Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
File: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft (raw, json)
Hash identifier: 2R3APwgVLQTYcamDSlwvj8thzaHcp/DZY2cSYj9k/vs=
Subject key identifier: 55:47:76:11:6B:BD:BA:BC:65:5F:5E:5A:57:D9:76:99:9B:5F:6C:90
Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
Certificate issuer: /CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Certificate serial: 019CAAC6D0401DE41F6079E1FB4362A82039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
Manifest number: 0EDA
Signing time: Sun 01 Mar 2026 19:01:22 +0000
Manifest this update: Sun 01 Mar 2026 19:01:22 +0000
Manifest next update: Mon 02 Mar 2026 19:01:22 +0000
Files and hashes: 1: 9SmHJmrRitclj89O3P3NGh06YYQ.roa (hash: W4KwZ7FIlwcvzJ1G1mBi+F6bA87M/+t0Oq23zCNKxM0=)
2: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl (hash: 5aIJDMNUWCO+I+5+yghAcXLb0hrxr6Vy9QREDH6fUaA=)
3: aQ_GfdLhVfeWZDkm7-WSjIfSbIw.roa (hash: dZ1mg6u90Iped4j/Ep8zJIk/Xe9I73j9HaUUu+dqgcc=)
4: pEFtj6Nro20j5spflBdzEuX8rMA.roa (hash: MXSSlBPtlMFzBs9OUlqNPvPkqCnFxlhb4rh8/UD72i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d0:40:1d:e4:1f:60:79:e1:fb:43:62:a8:20:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Validity
Not Before: Mar 1 19:01:22 2026 GMT
Not After : Mar 2 19:01:22 2026 GMT
Subject: CN=554776116bbdbabc655f5e5a57d976999b5f6c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d4:58:0d:20:91:f6:4a:13:11:5c:9e:82:22:
a5:a6:1a:03:06:35:8d:05:55:fd:9b:4b:42:ec:12:
db:76:f7:83:f8:4d:d7:1f:a8:00:b4:b5:55:26:c4:
13:a5:0c:ae:41:68:0d:e2:dd:58:bd:67:12:76:d9:
b9:22:97:db:1b:9a:71:c9:d3:d1:cb:04:5f:bc:ee:
4a:96:35:61:a4:5e:e1:9b:89:ce:19:b2:27:f3:10:
33:25:eb:8f:39:ac:10:93:14:88:23:dc:2d:17:91:
40:67:99:04:46:86:02:e8:3d:4d:20:cb:79:a1:e4:
b1:ec:fc:42:fb:b4:c0:d9:a1:eb:51:97:e3:c9:18:
0e:d6:3a:03:b3:a2:e6:9f:02:21:6c:e5:9b:1d:74:
72:a7:a4:c2:a8:66:60:40:cd:dc:70:08:84:73:55:
8b:0b:78:9c:83:81:bf:b5:8c:b4:a6:19:7e:e6:9a:
63:f6:0d:10:8a:4e:9f:ab:d6:ba:d8:29:5b:15:b8:
93:bd:4c:6e:92:b5:4c:9b:0f:28:b7:8b:90:4b:53:
bd:1e:71:7a:4e:2c:e5:31:b3:aa:c7:1c:2c:03:23:
01:e8:34:3c:c1:ce:a8:d1:c3:ca:9a:87:88:95:36:
10:4d:d3:aa:45:c1:89:75:f7:a6:b0:07:cc:af:c2:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:47:76:11:6B:BD:BA:BC:65:5F:5E:5A:57:D9:76:99:9B:5F:6C:90
X509v3 Authority Key Identifier:
keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:7d:cb:08:5e:31:05:24:88:4d:61:3c:72:5c:c3:09:41:0d:
6f:73:17:48:8b:7f:c0:b0:11:1a:8b:fb:82:06:6b:71:20:0b:
21:3f:a1:93:34:1a:28:d3:0a:aa:91:96:23:8a:02:ac:4f:3a:
ac:db:5b:21:24:bb:9d:5e:fa:83:93:83:5d:ff:e1:ee:d3:a0:
11:fd:be:da:6a:00:83:f4:d4:e2:c4:29:ce:cd:80:af:51:df:
08:05:48:e0:0b:4c:bd:d7:af:c8:a1:54:02:a3:0e:8f:02:de:
a9:bd:88:e7:c0:84:ba:77:3d:20:a3:ab:82:4d:de:a4:36:ae:
74:60:d6:a9:ad:ab:d3:9a:a8:5c:20:14:f7:f2:5a:12:9a:45:
c5:88:ed:06:eb:d2:08:ea:ea:38:0c:38:3a:5a:66:d5:47:af:
70:70:ad:80:0f:6c:7a:5b:7c:4d:7e:b2:98:2c:90:58:83:45:
f1:9e:b4:7f:6d:96:16:41:1e:8f:01:6c:4c:e1:0d:9a:87:7d:
7d:40:41:9a:2d:06:dc:f6:71:e7:b5:95:3a:28:a4:56:f5:8d:
67:33:ac:83:06:5e:56:ed:a0:24:98:69:e2:36:aa:0c:0b:ca:
92:39:fd:e4:65:23:c3:f9:ce:04:a8:5a:a6:ae:e6:8f:8a:31:
79:d2:11:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:34:41 2026 by rpki-client