Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File: 250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier: lMtRj46ESbz8SrdR41czuIUAthxoWvcBnZ0SpCgTLk0=
Subject key identifier: 9A:EA:76:9E:64:88:7C:52:0E:47:06:C3:9B:68:FE:BA:28:41:DD:85
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 019CABD9F10044C9D619EA4EE9E38EFF44C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number: 140F
Signing time: Mon 02 Mar 2026 00:01:52 +0000
Manifest this update: Mon 02 Mar 2026 00:01:52 +0000
Manifest next update: Tue 03 Mar 2026 00:01:52 +0000
Files and hashes: 1: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: oe8gpmCdw7rec6jVaEH+4+Qxun5hyRxEFrpS4T87nzE=)
2: 6mzFB1254QH_scGmAESdwoJirew.roa (hash: ZqsDszUXMXErK5gprgiRcwaopoCcJJcjnl51ncaMD10=)
3: NJD3vCg8LdZrgIhkarwqZcVQWlY.roa (hash: Eumr2+B2PPkKKeprpzIU6OMcVz3MM+ic7NoPgJaopMw=)
4: OIl66vV-_xpjBLdW_e37i3MHj7k.roa (hash: cSop5Hl7odCbvTkJ91gKwEE+cGwI/Owv1OQiaa9DbOI=)
5: V_9jRl4u_GQEezWDQos1yT-0bqE.roa (hash: F7HIunKap/oz5qtM7/jZgccS28Y+qRZ8R7fBgjRlXdI=)
6: fFpafy4u190DTCOPzJA2IU3Yun8.roa (hash: qkxwTsYonpEmwXLYN4+BkXLnLH6SkvbgatzFJDlgvt0=)
7: iNKNZeSZcVKtwBDeM9cWD2QfKgw.roa (hash: Ufjl8hlKJynYjHQsITek/FLuhc46CrmvrHtUUc2zMOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f1:00:44:c9:d6:19:ea:4e:e9:e3:8e:ff:44:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Mar 2 00:01:52 2026 GMT
Not After : Mar 3 00:01:52 2026 GMT
Subject: CN=9aea769e64887c520e4706c39b68feba2841dd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f0:f1:37:4a:f7:8b:ff:39:21:18:2d:9e:c0:
f4:fb:57:3a:5b:c9:be:a8:23:70:81:b8:66:54:f6:
55:35:7a:e8:b9:8d:f7:22:20:22:9c:66:e9:3a:92:
da:71:45:a9:95:d8:22:62:17:79:7b:7e:44:76:d3:
94:06:3d:bf:01:ac:c4:6f:db:c8:7c:82:51:65:ae:
8a:90:4b:a7:3d:b4:29:29:22:23:a4:bc:09:ae:71:
11:5b:84:cb:c5:c9:4e:3c:ce:5e:22:8d:47:ba:ac:
3d:04:23:a2:91:00:2b:e4:37:ad:32:63:db:fe:fe:
76:d8:a7:6c:6f:4a:4d:70:b2:6f:7d:fd:b5:98:d0:
e9:6b:91:29:54:e4:9a:2e:e8:9a:80:e9:1f:c5:f8:
68:87:d3:73:fe:b6:7b:bf:b3:94:5d:d0:56:22:0e:
2d:c5:68:28:6f:b1:ef:83:33:1f:8f:fc:ea:2d:44:
00:cf:b9:ef:4e:c9:1b:8b:ea:a5:f5:8e:f9:d7:3f:
7a:ff:bd:01:bf:7b:fd:e7:25:7c:aa:8d:ee:61:fa:
00:e4:1c:ab:54:b8:19:ee:c1:04:b8:39:dd:f7:ce:
47:0f:48:58:a0:6e:a6:f3:de:ef:00:f2:51:ee:ee:
c5:b4:2d:97:e2:a3:25:b3:66:87:32:c2:df:47:28:
29:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EA:76:9E:64:88:7C:52:0E:47:06:C3:9B:68:FE:BA:28:41:DD:85
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4f:d5:e1:3a:92:b9:19:b2:ab:b1:a8:8f:6a:47:5f:5f:88:
26:b6:2c:36:9f:fb:ea:27:70:43:28:51:27:08:38:14:45:19:
92:b7:ca:49:dc:20:0f:d1:76:87:ba:2a:c2:f1:e4:24:97:d9:
d0:89:e9:de:97:ae:62:ed:f8:5d:6a:8a:02:12:87:1c:dd:18:
7c:fc:73:02:51:2d:a0:45:42:46:2a:eb:87:74:25:3d:62:9a:
8c:35:5d:7b:6d:83:8b:ec:9b:d0:c1:d6:2e:59:68:02:8d:9e:
11:31:32:e4:2b:50:7a:7f:a0:24:54:e5:f8:92:f8:a6:7b:01:
a5:eb:74:ca:62:df:a6:9a:cf:ee:10:cd:40:23:9f:87:68:47:
9f:13:5f:49:37:85:0c:68:55:3e:c3:13:27:6a:54:e5:cc:7b:
0c:b0:42:6c:dc:e5:f4:92:85:7f:72:20:3f:42:01:a2:4c:d0:
10:c6:2b:ca:31:35:f4:15:cb:de:69:71:67:0f:51:ea:35:e4:
70:c1:f9:bc:4a:9d:f3:08:92:83:a3:1b:7f:ac:20:fa:4f:1f:
90:e4:36:20:29:bd:01:fa:40:3c:35:33:9a:6d:0f:42:4b:8e:
c4:25:ca:5a:6c:3d:0d:51:5b:b1:16:35:86:a9:24:20:ab:d2:
15:6d:16:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:14 2026 by rpki-client