Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File: 9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier: EIAQFCHn9Eh8TgupLYJoBl0C63N0Atzd4+G28Oyk1PY=
Subject key identifier: A2:F7:ED:AF:29:72:09:F2:F7:DE:E2:C9:4B:BA:8A:D7:71:E8:F2:4F
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 019CAD22466C15C28C315805692CAF04CEF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number: 16F7
Signing time: Mon 02 Mar 2026 06:00:30 +0000
Manifest this update: Mon 02 Mar 2026 06:00:30 +0000
Manifest next update: Tue 03 Mar 2026 06:00:30 +0000
Files and hashes: 1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: SWMWJevPnIwBiqkSBaTWssK/vTgSn96eeyCqPsq+UcY=)
2: ZZanlFxScyN4CQoGhBTQl2sVxVg.roa (hash: A34wmEZaQFDCuGsNd+TzvMoOwERkMP/gXQVur9pCPCA=)
3: pRFsySqGl0tFAUw52aDZNnq-uD0.roa (hash: w8jNvizOVr/p52jNZpTu/WC6lPFW3XL5WSYxYnBEKj4=)
4: xO0eawE2B1S0TKvBcaaGiQh0Ol0.roa (hash: dcuU5KhFuT+OtopOGBCq8QR05uFVdXywWZjFZcyGZgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:46:6c:15:c2:8c:31:58:05:69:2c:af:04:ce:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Mar 2 06:00:30 2026 GMT
Not After : Mar 3 06:00:30 2026 GMT
Subject: CN=a2f7edaf297209f2f7dee2c94bba8ad771e8f24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:98:d5:9b:06:c2:5d:04:a4:7e:ea:f1:a9:3f:
15:e1:4e:8e:06:7a:97:9a:67:02:6e:9c:88:47:81:
0e:f0:5a:7f:96:8f:0c:e9:11:38:48:49:d1:f6:4f:
e5:c0:e2:71:ca:23:47:f8:b3:4f:ab:3d:88:d1:17:
b3:d9:a2:d4:ee:c2:b9:fc:7d:42:5a:5a:ed:72:f1:
a9:9d:5b:aa:2d:c8:7d:a0:4d:18:82:c8:f4:a4:2e:
b2:c9:47:16:da:0b:da:19:d6:77:1b:7d:23:e3:4a:
2f:86:bd:7c:1f:8f:86:a9:80:ed:b0:72:9f:7d:15:
f3:1e:e8:e0:58:71:34:bd:b8:0b:7e:36:9e:9d:21:
e4:11:1f:98:75:53:9f:d9:67:b3:de:7b:ae:74:1c:
80:ec:42:23:2e:e3:da:96:50:14:f0:f7:cf:95:62:
70:c8:9c:a0:02:79:f9:ef:cc:6f:b5:c5:cf:77:b1:
14:64:f1:2e:3b:5d:45:6a:31:8f:fa:c4:35:d6:89:
4b:a4:c7:61:eb:b0:07:36:bf:56:41:32:fe:3e:4d:
09:51:20:8d:72:bc:6a:7b:6c:6b:35:64:eb:39:ae:
30:ff:46:2e:9b:69:08:d7:d6:db:6e:2e:1e:45:f8:
25:21:92:2e:27:72:01:df:4b:50:ae:50:7a:e8:17:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F7:ED:AF:29:72:09:F2:F7:DE:E2:C9:4B:BA:8A:D7:71:E8:F2:4F
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e5:f6:d4:69:12:07:70:70:91:65:94:88:2f:77:2d:01:4b:
ec:f3:5c:d1:ef:ea:34:51:19:96:09:7e:07:ff:c4:71:c6:b4:
09:d8:2e:8e:22:3f:66:5c:12:49:27:81:ef:cf:ce:3e:4d:9f:
4a:54:0f:9c:e6:5e:a5:ff:87:1f:e5:d7:1e:31:4d:91:90:99:
35:11:f1:a9:52:01:a8:c8:be:48:62:71:33:44:96:55:74:8f:
07:24:6c:37:b8:3f:b8:8d:67:87:aa:f3:dd:71:26:9a:95:34:
7d:54:e2:5b:50:0b:ef:ad:ce:90:55:b1:62:03:e6:6c:93:1d:
f4:c4:39:df:28:1c:81:09:8c:e6:63:88:85:74:62:9e:57:f2:
20:51:47:fd:d8:c3:42:a5:46:b5:7f:79:51:42:22:1c:1b:4a:
ca:38:c2:73:a7:d2:65:37:29:ec:dd:df:5b:89:77:35:92:de:
f8:74:34:16:80:4a:f0:90:33:eb:05:88:ff:7c:37:4c:55:8f:
94:8f:f2:0b:d8:ae:c5:92:8c:22:51:d2:47:dd:81:d1:ec:0b:
3a:19:64:f8:92:ba:28:1c:c0:a6:09:d4:0c:eb:58:81:1f:cf:
48:07:70:00:d7:92:c5:0e:a2:53:05:01:13:2e:8f:fa:df:13:
5c:0f:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:35 2026 by rpki-client