Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
File: 9nKGX4FRC5RVt-qbyMfa15k9U5o.mft (raw, json)
Hash identifier: k+JhlWzgwAK0OaymMRJidHlXPw2FdtZwSjrgpBDBuJ8=
Subject key identifier: 0D:FB:66:EE:6E:88:47:F6:5C:F8:C3:76:55:4C:60:B0:46:AD:75:BC
Authority key identifier: F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
Certificate issuer: /CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Certificate serial: 019CAB344ED2F8F2B1BD497D45AB951335A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
Manifest number: 0181
Signing time: Sun 01 Mar 2026 21:00:57 +0000
Manifest this update: Sun 01 Mar 2026 21:00:57 +0000
Manifest next update: Mon 02 Mar 2026 21:00:57 +0000
Files and hashes: 1: 9nKGX4FRC5RVt-qbyMfa15k9U5o.crl (hash: mZc4n2o7TSYGjE8s2rf52SrabwMRMjHkrpZA9s7AAyg=)
2: tbayT3vxpj9F6-hjVdEL1Ty6y0U.roa (hash: Ko/+YeSqgQQmx5PHs3jC/GfjdrV44JmmirXuegDNGWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:4e:d2:f8:f2:b1:bd:49:7d:45:ab:95:13:35:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Validity
Not Before: Mar 1 21:00:57 2026 GMT
Not After : Mar 2 21:00:57 2026 GMT
Subject: CN=0dfb66ee6e8847f65cf8c376554c60b046ad75bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:c1:de:71:da:9f:01:7d:34:49:0a:c9:35:
d8:29:49:b0:9c:5f:31:63:a4:6e:30:7a:03:09:8e:
a9:08:17:1f:7a:ef:40:df:55:8d:e7:a5:14:e1:b9:
b4:c5:f2:b7:eb:6d:e7:dc:66:98:f0:3a:08:55:65:
29:ab:92:fa:8c:bf:50:4a:1e:a5:fb:2b:5a:2e:0f:
a4:82:e4:1f:67:47:25:06:8b:4d:b2:59:d8:6b:f1:
20:a6:85:71:c4:30:86:eb:d4:1e:f3:b2:da:9e:1a:
90:3f:f3:45:30:d1:5b:56:72:2d:d3:3f:75:d4:a5:
43:6f:ff:9e:5c:9d:1b:71:f4:c4:4b:ea:b0:e4:a6:
38:da:76:e4:6a:ff:f8:87:82:31:21:ca:b4:6d:70:
f6:6f:05:1b:b4:da:15:41:58:cc:f8:c2:62:44:7d:
b5:ff:86:76:d5:67:5a:ba:02:f0:5f:81:23:f1:2b:
a6:2e:d3:6c:30:ac:18:e5:b2:a8:29:6d:a1:f0:4c:
4f:2f:58:62:1d:e2:47:83:42:36:31:92:4b:61:d4:
d1:b1:81:8d:74:44:5a:24:07:a6:59:47:47:22:b4:
34:86:f8:86:16:db:2e:5b:a6:a4:0d:07:ab:cc:f4:
9d:9c:64:44:e5:84:f3:82:52:48:e3:31:be:45:11:
b1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FB:66:EE:6E:88:47:F6:5C:F8:C3:76:55:4C:60:B0:46:AD:75:BC
X509v3 Authority Key Identifier:
keyid:F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:dd:96:4a:b2:30:d9:40:ab:57:e0:c6:ba:9c:8c:12:2f:da:
b3:18:b0:04:50:d7:b2:2b:58:98:f0:85:c8:39:80:4f:0f:34:
90:01:1a:cf:f4:67:1b:69:da:af:8f:60:e6:f0:17:8e:89:f5:
17:5d:08:20:0c:53:9d:36:46:12:71:cd:f7:b6:08:6d:11:c6:
55:86:a3:37:88:9f:4e:e7:7b:27:d8:af:72:91:de:4d:04:05:
0e:2a:8a:22:1c:1b:6e:12:dc:04:4a:93:f3:19:e0:35:1b:fa:
c2:7a:52:a7:20:24:8f:fb:7a:76:f4:7d:b1:55:97:a3:d7:3b:
26:9c:b7:65:0a:e4:3c:7f:26:30:57:1e:eb:16:c2:60:4e:64:
8b:4a:8e:f6:ad:cc:e4:d1:78:ef:4e:7e:13:4d:73:f4:ee:56:
8b:fe:e7:e4:7b:4c:5c:7f:d7:eb:3a:55:27:1e:40:66:c7:4a:
20:8f:98:dd:64:60:a7:6c:e4:a6:fb:cc:31:dd:92:54:c7:c4:
97:f0:f2:9c:b8:09:ce:10:ee:d9:e1:df:d2:c5:ee:ef:bb:87:
14:a5:12:19:c8:98:3a:5c:6d:5e:9e:ff:b5:7d:fc:66:e6:06:
0c:09:e5:0e:80:fa:ab:f8:8c:8f:ed:6d:a1:b9:be:33:78:c5:
e1:71:0a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:04 2026 by rpki-client