Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
File: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft (raw, json)
Hash identifier: Eq8RXRAVpXcGPzYhLGSlv97aAzGhthn5oRm/yFY98F8=
Subject key identifier: 5F:00:1B:F0:EA:6C:64:0A:15:85:A3:CD:1A:99:16:68:DC:5B:6F:E9
Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
Certificate issuer: /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Certificate serial: 019CAB6AD7C10E0A390826DEC1D60C3F7EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
Manifest number: 134D
Signing time: Sun 01 Mar 2026 22:00:31 +0000
Manifest this update: Sun 01 Mar 2026 22:00:31 +0000
Manifest next update: Mon 02 Mar 2026 22:00:31 +0000
Files and hashes: 1: 0mgkR8Oatppf6KwkGwCdocguoA0.roa (hash: xBRpWZu5TH9MlFJBVgXYiAXfSpweoxy68K+P+8afR20=)
2: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl (hash: PCBlr25kRIApo0/CR1wiZJ/BXTSst9k9TbBN0QL73rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d7:c1:0e:0a:39:08:26:de:c1:d6:0c:3f:7e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Validity
Not Before: Mar 1 22:00:31 2026 GMT
Not After : Mar 2 22:00:31 2026 GMT
Subject: CN=5f001bf0ea6c640a1585a3cd1a991668dc5b6fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:7a:fb:64:d4:10:c9:29:66:26:7b:6f:67:
89:2d:f7:cb:27:e2:1f:3c:0c:34:e2:74:4d:b4:42:
cc:5a:bf:03:9f:c2:52:58:18:64:31:32:35:a7:4a:
fd:de:21:78:7a:b9:a3:5e:cb:9b:aa:b3:11:40:f3:
8d:68:98:cb:47:0b:ed:64:a5:ef:e3:ec:23:4b:24:
83:e9:17:75:57:8a:36:8e:dd:84:79:39:a6:fd:ff:
54:87:9c:eb:ac:54:96:7b:45:d0:b3:aa:b8:0f:f6:
a3:d7:ef:0d:07:70:57:93:7f:fb:02:61:8b:64:fd:
87:d8:47:df:d3:fc:3c:1f:3c:69:ba:a3:fc:d2:fd:
3d:c0:9b:6d:5c:a8:5d:f6:02:6e:52:5a:d8:22:aa:
d3:a7:ae:d9:16:c5:db:f1:83:af:22:23:11:e9:0f:
ab:e6:b5:1c:9d:9d:d5:72:e2:02:ce:51:6f:cc:bc:
ef:8e:8e:21:0b:88:ad:a3:28:e6:25:1d:09:38:10:
9b:5d:fc:75:f2:e1:6f:8a:2e:1e:19:c3:54:f0:20:
92:3f:05:28:0b:99:bc:90:6a:28:75:5c:c6:47:5b:
90:f2:8b:b9:c7:e7:27:41:7b:0a:42:28:a8:4a:66:
7e:04:fe:ae:1a:04:9d:bd:cc:eb:72:d5:9f:f1:a6:
7e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:00:1B:F0:EA:6C:64:0A:15:85:A3:CD:1A:99:16:68:DC:5B:6F:E9
X509v3 Authority Key Identifier:
keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b8:b3:fa:ca:1e:f6:03:fa:6e:90:31:dc:72:a5:29:11:12:
dd:f8:37:b6:6b:f9:a0:af:76:25:27:5c:da:21:94:89:69:e1:
ed:16:74:09:47:47:7d:24:66:57:53:67:d2:ee:38:2d:dc:b0:
6f:b0:33:1c:3a:3c:1b:af:fa:8a:b7:ed:f6:98:7c:89:38:3b:
17:95:a8:f9:51:01:a3:26:2f:8e:c2:e8:07:d1:6c:ec:b9:be:
d0:bd:45:d5:9f:0f:55:61:05:ae:4c:90:20:b0:07:13:6d:3e:
95:8d:d9:1f:61:b8:2b:d3:5f:64:bb:1b:67:38:9e:9d:ec:5b:
9d:8b:8f:25:5a:a6:2f:3f:f3:2d:54:75:6c:f6:1a:ad:54:e6:
fe:31:13:a1:d2:1d:14:e6:f4:d6:aa:f8:10:29:78:d1:0c:c4:
5d:26:55:19:85:f5:e9:e6:79:e3:0e:0a:92:a0:f6:5c:7d:e6:
ae:9d:9b:dd:25:01:c1:5c:93:0e:2a:8b:f5:e4:a5:bd:18:eb:
0d:ea:8a:8f:46:98:a6:67:bd:47:bd:03:9f:14:0f:e9:a7:24:
d8:76:05:09:e6:72:2d:d8:fb:f8:16:a6:b1:f1:46:e4:9a:99:
33:a7:5c:73:b1:7e:8c:87:b3:9c:d4:5d:55:47:90:61:2d:7e:
16:00:08:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:45 2026 by rpki-client