Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: yf9W6O+0oVbRtcOvlJl3PCdNC+GpXQaGPwa2S2Oa2BE=
Subject key identifier: 40:C9:A3:DC:63:63:49:0C:CB:56:71:54:B0:F7:43:0E:6B:17:EC:DB
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 019CAAC708DF272365554A871DC4C3892792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 19:01:36 +0000
Manifest this update: Sun 01 Mar 2026 19:01:36 +0000
Manifest next update: Mon 02 Mar 2026 19:01:36 +0000
Files and hashes: 1: BKEbuwMgtraLYD7tz_bOlWvPTyU.roa (hash: 4+VeGIyK69ig1zU9o8l43jPylF7T3GhRdlEeEiB531Q=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: g4gZw/Wd9cOw0lag7rdcLY6Dta5frImNTjGoz6Qiw2A=)
3: zr9U94ldVmEqABzp28N8U7oLDs8.roa (hash: uuO8FGDaDTUpNR5s2Koo87GcscBCUOkl1Mw1TeypQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:08:df:27:23:65:55:4a:87:1d:c4:c3:89:27:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Mar 1 19:01:36 2026 GMT
Not After : Mar 2 19:01:36 2026 GMT
Subject: CN=40c9a3dc6363490ccb567154b0f7430e6b17ecdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:fc:2d:57:44:6a:bb:34:05:08:9b:95:87:
76:fc:f8:54:df:00:44:f8:e5:15:bf:6d:78:dc:cb:
ec:da:85:24:4b:00:4d:b3:71:ca:09:77:96:61:30:
c9:ce:87:4e:59:48:63:2f:b6:6d:fe:2d:1b:cd:d7:
ae:f1:5a:f0:3a:a1:a7:76:14:0f:58:52:4a:d5:26:
5e:07:2d:18:cd:45:e7:22:62:34:c7:9a:3a:4d:47:
35:00:c2:89:d7:98:7a:f9:28:09:03:9a:34:2a:d8:
da:52:6e:c7:a9:ed:5f:10:8d:02:26:2f:cb:25:25:
b1:2b:70:66:56:eb:18:27:a9:88:9e:51:b3:7e:ba:
75:d2:db:da:1b:ba:71:bf:45:98:5e:4e:ba:16:7f:
f8:49:4c:d0:74:b9:5b:21:f9:f4:f9:94:d3:ab:4b:
44:91:a1:c2:39:8e:a5:60:00:e1:7e:4e:b8:e9:99:
e1:fd:1a:3f:07:d8:33:60:af:d0:4c:88:71:55:57:
71:cb:50:17:e5:a0:bc:e2:dd:15:d6:ab:06:3b:33:
c4:83:5e:eb:2a:16:85:fd:40:f6:f6:4a:34:ea:22:
77:81:c7:4a:22:87:2c:43:fb:d9:d7:72:f8:06:bc:
2d:2b:a1:5c:33:98:1a:7e:2c:15:20:5c:f7:f5:8e:
0d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C9:A3:DC:63:63:49:0C:CB:56:71:54:B0:F7:43:0E:6B:17:EC:DB
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e8:13:08:d7:29:b1:fb:a5:4c:f3:19:31:aa:7e:df:c7:4c:
ac:63:c1:5a:2c:c8:32:67:ed:98:c1:44:f1:58:6a:6b:ff:d2:
f8:2d:25:9b:08:dc:04:e7:5c:ac:b3:14:32:f1:88:b6:ec:cc:
32:f5:4a:6a:8a:62:1d:22:d3:be:24:e2:23:f3:64:cb:86:54:
44:b1:79:cc:3e:db:0e:b8:e8:14:8e:9b:71:84:d1:c1:33:f9:
db:85:4f:9a:c7:55:24:f0:bc:94:7a:e7:45:4e:68:41:91:41:
51:25:92:53:78:cf:33:6b:e2:2f:ba:6f:4f:92:53:42:f9:92:
78:02:69:25:e1:4f:7b:da:6e:18:53:d9:c8:2f:02:65:ff:5a:
20:1c:2b:c5:14:87:ac:06:bb:99:6d:5c:97:c9:db:de:ed:d3:
9c:8e:90:5c:d6:1b:12:47:c8:6d:31:24:01:ee:2f:16:97:23:
57:65:5d:50:6f:9b:35:d8:53:84:d1:db:cb:7d:5a:41:b4:5a:
37:b4:9c:8d:98:cc:1f:c8:6e:66:62:8c:63:b8:bb:46:fd:8d:
e8:d4:fb:e0:c0:f9:d4:ad:81:dd:fc:83:1b:94:cf:cc:28:4e:
61:32:eb:a3:fd:5f:fd:ad:7b:ac:ed:d0:d7:01:fc:b3:17:1a:
d7:6d:67:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:09:42 2026 by rpki-client