Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
File: 9FT4T3gIX46gOklonL43LnSsFTw.mft (raw, json)
Hash identifier: xRRj6vB7B/estgJ9/gs8r75nM7JrRWLDwQsGzKgD2XU=
Subject key identifier: 65:35:C4:4A:5D:5C:6F:45:01:02:8F:64:B6:08:11:99:90:EB:06:C1
Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
Certificate issuer: /CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Certificate serial: 019CAA58950B2834C538024D9BD2C2DC4692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:00:57 +0000
Manifest this update: Sun 01 Mar 2026 17:00:57 +0000
Manifest next update: Mon 02 Mar 2026 17:00:57 +0000
Files and hashes: 1: 9FT4T3gIX46gOklonL43LnSsFTw.crl (hash: iaebCt7Sj4l524avx7gXEMfYURSmQOtYAJvsmAmJoOw=)
2: Y6ybWhEjwuda51l0uiaZjIT-fg8.roa (hash: 8LGe+xcRdI8B6zAIoBChynO4rGVdoYzlhKSA0vPLuGw=)
3: aEVMMMA5f1UmRI8NYOUQQuTtgsQ.roa (hash: pdfghptkrLhCdjHFzkd4R/q6hTlSpA/AvR6T+/fF+rc=)
4: sbz6OVH06vkYwN8qjWyWv5JQ98I.roa (hash: mqPWKkpNLvEdA2xxPfKh+1E+EB8NghsX64s1n44EHeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:95:0b:28:34:c5:38:02:4d:9b:d2:c2:dc:46:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Validity
Not Before: Mar 1 17:00:57 2026 GMT
Not After : Mar 2 17:00:57 2026 GMT
Subject: CN=6535c44a5d5c6f4501028f64b608119990eb06c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:ba:dc:39:ba:0f:64:95:1c:14:33:aa:a4:
2b:c1:4e:8c:71:38:ec:2e:b4:ae:70:24:9d:15:5e:
4a:de:d7:25:91:ba:89:7a:25:73:b0:3b:8d:47:05:
2b:a4:46:18:ea:70:48:79:e9:86:a0:97:2f:70:40:
f5:0f:d2:2f:b7:aa:32:b6:23:12:e2:f9:da:42:df:
07:1a:28:38:62:16:0e:06:e6:bf:6b:27:ed:d7:97:
e2:0c:8a:d5:d0:0b:7c:dc:64:80:59:ee:e8:3d:1e:
4e:e8:2e:8d:cf:62:25:f4:9d:45:e5:63:f5:35:a8:
4f:88:e1:d8:9d:5d:f0:84:74:ef:cb:d3:25:1d:39:
c3:be:ef:96:3b:a6:ba:c3:78:89:0f:54:6d:38:e5:
e5:47:33:53:ed:19:4e:c5:51:2e:70:fe:9b:28:38:
3b:68:92:48:a8:9a:c0:f7:46:69:fc:04:7e:1f:38:
f6:fd:49:de:b9:ed:f4:f0:c9:57:c8:44:f0:28:a7:
41:ef:37:90:ba:86:9c:05:6e:12:12:96:0e:06:06:
77:55:ce:95:9e:18:7f:ea:e3:26:43:a7:d9:6a:36:
5a:ee:e7:79:99:c2:88:a9:ae:e0:9e:9d:10:9e:6e:
e7:3a:02:ec:1f:33:01:cb:7b:dd:ba:30:2d:05:34:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:35:C4:4A:5D:5C:6F:45:01:02:8F:64:B6:08:11:99:90:EB:06:C1
X509v3 Authority Key Identifier:
keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d2:7a:36:af:ee:d2:d6:41:3c:66:69:67:55:8e:19:3d:1f:
39:f9:0c:a6:99:ba:b1:26:a7:ae:a4:da:bb:e4:19:65:50:b7:
e1:b4:56:d5:8a:d2:4c:39:a1:66:bd:04:ac:4b:df:25:83:b6:
8d:7a:c0:37:88:c1:ab:d9:be:c3:42:59:0f:2a:41:04:23:62:
af:7d:73:b9:10:ec:ed:a7:b7:c5:e6:1a:f6:2a:c4:a2:aa:80:
9d:1f:16:4d:d1:fb:03:b0:d2:20:65:d2:d0:f0:5d:3e:ae:12:
18:9f:7f:fb:3f:c2:af:73:ce:72:b0:0d:05:12:08:a8:01:48:
ab:5c:a3:35:1f:4f:b9:5c:97:f2:56:b9:d0:f6:2e:50:60:63:
33:be:04:e8:8f:9c:fe:59:95:50:0d:85:bd:f3:96:ff:1d:37:
6c:99:c3:1b:d2:08:22:26:f1:6a:34:10:da:1c:69:c5:c9:52:
60:0c:de:b3:10:4f:9d:42:10:68:b7:10:bd:de:38:8d:97:9d:
ab:ff:ed:65:c0:2f:00:af:e8:11:74:70:42:43:36:9f:36:ae:
b3:ef:2f:5d:c8:1f:80:7e:b1:31:75:a0:fb:d2:ec:80:ef:29:
82:8c:5b:d2:73:b9:53:02:11:69:33:56:27:c7:bf:5c:39:5f:
0a:a0:79:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:44 2026 by rpki-client