Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: iZUPOqUNXt3ZmPUa40VOEK7Zg0P0RyLl6Mat+L0DdYE=
Subject key identifier: 24:5C:9B:18:43:F7:CC:18:C4:A3:0E:51:26:EB:5C:90:B5:15:7F:7C
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 019CAAFD7BB86C2EF6F66AC712CA18C945FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:01:04 +0000
Manifest this update: Sun 01 Mar 2026 20:01:04 +0000
Manifest next update: Mon 02 Mar 2026 20:01:04 +0000
Files and hashes: 1: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: 7xLdTCiX7ip2TxtgQD9OhPq6nM6f3JqSJELhTWVHniM=)
2: ZEzLOpu5XtR6NBna_6IDb8EqXXs.roa (hash: 3osUcSjQKH0ELMcPBLnQ81viVvl9FJ67k0/UaKaDqp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:7b:b8:6c:2e:f6:f6:6a:c7:12:ca:18:c9:45:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: Mar 1 20:01:04 2026 GMT
Not After : Mar 2 20:01:04 2026 GMT
Subject: CN=245c9b1843f7cc18c4a30e5126eb5c90b5157f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6d:f4:b1:05:68:78:09:6a:15:fe:73:9d:bd:
5d:84:84:90:ee:1c:71:46:1f:51:8c:4b:00:8e:2e:
22:f0:7d:fd:28:c6:b7:0c:75:8c:38:0f:45:aa:6b:
29:a8:30:07:a0:5a:d0:db:7a:76:b4:ae:0a:e9:46:
78:74:fd:0b:61:82:1b:af:60:a4:41:53:1d:63:0b:
b3:3b:e4:b5:0c:a6:a3:35:8a:71:fa:d1:5e:95:60:
3a:df:c0:93:1e:1b:51:95:df:e6:ef:17:2e:5f:38:
d4:16:67:24:3d:2c:ae:a9:7a:74:3c:d7:62:c8:40:
ef:9d:5e:d6:14:ae:1e:ed:8f:d6:ff:00:a7:03:37:
a1:01:a5:d0:95:fa:cb:ab:32:23:1a:d3:a7:8d:9b:
44:87:1b:5d:7c:54:4a:d3:cb:f1:f9:0e:b5:4d:8d:
96:dc:25:06:91:51:9c:c7:79:52:52:82:52:22:a2:
fb:e4:59:32:4a:4e:a3:fb:1c:07:28:f1:bd:40:4a:
6f:fe:30:90:d4:6a:ff:38:a2:fd:8e:b7:2e:0b:cd:
ad:66:c3:b0:5b:39:09:70:ab:f3:74:b4:61:e7:a6:
1b:13:b7:c0:16:83:94:f5:e5:48:1f:4b:66:33:06:
cf:47:f2:3d:59:22:40:07:fc:a5:8a:81:c1:7d:35:
6e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5C:9B:18:43:F7:CC:18:C4:A3:0E:51:26:EB:5C:90:B5:15:7F:7C
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6c:36:e9:d8:7f:d4:40:da:fd:93:b6:3b:d9:20:fd:39:06:
ed:d7:b9:ed:e2:5a:6c:ae:db:cc:3f:99:5b:8b:de:7f:c6:20:
70:d9:5a:f4:13:d3:8d:e1:f2:05:a3:9b:ba:6a:d2:f7:47:64:
ac:55:31:11:ca:38:94:0d:b6:76:a1:19:32:a9:b3:a1:45:a5:
69:9e:9f:01:eb:71:93:df:fa:62:a5:69:7e:ce:08:74:98:bc:
c0:16:cf:20:49:36:5b:22:5e:3a:16:3b:94:f1:35:67:ee:0b:
8b:5f:4a:f2:06:65:3a:92:8a:03:0b:d5:a6:3b:55:bb:52:2a:
84:f7:6b:5f:f0:72:3a:5c:9d:bd:31:a6:18:29:f7:7c:aa:19:
d8:f3:9e:c1:1c:d0:dd:54:b4:32:ee:51:19:6e:96:be:ae:cd:
51:6d:20:be:6d:3b:45:c1:ce:71:ab:63:9b:40:17:ad:f9:8f:
70:8c:d4:7c:3c:e7:7a:b8:e2:58:90:68:8c:b7:5c:7e:37:dc:
d4:9d:de:7b:69:27:2f:14:2f:9a:90:5a:45:97:64:52:31:39:
53:7a:52:46:16:ce:9e:8e:94:88:4c:4e:4e:cc:4c:56:7c:fd:
ba:a6:6f:81:8c:cf:aa:ee:d8:c6:ae:0e:ba:7b:9a:32:8f:7f:
5f:91:cd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:36 2026 by rpki-client