Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier: JpZTS1+jNXCQvYzHC7UqDfWtQy+THfdEO3PlE6T/pxs=
Subject key identifier: 9A:59:D3:A7:5F:D7:0C:1A:8A:9A:2C:5A:CE:2C:A1:0F:AB:1E:C4:F7
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 019CAC7E0E9D80E27A9C40AF59461F879669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number: 18A9
Signing time: Mon 02 Mar 2026 03:01:08 +0000
Manifest this update: Mon 02 Mar 2026 03:01:08 +0000
Manifest next update: Tue 03 Mar 2026 03:01:08 +0000
Files and hashes: 1: 7kCTcBBf9Y2mZp4MQo4FaThhaw4.roa (hash: 4G5b5APOZBeeZ1ZvQcD3v0tSN26DXUsz89KNzub4qWo=)
2: Axy-VDMaL0TttuQWr1HwszNqc0I.roa (hash: bbZhwLgQwTeviEfEB8kT+/Hr8GEpDxbaZvVMkhGxoa8=)
3: EIf4_e1IxdxiLFBKRrmbYkLdBhg.roa (hash: wTMfLnzpxmyagKAjlQHgrc2pzICPnW5ADwDSG8SyfAI=)
4: TX_u3ri8rca4P81egD9tMMtVs-E.roa (hash: VizDbLVqd0zmsz68Is1wbARP6+9Ai1vW465jIZXJ0vw=)
5: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: zbRHg2L9fnQ2Cs4GxHYrSER2t+d7xjzGJfKiD1hG6dE=)
6: gnfK8SBpVOdVbxYnE0YvG_aCqwQ.roa (hash: 4HCQGxp9LRlzVGgeY9uvcPRB+giBsSJBc0o5g6+TINI=)
7: nlpW1LdUG8ccgcMsu_bYGBcmxBE.roa (hash: WjkJjvp8/U7WObhL1QFmDulfOKAgaqrKAeSX8GWbEKY=)
8: wtWJEYRFSG9Qv3ctSlt-PvC9YxU.roa (hash: zMI/aBSI0MnE5srRM6wJIzfTVWrBiFahbqJC56lWnfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:0e:9d:80:e2:7a:9c:40:af:59:46:1f:87:96:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Mar 2 03:01:08 2026 GMT
Not After : Mar 3 03:01:08 2026 GMT
Subject: CN=9a59d3a75fd70c1a8a9a2c5ace2ca10fab1ec4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8d:78:ad:dd:32:1a:8e:76:b2:62:e3:c0:78:
8d:d6:cd:50:31:fa:10:c2:97:13:28:25:7f:d2:15:
3f:c1:0a:86:c8:8a:b4:b8:32:33:b1:fb:3c:e5:7c:
1a:27:b5:9e:5b:38:90:f2:d3:26:2a:aa:5d:7d:14:
b4:50:0a:7b:bb:4d:9c:79:6e:6b:c8:4b:21:25:2f:
8e:71:68:17:a7:9c:c7:35:13:a0:53:34:c1:60:50:
e8:cb:ee:42:fc:91:72:51:3c:fb:f1:7b:ab:97:26:
5d:1c:c6:3b:bf:75:11:ea:b0:00:90:71:cd:0e:3d:
96:9e:bc:0c:7a:1e:76:bd:78:01:d5:c6:9c:74:fe:
c1:64:bf:ff:2f:22:3b:21:1c:9c:03:25:3c:b4:ef:
af:84:60:60:03:9f:75:56:ee:65:cf:88:67:5c:ee:
17:6a:d4:ce:27:df:65:74:72:bb:89:1a:fc:8e:2d:
52:b7:d2:04:43:3d:35:a7:dd:04:6f:31:d5:63:a8:
ac:0e:33:e9:07:d4:37:34:12:a8:05:a1:4c:54:02:
ae:c3:b0:eb:9f:e9:c6:30:64:06:3d:52:3e:2c:77:
2f:4c:e6:25:01:12:91:f1:ed:a7:77:f4:0c:15:4b:
47:02:95:8f:ef:c2:56:18:14:d1:5d:dc:ab:9f:05:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:59:D3:A7:5F:D7:0C:1A:8A:9A:2C:5A:CE:2C:A1:0F:AB:1E:C4:F7
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f3:cc:e2:d3:81:b8:6f:cb:c4:ed:54:a1:cf:5d:36:1c:a2:
1f:98:12:ec:91:6d:49:14:14:61:09:d1:06:f1:ad:c0:0c:88:
79:3f:57:02:82:34:78:79:80:6b:18:d8:07:ad:5c:ee:40:88:
d0:00:45:f2:54:a9:39:f0:5d:d0:90:77:51:f9:2a:0c:f9:5f:
e6:15:f6:c3:55:01:a4:e6:7f:f7:79:e9:24:0f:8b:a8:09:ae:
f3:17:cb:fc:69:d7:d1:2d:8f:3a:9f:ef:1a:f8:06:d2:e6:27:
4c:f3:93:15:4c:24:24:55:87:c8:3f:2f:3a:fd:d0:f1:36:13:
49:df:ee:19:82:b0:97:eb:13:1a:58:2a:42:32:e4:ec:60:aa:
9a:7e:32:d5:5a:61:c6:73:8d:c9:69:1a:5a:51:07:33:c0:b7:
1b:35:66:0a:88:56:f9:62:ab:50:13:96:b6:5b:7c:7c:1a:d7:
8f:5a:0d:a7:0e:b7:f9:7c:39:6e:50:7a:bd:02:5b:77:21:68:
2f:3b:f5:fd:53:8e:ec:bd:95:3a:ce:77:eb:23:4a:57:94:56:
48:42:72:9d:3b:21:f1:cc:94:e4:d2:c5:36:b3:f5:9e:3b:f8:
23:04:33:a0:20:4d:5a:5c:17:b3:a3:52:89:78:02:3f:30:fa:
cd:49:d5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:55 2026 by rpki-client