Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
File: 9XpIEqFZ72qekpcudXKtZi1yIVo.mft (raw, json)
Hash identifier: AmcWRx8VNcJJI1Z5zqhFSIYJIbB+1qxSWZMubt/TOTQ=
Subject key identifier: 5B:D1:4E:75:E1:6B:C1:53:C2:B0:F9:01:1F:58:F4:DB:10:84:A8:B2
Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Certificate serial: 019CAD22CB055571C99CB5112733C5B2E73F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
Manifest number: 1138
Signing time: Mon 02 Mar 2026 06:01:04 +0000
Manifest this update: Mon 02 Mar 2026 06:01:04 +0000
Manifest next update: Tue 03 Mar 2026 06:01:04 +0000
Files and hashes: 1: 9XpIEqFZ72qekpcudXKtZi1yIVo.crl (hash: yH6QVOquvAtmqkd/VMz1Kwyo8zPztUmf3EWpEepBvRU=)
2: lKVJdRF0hE9bPtqV3XlzvhT3Iqs.roa (hash: GeIEq9ieMXhGCkHBVtks0M5q4Jm8CcNNhR3YdczhVxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:cb:05:55:71:c9:9c:b5:11:27:33:c5:b2:e7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Validity
Not Before: Mar 2 06:01:04 2026 GMT
Not After : Mar 3 06:01:04 2026 GMT
Subject: CN=5bd14e75e16bc153c2b0f9011f58f4db1084a8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:17:a1:5c:18:8d:82:8e:c1:37:65:dc:83:
46:f9:5b:46:b5:7d:67:4e:04:0d:3e:ea:aa:86:ec:
7c:03:4e:e4:9f:21:c8:1d:8c:4c:bf:93:f3:3c:f1:
9f:4c:8f:25:21:ae:11:6f:2a:63:98:f9:10:07:88:
34:a0:d6:53:06:b9:20:7a:0c:8c:05:ed:2e:d4:1c:
c9:7a:f9:a8:0d:13:ea:f3:8b:f5:66:1d:d9:96:02:
ce:e0:ca:b5:da:a9:14:cb:92:7a:62:a5:c2:8e:5b:
33:14:ba:cc:61:73:90:c4:17:9a:c7:dd:9a:7c:a1:
7e:d8:ba:39:02:66:c4:fa:20:e8:3a:e1:30:0e:51:
d8:2f:b6:25:42:38:50:8f:f9:00:95:fa:56:df:bc:
1a:e7:44:42:18:34:05:0f:3e:0d:88:1b:85:3b:21:
29:5e:99:26:90:55:47:4d:6a:82:a8:7f:ec:f1:50:
e8:e6:af:14:82:74:06:e2:d9:a9:55:97:73:7b:16:
5f:2f:f9:98:e9:9e:af:a2:df:1c:41:8e:03:8e:90:
c9:02:eb:f2:fa:f7:b5:3b:e3:8d:22:29:3a:4b:cd:
b2:d9:e9:24:85:4d:a7:5f:f2:a7:b5:31:b9:55:df:
02:7f:5a:02:c1:bd:21:6c:9f:f7:7c:11:b6:ff:3b:
16:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D1:4E:75:E1:6B:C1:53:C2:B0:F9:01:1F:58:F4:DB:10:84:A8:B2
X509v3 Authority Key Identifier:
keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6a:d5:93:f9:8b:fe:81:30:d5:a9:85:1d:0a:a5:22:22:74:
57:89:f1:c2:48:cf:28:68:82:29:d0:2f:ff:19:b1:c8:b6:ad:
90:96:15:88:44:fd:eb:fc:4e:02:87:65:9b:52:56:df:36:71:
1c:29:c4:1a:ef:f7:50:09:5a:9d:a0:77:49:cb:ac:d1:9b:73:
3b:d3:e3:f6:af:82:3d:e8:17:4a:74:8a:d9:58:e9:e1:dc:50:
07:b3:0d:8c:3f:29:76:7f:ac:b8:51:c8:d5:ca:0b:f9:ea:86:
38:71:17:8e:e3:ba:3c:c3:bd:87:4e:3d:60:72:30:80:0d:dd:
92:8d:54:d3:69:b4:c4:75:ae:cb:84:b4:5d:92:26:45:dd:bc:
1b:34:49:0c:73:e6:8a:e3:cc:22:4f:31:8e:59:53:7a:58:0d:
5c:70:47:20:a9:79:12:1c:ee:a0:43:22:34:03:0e:69:07:f6:
b8:e5:76:62:20:ab:aa:55:cf:5b:73:d9:d7:ee:a1:7c:4c:b8:
76:1c:a7:10:72:f5:f7:50:ab:e2:ec:64:9e:d1:18:30:28:29:
74:b0:cd:75:0b:40:61:5b:3f:9d:f6:2c:c3:d4:c3:44:2c:0b:
9a:29:3e:0b:e0:53:36:09:1d:4a:7c:7b:3d:8a:64:58:6b:0c:
62:ca:bf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:57:10 2026 by rpki-client