Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: AqQXT7PHSmlU+GdogVXBAhqP443WwiHBi6qDoHpHBQY=
Subject key identifier: 98:70:28:14:74:B1:7B:02:A4:22:2F:1C:70:56:18:DF:52:EA:FA:07
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 019CABA1D268BFA8078F5B559EC3F929F67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 0F27
Signing time: Sun 01 Mar 2026 23:00:34 +0000
Manifest this update: Sun 01 Mar 2026 23:00:34 +0000
Manifest next update: Mon 02 Mar 2026 23:00:34 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: wpWuQoeYmlcZVmcRvPUorygcla0+uHUnKyi9f8wllZg=)
2: h5DIp02VidThuOHraMPFCodvygs.roa (hash: xwNLtlpo98S4VMl0NrrQV2mRppmcREH8EvSc90IeL2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d2:68:bf:a8:07:8f:5b:55:9e:c3:f9:29:f6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Mar 1 23:00:34 2026 GMT
Not After : Mar 2 23:00:34 2026 GMT
Subject: CN=9870281474b17b02a4222f1c705618df52eafa07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:e1:4e:14:95:e6:f4:47:67:6c:5b:2c:b4:
24:c8:9f:58:5b:0d:a0:9f:2e:46:6d:33:9e:04:96:
cb:e6:10:8e:8d:67:a5:e6:d3:eb:53:64:76:f3:16:
16:d6:de:d1:d8:50:d4:39:2c:2b:cc:56:ff:65:cd:
5e:b6:f8:64:4c:2d:55:42:1f:cc:33:3a:20:ad:1b:
d7:03:73:cc:d3:00:6c:c5:22:8d:ee:68:a4:3f:9f:
3e:24:50:da:fb:4a:9f:a4:ad:99:73:4a:0a:9d:2c:
c3:8d:60:ab:13:a9:02:dd:d5:0b:df:8c:d0:b1:fa:
01:2e:18:6f:0f:64:5c:7c:26:1c:49:36:f4:aa:3f:
15:c1:91:4c:80:9d:b0:f0:52:56:0f:68:61:eb:85:
dc:1d:82:8d:a3:ef:ec:b4:82:51:2a:02:35:0f:aa:
5e:7a:9b:13:e1:99:79:88:d2:06:d9:ef:5f:49:63:
ce:27:d7:e0:ec:d5:94:e0:97:cb:cf:b3:ba:99:7f:
9e:37:cf:16:c4:d1:67:b4:8a:32:34:b1:cb:c2:de:
f6:42:9d:2c:89:1e:ba:2c:12:8d:fc:df:e0:bd:94:
e3:3d:99:df:a5:66:a6:1d:ba:00:b2:12:90:f6:6a:
b4:e7:a0:27:a0:c4:cd:52:b9:41:13:7e:2c:bd:20:
a4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:70:28:14:74:B1:7B:02:A4:22:2F:1C:70:56:18:DF:52:EA:FA:07
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:50:18:c8:59:67:4d:f9:c5:06:7b:ea:b2:e0:aa:d9:ba:63:
fc:ea:9e:26:5a:6d:2c:fb:5f:8f:a0:c3:a9:35:97:14:29:5a:
2a:45:2e:97:ef:cb:16:f0:89:02:82:9e:60:e4:f4:48:1d:e0:
99:bd:26:d5:1e:8b:eb:f9:28:50:71:fa:bb:79:f7:71:ed:fd:
74:8a:24:e0:52:7b:0f:40:82:4d:61:89:67:85:38:61:01:2b:
27:28:b2:8c:82:b9:a6:7e:57:a6:46:89:e3:c1:1a:63:6b:45:
84:be:61:3c:ec:e8:24:c0:43:e1:10:f2:94:0a:7a:17:a8:6f:
66:fa:c5:63:3b:17:39:65:e6:29:82:9d:08:e2:53:66:03:65:
8d:30:29:05:c8:83:42:e8:4a:6e:2d:90:0f:e7:ac:67:06:71:
3a:87:ee:f7:f6:cc:ec:5a:ad:f0:2f:7f:59:26:29:91:07:22:
18:14:77:c7:83:a9:87:3e:86:e9:4c:6a:6b:47:7a:e3:cc:34:
cf:59:60:dd:87:e5:8a:47:78:10:7f:d7:e2:37:0b:31:e9:65:
3f:92:78:81:08:80:34:29:7c:6a:fa:9e:4a:25:c8:c0:a2:a6:
ce:42:90:40:ac:68:c4:97:59:bd:f2:2e:fe:49:a7:a6:9f:7b:
8d:f5:5c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:16 2026 by rpki-client