Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File: 9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier: d1s/wANGUI9m24DSF+Zp2gafY54lCMziOcmJusCYM9k=
Subject key identifier: 13:BD:23:11:41:F5:C5:45:83:7E:F0:BC:3E:13:DB:B5:F1:84:E1:3D
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 019CAB33E46634352196F777F84EEFC82793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number: 16F6
Signing time: Sun 01 Mar 2026 21:00:30 +0000
Manifest this update: Sun 01 Mar 2026 21:00:30 +0000
Manifest next update: Mon 02 Mar 2026 21:00:30 +0000
Files and hashes: 1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: kDcgj9RUtM7ibBuM07THf9c4Eoej2S4/LGSuPAHb9l0=)
2: ZZanlFxScyN4CQoGhBTQl2sVxVg.roa (hash: A34wmEZaQFDCuGsNd+TzvMoOwERkMP/gXQVur9pCPCA=)
3: pRFsySqGl0tFAUw52aDZNnq-uD0.roa (hash: w8jNvizOVr/p52jNZpTu/WC6lPFW3XL5WSYxYnBEKj4=)
4: xO0eawE2B1S0TKvBcaaGiQh0Ol0.roa (hash: dcuU5KhFuT+OtopOGBCq8QR05uFVdXywWZjFZcyGZgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:e4:66:34:35:21:96:f7:77:f8:4e:ef:c8:27:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Mar 1 21:00:30 2026 GMT
Not After : Mar 2 21:00:30 2026 GMT
Subject: CN=13bd231141f5c545837ef0bc3e13dbb5f184e13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1e:90:e0:6f:43:f3:75:bb:3e:1d:ad:71:c7:
b6:8d:28:c3:ae:f9:ee:b8:4b:6b:7a:37:08:e3:1b:
03:92:11:3d:39:e0:3f:b2:91:bd:9a:31:30:8b:f6:
cb:5e:46:e7:6b:8a:fe:9e:75:1b:55:3f:8a:43:32:
fb:eb:6c:45:33:b0:bc:11:4d:47:52:d1:db:58:f6:
d0:38:2c:3a:07:88:2f:53:f9:89:32:8f:2f:3c:f7:
91:b6:73:b4:81:49:ab:f7:bb:b6:43:0c:7f:b5:25:
14:fa:28:5d:50:9e:1c:c9:88:50:2e:52:96:7f:4b:
63:fa:94:1f:99:ec:28:5d:26:71:3b:72:97:12:df:
c7:f1:c5:54:9b:82:80:25:72:bc:1a:d0:9d:24:58:
56:cd:42:ba:75:43:40:97:7d:4b:0a:23:4b:f8:e1:
fb:bd:ab:e7:c6:e7:50:c3:8c:f4:2c:38:19:8c:a0:
5a:32:6a:a8:64:a9:b4:0a:01:35:2a:cf:19:c5:d7:
5d:91:20:6e:7e:f4:cf:f9:82:82:99:43:39:c8:00:
b5:de:64:db:6a:76:2b:f9:96:9d:c4:62:fc:d1:cc:
ad:91:bc:5d:aa:24:87:c8:3a:50:a4:18:7a:4a:ea:
bb:8e:72:38:54:2b:62:a4:ff:1c:dd:96:65:c6:c5:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BD:23:11:41:F5:C5:45:83:7E:F0:BC:3E:13:DB:B5:F1:84:E1:3D
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:94:d6:e9:31:ba:66:9c:17:b6:99:f1:f9:97:cf:29:c1:94:
af:15:7d:bc:80:8f:5d:fb:e2:b9:7e:4b:f2:40:77:1a:11:e8:
9e:2c:cc:27:98:a2:90:b0:d0:17:bc:e3:45:75:d3:b4:a1:4a:
f3:33:1c:5f:1b:84:7c:18:31:67:15:01:1a:65:ab:e4:f2:da:
50:91:7e:b7:6b:ea:3e:c0:d8:23:6e:3b:8a:69:3d:e7:53:bd:
65:ee:4b:6e:1b:b7:2b:1e:31:a7:f2:27:02:f7:86:29:75:d1:
71:ed:d3:48:5c:28:4d:0f:d7:b7:fc:f0:af:61:26:f4:5d:7a:
01:16:d8:05:9a:b0:3e:80:b7:51:8a:50:93:6f:09:ef:1c:b7:
bf:77:e5:9a:8f:72:10:91:81:e2:47:29:55:fb:10:f9:0f:b1:
eb:6b:89:c1:f3:ba:0f:a4:34:df:db:64:1f:7d:f4:7d:10:ef:
cc:de:2e:da:45:a4:9a:38:b3:3e:57:2e:92:3d:a1:41:33:79:
1a:01:23:3e:10:a4:5f:75:a5:b8:cc:a1:43:c4:34:af:31:94:
8e:b5:c9:1d:b2:c0:ce:34:3d:b7:9c:cc:08:ec:4a:3a:8a:10:
6a:b8:bd:7c:af:86:e2:0b:05:62:70:5a:56:9e:c3:0c:05:00:
be:dd:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:05 2026 by rpki-client