Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier: Jnp5ws/UJbaoX4A1aGexCK0GFJHShMgifkeiXSQZVrM=
Subject key identifier: FB:98:98:5D:75:68:A1:32:31:7F:89:D0:04:2D:BF:93:12:B6:80:FB
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial: 019CABD9E28308D4A5A1626B8D4FDCA87270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number: 07BE
Signing time: Mon 02 Mar 2026 00:01:49 +0000
Manifest this update: Mon 02 Mar 2026 00:01:49 +0000
Manifest next update: Tue 03 Mar 2026 00:01:49 +0000
Files and hashes: 1: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: Gxpf//VNawFzK3Ebd51g2IPj9RuNKsRYD9Tpfc9PXJc=)
2: tKfj59q_uSVeOVXFF8rwGwcX1DE.roa (hash: M8dRarfAWOblSl0tPp78zm1/aNBzJLXYpivkbEtUqgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e2:83:08:d4:a5:a1:62:6b:8d:4f:dc:a8:72:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
Validity
Not Before: Mar 2 00:01:49 2026 GMT
Not After : Mar 3 00:01:49 2026 GMT
Subject: CN=fb98985d7568a132317f89d0042dbf9312b680fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:c2:f0:f2:b7:39:fe:3c:cb:89:c6:8d:1b:
32:a2:cd:a1:df:63:d5:32:2a:4c:c5:f6:b7:1a:c5:
b2:89:ec:a4:79:1e:d9:77:fe:2c:75:71:96:4a:1c:
b7:75:4e:f7:0f:91:39:60:de:da:aa:88:1e:04:82:
57:a7:87:e0:3f:0d:a1:53:56:2b:63:f0:a2:37:88:
b5:c6:33:86:7c:6f:66:96:78:bb:38:fe:ed:b6:43:
40:2e:c7:71:6c:29:31:40:32:19:34:c5:dd:3c:b5:
15:d7:f0:7d:96:e5:28:85:43:a9:56:34:78:64:9f:
8a:22:01:62:2e:cd:f2:a8:40:18:89:1b:32:8e:b3:
f2:67:75:dd:b6:2d:80:d5:45:5d:cc:94:36:ea:7c:
b7:94:20:a9:54:6f:df:2d:80:9d:8a:0b:d0:ff:be:
81:ac:c2:f6:95:b1:d4:ea:4f:ac:a1:51:55:33:42:
ea:e8:f2:7e:09:d3:8a:5a:ea:8a:60:e2:47:58:ae:
4e:e5:66:f2:d3:12:e8:18:e9:32:1f:85:67:16:6a:
67:de:53:45:3c:8c:12:db:68:73:c9:17:50:c3:04:
be:b0:1f:17:0e:d1:05:0a:53:8a:28:6e:45:fb:ce:
b0:ed:d6:7e:74:db:02:18:f4:04:83:fc:e1:46:c7:
47:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:98:98:5D:75:68:A1:32:31:7F:89:D0:04:2D:BF:93:12:B6:80:FB
X509v3 Authority Key Identifier:
keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5c:54:c8:e9:c8:34:73:6b:1c:03:5c:a1:57:9d:3e:7a:0f:
22:d5:f1:9c:24:a2:07:33:3c:e2:9f:51:d9:45:e4:6a:9b:a6:
60:7f:36:5b:0f:8c:3f:33:b1:5d:de:60:ae:8b:a6:63:5b:db:
ab:8d:ba:44:83:77:7f:52:79:e6:63:a0:9e:82:cd:cf:2a:91:
26:6f:55:65:35:59:f2:8d:a7:21:68:83:cb:7d:ae:07:53:59:
00:9c:e8:5c:73:f4:31:60:53:4f:3f:e9:47:f1:e8:ce:96:2b:
52:3d:7b:52:af:b8:85:9d:c0:ba:72:28:d9:51:91:ba:3e:1c:
67:28:ea:17:9a:c9:4a:ac:e9:d6:41:d1:e6:71:fb:aa:b6:41:
9d:4a:7d:1f:ff:3c:2c:6e:f0:98:35:7e:25:1a:77:39:59:82:
3c:c1:1e:99:25:c3:b8:03:f7:33:c5:3a:99:43:c2:47:c9:87:
41:8f:17:ea:e6:b8:5d:5a:38:de:6c:f6:d0:59:0b:c6:dc:06:
2d:56:59:08:5e:aa:14:f8:8e:fd:a7:63:54:23:85:85:51:64:
99:fe:a1:9b:22:29:f0:fa:19:b5:69:21:6d:95:4e:4b:f7:41:
36:c6:e3:96:4a:e2:a9:71:a8:71:d2:06:07:dd:23:31:d3:84:
0b:a5:ec:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:18 2026 by rpki-client