Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
File: 9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json)
Hash identifier: VCbXU2R9Ae4G1hdlvLWWStLu2QXRaaDjTAbIFgeUWus=
Subject key identifier: A8:80:58:D3:44:D8:A4:CA:78:DD:76:77:15:D2:73:FE:E5:51:34:3A
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial: 019CAAFD8E1B83E0FE90F67204814F003D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 20:01:09 +0000
Manifest this update: Sun 01 Mar 2026 20:01:09 +0000
Manifest next update: Mon 02 Mar 2026 20:01:09 +0000
Files and hashes: 1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: ObLf4OwuztpLWUbWGNYSNwA+Y+7zWkzm2u1E00KIsa4=)
2: CvAwcxB4NQhTMik421cY6D4GJSQ.roa (hash: bDEysHdEoYRzyx+ZtQs8J1SFqsQ1uvog9sHvqZgzUSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:8e:1b:83:e0:fe:90:f6:72:04:81:4f:00:3d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Validity
Not Before: Mar 1 20:01:09 2026 GMT
Not After : Mar 2 20:01:09 2026 GMT
Subject: CN=a88058d344d8a4ca78dd767715d273fee551343a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:64:03:4a:2c:24:59:7a:06:ca:53:40:83:
69:38:ad:de:af:7d:b7:ad:65:2c:94:57:24:7a:ef:
8a:ab:41:61:2c:a0:03:8d:61:42:59:0e:51:9f:82:
c6:30:fd:e0:73:4d:7b:08:94:39:f0:5f:f3:6c:97:
d2:26:d5:da:c7:e2:05:80:b4:98:3e:9b:a0:0d:82:
f9:4f:45:a8:1b:1a:06:ad:cb:11:ce:69:f7:2f:e1:
62:1b:38:cd:fa:05:c7:7a:01:00:b5:ad:0f:c8:62:
b7:5d:1f:fc:04:64:fd:a2:09:04:9f:e6:48:83:8e:
00:09:79:e4:9c:5a:72:c9:2b:c4:59:76:17:d3:ad:
84:e0:9a:d8:e5:0d:82:b7:4b:a5:3f:97:a5:d4:44:
9c:af:6a:13:5b:1c:89:42:35:1f:22:51:20:c9:5a:
4b:65:5c:9b:ed:e5:6a:20:79:86:74:36:46:d8:fe:
9a:11:6e:4e:59:d0:99:fe:55:1d:f3:18:ab:b5:ae:
97:b9:31:a4:6d:6c:b5:95:e8:8d:6c:67:2a:a9:94:
e8:13:40:0f:25:13:e7:0b:de:37:f1:33:bb:61:c6:
0e:b3:f9:50:09:6f:35:db:75:67:94:37:81:5e:61:
5b:48:75:76:74:bd:97:76:14:3d:64:e9:15:fc:ce:
e4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:80:58:D3:44:D8:A4:CA:78:DD:76:77:15:D2:73:FE:E5:51:34:3A
X509v3 Authority Key Identifier:
keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:26:52:36:6f:44:26:50:34:47:d8:05:dd:a4:54:b8:7e:cf:
ea:40:e6:56:ca:79:e2:09:6a:df:f6:00:1a:cb:ba:f0:15:d4:
dd:d3:a3:f9:9d:00:fd:54:60:46:22:f9:30:5e:fa:bb:20:fb:
4e:69:c2:5d:55:4a:a0:ba:59:12:84:c0:e3:a1:83:1d:d7:b0:
f5:fe:ea:9a:60:f5:21:2d:89:4b:d0:38:b1:61:1f:38:e6:43:
71:f8:fb:0d:17:fc:d4:a3:a1:c0:0d:be:1c:ec:80:65:ba:52:
a1:3a:19:10:17:6a:08:44:3f:06:c0:df:38:7b:63:9d:59:ed:
3f:d9:28:c8:95:a5:31:52:3f:67:c2:42:17:8a:50:e5:1c:20:
5c:69:ae:05:65:92:ce:d5:07:23:12:04:3d:db:41:62:75:1a:
d7:ec:af:71:ca:e2:24:91:14:3c:cf:34:70:f2:83:d4:93:db:
2b:45:48:4b:db:99:e7:c9:65:6f:f5:cf:cb:d5:5e:9a:ea:4b:
73:b0:ef:03:82:ea:96:22:71:9d:65:00:30:fc:c1:56:a3:4d:
cd:84:31:8c:f3:cc:ee:1a:23:25:10:27:5f:a1:57:ca:f9:0e:
68:59:0c:b3:ea:55:b3:fb:af:6a:59:60:39:5c:df:7a:a5:6c:
1c:93:f1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:17 2026 by rpki-client