Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
File: 9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json)
Hash identifier: Ug//BXFLVfbDdsT6QnWR4pBPH71Ft5qm68LqBiVtiQ0=
Subject key identifier: 49:AA:2F:C8:05:56:C7:FE:4B:6A:93:CD:AF:98:B0:EF:50:06:D0:A3
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial: 019CACB496528A79B9F1B71FCD17A7CAF53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 04:00:41 +0000
Manifest this update: Mon 02 Mar 2026 04:00:41 +0000
Manifest next update: Tue 03 Mar 2026 04:00:41 +0000
Files and hashes: 1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: BpDSpxKVkEsB6twb3ZYiH7fe4WW7pYUSPGO86GMADg8=)
2: smlZ7JTHvm4P3nZNzZsryZ_yA5A.roa (hash: +VBNM06YqR+uhNJp3b1HBKPNStgs2sJGwRLlTNxj+ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:96:52:8a:79:b9:f1:b7:1f:cd:17:a7:ca:f5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Validity
Not Before: Mar 2 04:00:41 2026 GMT
Not After : Mar 3 04:00:41 2026 GMT
Subject: CN=49aa2fc80556c7fe4b6a93cdaf98b0ef5006d0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:e0:11:85:e4:eb:0b:95:22:cd:89:1f:38:
8c:85:f3:37:09:fa:6b:d8:f7:d0:b4:2e:a7:d6:b0:
41:15:23:de:ff:db:8c:3d:d9:aa:48:36:04:0a:43:
6d:91:df:02:51:d6:12:7c:2e:b0:1a:fd:af:24:a9:
3e:e3:bb:2a:6c:b7:eb:62:51:c2:1d:79:fa:c2:95:
4c:7a:66:6e:48:56:f1:17:3a:72:de:54:9c:7d:bf:
a8:4a:9c:7b:0c:24:d6:f2:89:23:e3:9d:57:d7:c4:
39:2c:a0:fd:80:a8:e6:31:b1:6d:61:e1:a1:83:97:
60:56:68:57:f2:cd:c7:52:3f:72:a2:4d:fb:f7:52:
08:f6:07:4c:2c:78:2f:73:e5:62:ea:a1:01:b0:b4:
08:3b:9a:0d:1f:d1:50:2f:fc:10:48:05:5d:7a:07:
51:00:43:81:a5:1f:55:5e:ec:0b:5c:82:9a:52:05:
f4:09:30:7d:f9:e9:52:e6:c5:c6:13:77:b2:48:0d:
df:49:88:2f:de:0e:c5:4e:f2:1e:1d:f7:ce:39:a5:
7e:66:11:1b:67:80:8e:71:df:8c:3f:6b:b5:f1:68:
ac:35:c2:e7:f3:11:d9:fa:dc:8b:7f:0e:e4:4b:16:
ab:05:71:a2:cb:0e:4b:64:ef:f6:3f:ac:3a:74:0d:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AA:2F:C8:05:56:C7:FE:4B:6A:93:CD:AF:98:B0:EF:50:06:D0:A3
X509v3 Authority Key Identifier:
keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1a:97:df:2d:d1:80:ba:6f:07:8e:99:94:94:39:f4:4d:30:
b3:1b:c1:85:61:dc:ca:0d:fe:4a:46:98:15:0d:b0:ca:73:71:
7a:47:96:ff:14:fa:bb:cb:2c:ad:fa:d2:3c:dc:4d:c3:4c:54:
9e:9b:1a:8e:63:5f:e6:f1:7d:17:e5:db:ac:02:0c:c3:76:cd:
f4:7a:29:60:07:8f:b9:84:20:58:21:ca:99:a8:33:d7:43:5d:
1b:35:3d:f8:a0:0b:0c:19:50:72:45:fe:cd:3b:dc:10:0a:08:
94:e3:be:3b:89:b9:9b:60:fb:3a:b9:fe:d1:ba:ad:9d:f8:51:
db:5f:14:c5:5b:f2:b3:0d:0f:13:19:c2:6e:08:f2:4c:41:e4:
48:a0:fe:71:d0:e1:57:16:aa:8f:44:75:62:06:5c:31:a3:1c:
da:6a:42:1c:95:51:43:2a:ea:d2:e0:fe:54:2b:e3:57:94:59:
c7:3b:a0:7b:bd:53:9c:bd:84:8d:de:bd:d7:00:b0:03:e9:22:
39:4a:3a:14:4f:e0:cf:03:98:0d:da:f7:e2:d9:8c:dd:b6:ed:
e6:3e:0f:54:09:36:6e:76:b1:92:fa:51:cf:1d:2f:a8:df:a9:
e4:4c:cd:d7:62:40:48:fa:19:45:87:8c:e1:5e:68:f9:a6:b7:
40:f2:5c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:14:01 2026 by rpki-client