Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: e9jrGAASu5yco1bXuHJh1dJQzwmLaujQfVmiV3emHSs=
Subject key identifier: 28:61:2C:C7:29:51:48:45:62:3D:15:23:78:94:CD:2B:A1:CA:CD:79
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 019CAA58CC5045A5D554837F103A582A3954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 08AA
Signing time: Sun 01 Mar 2026 17:01:11 +0000
Manifest this update: Sun 01 Mar 2026 17:01:11 +0000
Manifest next update: Mon 02 Mar 2026 17:01:11 +0000
Files and hashes: 1: 0DAQlpT9x-QaKyJ8cOE4xeRFybQ.roa (hash: cLzURrgNbzm6pPzLt8hQc5OKqgGCPtGdJQ9/RRN5LZU=)
2: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: ypLvWDYxSMVwfPOr3DNeB4HxR3TKr4X9ZdCBR5lkDdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:cc:50:45:a5:d5:54:83:7f:10:3a:58:2a:39:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Mar 1 17:01:11 2026 GMT
Not After : Mar 2 17:01:11 2026 GMT
Subject: CN=28612cc729514845623d15237894cd2ba1cacd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:f7:fd:61:fd:e6:fe:f6:1a:5e:9c:40:b9:
be:76:6a:85:a1:04:ca:a4:ee:ad:cb:74:93:50:2e:
3d:c3:af:01:4d:a2:9e:5f:1a:39:2c:98:17:97:75:
54:4d:c6:00:91:b6:05:cb:05:51:3f:be:eb:c5:33:
f0:70:54:4e:b0:29:6e:83:71:35:4a:5f:21:a1:f7:
c7:5a:74:5f:6a:8b:af:36:90:d0:1f:a4:8b:4a:54:
d9:d7:d6:43:96:11:29:fc:26:ea:51:cf:b3:ce:10:
7a:6a:79:26:c9:4f:f5:c3:5f:8e:1b:de:3e:f5:ec:
1a:f1:fd:fc:0f:a1:c1:1e:9d:48:14:8c:b9:15:7f:
ce:1a:ff:af:96:ec:44:1f:df:e8:da:e8:e1:d0:7f:
f2:7f:d9:49:1f:00:56:63:5a:26:c6:87:f8:98:51:
6c:1b:eb:cc:84:68:37:12:ef:4c:86:6a:5d:6b:80:
db:63:6b:b1:ef:b5:56:6a:23:7a:0f:d9:0a:21:5a:
f1:31:e0:39:8a:4f:07:e8:03:a4:df:5b:c1:34:4c:
61:d4:8b:1f:b9:71:a9:31:d8:5b:65:5b:a5:08:21:
d2:68:5e:42:41:3a:99:a6:90:c9:de:89:cb:a6:a0:
0d:bb:f6:ee:10:61:33:13:bc:51:ff:b0:63:20:be:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:61:2C:C7:29:51:48:45:62:3D:15:23:78:94:CD:2B:A1:CA:CD:79
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:01:9c:ee:d9:cf:dc:b1:33:98:7c:67:e4:d1:bf:8d:f2:8e:
07:1d:6f:8f:05:5b:81:cf:95:7e:dc:17:fa:94:0c:dd:e5:2a:
e2:5a:d7:dc:e2:55:31:79:a4:3b:65:5f:14:59:0b:90:e1:47:
15:1a:19:6d:a7:73:8e:7f:c0:82:15:8b:f2:e7:c8:83:58:53:
8f:34:2a:72:5a:1f:ed:db:52:c0:a5:14:18:61:56:79:ad:49:
7f:94:ff:48:d9:1e:0a:ed:0b:32:f8:6b:c9:5e:ce:90:7f:37:
07:45:4d:7c:5a:33:20:b3:0c:85:d1:c0:e2:79:a0:c0:f9:30:
40:1d:62:cd:b1:35:1b:da:08:e4:54:40:ac:d7:7d:5f:5d:c6:
0e:31:1b:0d:19:3e:c5:ba:0b:b6:d3:49:f7:82:88:4d:9a:0c:
f5:23:aa:75:7a:1f:b2:af:50:65:22:a3:0c:c1:ee:2b:33:2c:
ee:5e:57:3c:ff:07:b4:92:b5:ff:67:e3:ab:a1:43:52:4f:60:
27:60:06:48:28:1c:73:74:72:ed:7a:80:d9:5d:bd:83:b1:1d:
cd:d4:cf:20:ae:9f:73:4b:18:94:03:d4:26:e2:ec:c3:76:3a:
f8:43:59:24:24:06:d8:b7:d6:8d:33:11:be:e2:75:6b:d3:78:
55:da:79:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:06 2026 by rpki-client