Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
File: g9Nuy69V5GTgCzmH2lJktq8tz4g.mft (raw, json)
Hash identifier: /1S3/eE7Qtgi/oqbzTMzIKJ3/gU/cNC491krVHCJzYQ=
Subject key identifier: E0:8B:77:77:BB:67:01:6A:A5:29:D9:2C:5B:65:77:F7:AD:73:48:BF
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Certificate issuer: /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial: 019CAE6C76B5D4F7B213E57157F11E8B4079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
Manifest number: 0D35
Signing time: Mon 02 Mar 2026 12:01:09 +0000
Manifest this update: Mon 02 Mar 2026 12:01:09 +0000
Manifest next update: Tue 03 Mar 2026 12:01:09 +0000
Files and hashes: 1: g9Nuy69V5GTgCzmH2lJktq8tz4g.crl (hash: sxDO6fJv0XAl4GH2lsfsvngKc75a+h3Ly7BtY4yhVIY=)
2: m2ZF-74RUnpYCSRQzi58JGlu94U.roa (hash: rCyhTyXzRp0exhx6DF5SAa1YSYaN0bDG8IRLr2ntpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:76:b5:d4:f7:b2:13:e5:71:57:f1:1e:8b:40:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Validity
Not Before: Mar 2 12:01:09 2026 GMT
Not After : Mar 3 12:01:09 2026 GMT
Subject: CN=e08b7777bb67016aa529d92c5b6577f7ad7348bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:9d:2e:31:89:f6:61:03:cc:24:55:01:0f:
ac:f0:4f:87:46:2a:40:a7:97:c6:2f:1a:5f:e3:3e:
11:eb:7f:47:a8:c1:c9:a1:15:f1:9f:df:35:ef:41:
26:e1:ff:f2:46:f3:e5:c1:61:b4:25:75:4b:31:91:
5d:57:bb:c8:59:e4:5b:f5:02:f5:3f:63:34:4c:bc:
d9:f4:d8:c8:66:63:a8:9e:28:58:c8:ee:8d:b6:29:
0c:52:02:24:ca:e2:77:46:9d:bd:9c:e8:e9:14:1f:
02:75:b8:2f:eb:84:e1:06:36:58:22:0e:24:71:68:
60:97:1f:8b:f6:3e:c6:d8:11:15:d8:4d:35:b3:fe:
12:24:11:cf:27:b4:14:95:d7:58:bc:49:b4:0e:1e:
2c:8a:30:57:1e:5d:8b:fb:4c:5f:37:55:3d:13:bc:
f2:f0:1d:42:d3:de:70:08:f4:63:91:77:70:ef:6e:
e7:2d:c3:30:4b:2a:6a:b0:48:b8:08:17:ab:2d:61:
3b:97:6f:48:9e:b9:c5:c6:61:d1:06:3c:e2:75:5b:
92:d2:ca:f0:91:d6:84:86:0c:45:42:cc:63:1c:0d:
06:f2:02:06:da:83:0b:b2:c8:01:44:0c:31:85:4d:
02:ff:a7:5f:82:53:36:a6:8a:72:80:ee:59:2c:db:
e9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8B:77:77:BB:67:01:6A:A5:29:D9:2C:5B:65:77:F7:AD:73:48:BF
X509v3 Authority Key Identifier:
keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5e:76:0f:c6:2f:5e:c8:42:1c:7c:dd:72:46:f7:b9:04:dd:
16:72:fb:33:b2:97:78:e1:6c:3f:55:81:b6:ca:12:5c:a3:25:
be:ff:05:00:16:3e:a8:93:d4:08:18:cf:2a:15:12:d9:20:a8:
67:f9:33:f8:39:e7:ac:27:16:87:83:66:b9:f4:f3:0d:a9:86:
1d:fa:96:33:bb:39:17:c9:17:11:e1:72:4d:1b:78:1b:06:1a:
3a:d5:db:21:86:f4:43:80:ae:c3:c8:b0:03:69:f2:9d:61:a7:
7c:5c:2a:b8:61:42:c1:d4:e8:47:61:9f:fc:50:ea:b9:f6:13:
64:26:12:24:05:ff:a8:e9:28:2b:c2:ae:c2:2d:5e:47:c5:09:
1e:fc:56:41:e8:6e:70:63:40:9e:9c:3a:1d:2c:d4:cf:a9:87:
4e:0c:d5:bb:d4:83:d2:57:38:20:69:d0:9c:a3:17:01:96:b0:
7f:4b:c3:e4:a9:c9:9a:4a:4d:36:69:35:16:8f:a4:1b:41:cf:
aa:eb:18:87:37:e6:50:11:46:49:54:00:3e:7a:ef:cf:17:8a:
b4:b1:26:7a:58:56:4c:7a:38:df:f1:ff:a8:1c:7d:96:8f:93:
73:3f:80:bb:4e:c8:4e:cc:52:63:4e:84:41:15:94:f1:55:11:
ac:78:57:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:20:42 2026 by rpki-client