Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
File: _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json)
Hash identifier: g1gav8bND6Fq99b+nqdlOXRzbHhkGRHJFeiir2/CehY=
Subject key identifier: 0C:7C:A6:89:7C:54:04:81:FC:5B:4E:13:07:D0:BC:FE:90:0C:AD:97
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Certificate issuer: /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial: 019CAAFD0D08C9CE272BE5F4B43FF19433D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
Manifest number: 09B9
Signing time: Sun 01 Mar 2026 20:00:36 +0000
Manifest this update: Sun 01 Mar 2026 20:00:36 +0000
Manifest next update: Mon 02 Mar 2026 20:00:36 +0000
Files and hashes: 1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: beVwF+onJvlY1+njpnHj4pDzhEoq8lq7k4AlhEAQZfQ=)
2: jON8jV9Q2GLdoq1oYbTtzWvSeAw.roa (hash: CpfaNm7QCE9dRH1Z5uGSs1NzanRsXUOVz00UoK4+1jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:0d:08:c9:ce:27:2b:e5:f4:b4:3f:f1:94:33:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Validity
Not Before: Mar 1 20:00:36 2026 GMT
Not After : Mar 2 20:00:36 2026 GMT
Subject: CN=0c7ca6897c540481fc5b4e1307d0bcfe900cad97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ce:09:3e:86:33:82:7c:c5:ab:a5:5f:d6:f5:
fd:ec:48:72:f6:12:84:0b:f5:6c:6f:52:ab:15:5e:
c5:df:cb:43:01:76:16:2b:b3:11:76:fc:af:3c:dc:
b2:a2:8d:53:f7:43:f5:d3:ba:ce:8d:d2:de:91:f4:
53:f1:b0:f6:3b:d2:0d:3d:ff:44:20:3f:ef:79:28:
5a:24:8f:18:f7:64:05:f0:bf:e2:51:32:2e:40:f3:
e9:19:e2:5d:b4:b6:37:57:8a:87:10:85:da:cc:28:
2e:e0:00:88:e6:dd:1c:87:72:74:2a:7e:12:87:ed:
ab:a7:bd:7b:29:a8:09:6b:e1:2a:b7:f8:1a:01:14:
b2:2f:46:bf:1f:84:eb:c3:f4:09:5f:23:a5:5a:91:
9b:86:6b:60:02:59:cb:c8:52:b7:a5:52:26:01:4a:
08:15:9e:0c:05:0e:7b:4d:78:77:e2:27:7d:2c:ef:
15:fa:04:a5:0e:05:da:a0:c2:fd:38:b4:ec:92:8a:
6a:b5:2a:7a:92:57:ae:2e:be:23:97:d5:c0:3e:84:
1a:ad:42:01:8d:5b:9b:d6:67:78:e9:d3:24:89:fb:
29:9c:4a:26:1f:73:68:2b:0d:65:63:e0:55:0a:58:
ab:c8:2a:59:9e:06:96:a5:d2:58:2f:b1:f1:6e:e7:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7C:A6:89:7C:54:04:81:FC:5B:4E:13:07:D0:BC:FE:90:0C:AD:97
X509v3 Authority Key Identifier:
keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:00:cd:4d:6a:b8:4e:cc:cd:db:60:07:c4:81:6d:39:b9:93:
fb:36:2c:1c:7f:26:c3:c6:46:05:02:86:6a:12:ac:af:5f:03:
49:98:5f:1b:f0:5c:fe:26:64:53:82:6c:a0:4b:61:62:d5:4d:
26:2b:91:f8:39:b9:af:cb:a6:a7:1b:e6:07:10:3d:c7:bc:07:
ea:e0:6c:f2:c0:80:eb:60:96:6c:74:82:46:69:bb:b5:2b:c8:
c7:26:fd:00:bb:16:3a:c8:60:98:7d:27:46:64:e3:9c:6e:d7:
37:d0:55:e3:a3:e7:c5:66:4c:d1:4f:fd:54:bf:d8:08:c3:87:
df:c9:33:8d:7d:7f:90:97:0b:75:43:03:8b:63:12:a4:14:9f:
e9:a1:07:94:3b:27:a3:b9:2e:c2:23:74:b5:57:52:1b:e3:a8:
bf:58:bc:32:d0:09:79:80:cd:e3:b4:4e:37:8e:12:2d:75:a8:
8e:29:a6:06:3b:18:9d:95:5e:46:aa:21:b0:06:0a:ca:ff:e6:
0f:66:84:a7:bd:0c:84:25:ef:34:8c:fa:0a:97:99:44:e5:f4:
0b:ad:95:0b:b2:06:3d:1c:3c:c3:97:14:13:ec:cc:03:7a:65:
ae:d7:6d:3c:19:7f:72:cc:10:0b:2e:41:ad:3e:5f:fb:34:ed:
3d:00:49:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:07 2026 by rpki-client