Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier: PB0sFQyOaRgPgaXgc+FMSSKXaDip3InRZ8TL8Sunvkw=
Subject key identifier: 25:41:C6:89:75:A8:30:FF:20:90:54:BB:52:B8:CF:E2:50:C2:37:A3
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer: /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial: 019CAC470328407AB79EB0D1C7F902711F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 02:01:00 +0000
Manifest this update: Mon 02 Mar 2026 02:01:00 +0000
Manifest next update: Tue 03 Mar 2026 02:01:00 +0000
Files and hashes: 1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: wXAs4z8Ivd+S4LdyO5qzzH2FwF/rbYbmfzll5KpDMdQ=)
2: mqnfQZBp8h7WvOAdc-8gqdHYqtw.roa (hash: ewJdIlVBdFix7giIGBtZRJXpQjmTUTAe4SWLnLx8JZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:03:28:40:7a:b7:9e:b0:d1:c7:f9:02:71:1f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Validity
Not Before: Mar 2 02:01:00 2026 GMT
Not After : Mar 3 02:01:00 2026 GMT
Subject: CN=2541c68975a830ff209054bb52b8cfe250c237a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:9e:53:5e:12:67:45:eb:50:b6:1f:33:69:
e9:f5:7d:01:d6:a6:6e:81:f5:61:af:e9:84:60:b3:
f9:18:b6:f5:c1:d3:26:2c:db:1b:90:a7:3d:5a:1a:
69:96:2f:86:d5:d2:bb:33:06:65:3e:24:dc:bf:d3:
26:08:f7:10:2f:5e:f7:22:6f:5d:b1:24:d3:ae:96:
91:f3:da:e4:d2:5c:c1:87:c0:c4:e8:75:28:b4:0c:
21:d6:05:54:2f:88:f7:f0:08:ab:9b:10:76:60:2e:
00:33:e4:1e:05:e3:82:93:9b:43:43:44:e9:9e:d2:
f0:18:9f:70:8a:81:3c:a0:8c:9f:7c:c6:0e:2f:cd:
dd:18:99:51:8b:0f:f7:98:0b:24:0f:21:90:7c:d3:
bb:8a:52:72:df:a6:60:67:fc:ca:63:2a:1b:ee:95:
7b:1a:88:39:e0:ed:6b:84:69:ac:75:93:55:05:86:
54:73:f7:31:7d:ab:2c:ed:df:81:23:ac:77:c9:37:
3c:28:7b:25:e6:67:0d:30:54:30:aa:0b:25:4d:ee:
ef:79:76:9b:8c:9e:4b:6d:ce:e7:b4:63:d2:50:8e:
03:74:2d:e7:d9:ea:0f:88:8d:e9:ef:43:30:19:79:
83:1c:20:e1:ca:e6:75:f3:d2:fc:b2:92:61:cb:e7:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:41:C6:89:75:A8:30:FF:20:90:54:BB:52:B8:CF:E2:50:C2:37:A3
X509v3 Authority Key Identifier:
keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a7:5e:5d:53:c4:f3:d4:07:81:fb:b3:f2:e8:eb:85:db:5c:
83:9e:2c:64:89:7d:ee:c2:ee:ba:7e:2a:20:2a:07:c6:1d:c6:
eb:7f:36:45:d3:3a:16:94:59:26:ca:58:9a:df:e2:1c:23:21:
da:7f:d0:f5:17:a6:d7:8a:ec:54:1c:3d:8e:9e:13:88:ba:6e:
69:90:33:4c:e8:2a:32:03:b6:ff:50:28:95:5b:d8:29:66:2c:
09:aa:9b:e5:fa:47:1a:d8:de:21:9e:e1:da:f8:b5:66:4b:c3:
68:d4:20:0e:5e:28:5b:58:0d:d7:96:a5:69:22:47:0a:47:a5:
bd:83:64:47:d7:bd:6c:3e:81:f3:64:df:ab:ab:a9:81:62:09:
1e:b1:27:c5:c2:e4:d3:4a:f7:ed:0c:8a:04:74:d3:99:00:ee:
da:6e:b4:93:1b:35:75:b1:07:31:c7:8b:1c:fd:79:92:6a:43:
73:19:fb:a1:d5:73:b0:3c:c0:12:e4:e9:72:bc:35:b9:56:d3:
4d:c6:de:58:c1:b7:2a:6f:36:58:44:50:5c:19:ea:43:13:20:
5d:f0:44:25:05:e2:d0:75:22:02:78:4d:56:09:a0:38:c1:b8:
92:41:bf:ef:34:3c:1f:81:ac:74:1f:85:fc:33:fc:82:e4:7b:
8d:3c:af:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:09 2026 by rpki-client