59:ac:cf:f9:d6:
07:af:da:65:af:c6:dd:f5:02:9e:1e:ce:e0:a4:23:
44:e1:a3:84:8a:57:df:91:26:6f:7a:be:9a:55:46:
61:a1:2b:a6:56:db:5b:68:e0:36:87:0b:8b:06:27:
d1:22:3f:5d:a3:e3:d2:3c:b6:5e:61:df:6f:dd:c2:
36:9a:0f:a2:65:5e:2e:49:bc:cc:d8:2e:49:6c:47:
92:f5:27:67:23:bd:e6:b1:98:d4:b4:02:b9:b5:59:
de:a2:18:1d:d6:c6:22:a4:d9:99:05:74:35:fa:19:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:10:4B:41:39:2D:C2:C1:7F:30:5D:40:22:9B:63:4D:8F:AB:20:66
X509v3 Authority Key Identifier:
keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8c:32:94:b2:d5:ff:f2:15:64:70:b7:4c:75:fc:05:69:6f:
48:09:32:5a:28:bd:d0:69:9b:c8:bf:06:2f:27:26:a1:ca:b6:
e2:79:c2:9d:31:8e:a6:ef:53:11:d9:f7:23:b0:89:a9:a1:66:
94:c3:68:9a:36:4c:25:b8:07:d2:89:d1:1d:be:4f:c1:0f:11:
6b:9f:30:95:e5:22:d7:52:d2:30:3d:86:02:44:39:b3:84:36:
b1:b1:de:13:9e:8c:c0:dc:a7:36:13:f6:08:12:83:a9:51:95:
a8:30:eb:4c:5b:0c:14:8a:5c:51:d4:e7:a5:20:3d:2b:6f:5e:
ba:08:97:7e:a0:b1:9a:4c:76:ec:6d:94:68:4e:14:4e:4b:03:
81:da:13:de:64:2f:81:13:be:ee:64:30:c2:f7:b2:03:a3:b5:
9f:57:c9:ed:14:94:8e:02:a4:9e:f7:39:6e:d2:9f:89:79:89:
4b:97:77:34:ea:87:43:cb:68:5f:ab:bd:3a:ae:e6:f9:d0:ba:
e0:cc:b2:7c:26:6d:ef:de:80:a9:cd:9b:16:0c:1a:ba:c3:34:
cb:ea:2d:31:b0:93:4a:2f:56:dd:99:38:14:f8:b1:a3:b0:ba:
4a:61:d0:a5:e8:ca:75:3c:8d:dd:e5:89:d9:94:4e:7b:80:5a:
0d:74:a0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:39 2026 by rpki-client