Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
File: 0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json)
Hash identifier: 1t60DbwbUgKbXkOyefvhOcK1AYF+762l3rS1lsYRjTs=
Subject key identifier: CD:24:68:98:55:AE:57:B3:BB:44:ED:F2:F6:91:ED:99:4D:C1:DD:D6
Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
Certificate issuer: /CN=d11f6d924d6f6cc0e940837d9301fce732065771
Certificate serial: 019CACEBCD8411F551586B27B535DBF07607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
Manifest number: 06A0
Signing time: Mon 02 Mar 2026 05:01:00 +0000
Manifest this update: Mon 02 Mar 2026 05:01:00 +0000
Manifest next update: Tue 03 Mar 2026 05:01:00 +0000
Files and hashes: 1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: xJv5LY15uy+FTuHgEjppjlLpyenreYYznsghFAj+8c0=)
2: RnVTKZtoHdvPsfS8AH4yl7Tn4u8.roa (hash: Pgpu3NuPaXsm7XOY/YOTMwi4KbLTR5P/cSiW4/B73kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:cd:84:11:f5:51:58:6b:27:b5:35:db:f0:76:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771
Validity
Not Before: Mar 2 05:01:00 2026 GMT
Not After : Mar 3 05:01:00 2026 GMT
Subject: CN=cd24689855ae57b3bb44edf2f691ed994dc1ddd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:18:aa:85:35:bd:c3:62:0a:2a:8a:06:56:
37:6c:a5:0d:fd:80:ef:61:0e:02:6d:59:4f:48:5d:
08:1d:6e:b9:5a:83:d8:9f:39:ac:09:5e:48:db:95:
d0:5b:ae:3f:a3:1f:d2:3e:7d:9b:2e:1a:c6:7f:5a:
31:f2:f8:30:6e:4b:78:2d:d6:d7:7b:cd:c8:b9:58:
90:ba:bf:bd:95:8d:f5:79:11:e5:f1:d2:24:be:5c:
9b:12:83:40:e7:28:86:0a:27:65:65:8e:9c:4c:ea:
ee:f1:3e:f8:48:56:b7:01:ad:b7:9c:c5:da:39:fc:
a9:92:4a:cf:28:48:1e:eb:2e:ad:3e:bf:6f:d6:96:
b4:01:1b:53:46:e8:41:71:f4:21:7a:45:de:31:f2:
20:04:6f:bb:80:7c:1e:d0:60:d0:3f:8d:67:4f:f4:
35:94:64:c3:ef:41:e7:8f:13:99:fe:72:3f:f1:d3:
73:7c:26:12:48:d3:6e:61:03:fc:bf:a0:f5:12:6d:
46:9c:96:c4:da:6c:1e:80:41:60:5c:1d:8b:1f:10:
6c:ce:ff:85:db:ed:60:25:b5:9b:9a:7e:69:00:20:
df:99:68:7f:26:f3:3f:3c:20:b5:80:fe:2c:28:6d:
f3:3c:02:85:c9:84:e1:79:13:e8:f1:a8:ac:f0:66:
de:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:24:68:98:55:AE:57:B3:BB:44:ED:F2:F6:91:ED:99:4D:C1:DD:D6
X509v3 Authority Key Identifier:
keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:47:aa:53:f6:68:64:7a:6c:7f:de:f1:f9:00:5f:af:bf:73:
ad:9f:79:0e:17:d8:64:df:47:ab:f5:7a:a5:85:e3:a0:67:a6:
be:01:ee:57:49:52:b2:ad:67:12:f9:56:25:3d:ee:de:3a:a6:
89:b0:1b:cf:25:81:b1:8a:38:f3:17:84:4b:12:99:8e:0a:7a:
30:4e:47:4b:36:df:06:ee:1f:7e:3b:8d:22:58:cd:42:1d:c3:
a9:d1:77:df:34:3f:c5:50:bb:08:5f:57:40:7c:cf:96:fa:e9:
df:f9:97:c4:e4:13:c5:62:4b:55:4c:a6:de:b5:5b:59:b7:70:
fd:fb:41:8b:12:23:c7:24:17:ac:9a:95:bf:8c:7b:7b:b1:1f:
9a:4b:fb:05:a8:0a:af:6a:34:c8:1d:03:48:c6:43:42:b1:39:
c3:15:54:8e:da:42:ac:9a:e8:81:f4:97:f5:af:16:30:ea:73:
90:2f:b2:44:ba:fe:4f:13:69:8c:3c:8a:1a:c5:14:07:8f:9c:
8d:02:66:77:ec:48:76:e6:53:23:11:a2:ef:40:39:aa:a8:5a:
db:ae:56:02:4b:4d:b6:cf:25:1a:02:7c:72:04:5b:b2:36:43:
88:b4:3a:02:fd:0a:33:b3:35:79:4a:a7:e1:17:b2:12:94:91:
5e:8e:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:12 2026 by rpki-client