Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
File: 9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json)
Hash identifier: aUSxkq997w27PkzZtexVyLNH10hxDmunAmaFU6sIziw=
Subject key identifier: 83:3E:09:90:4A:A1:B0:EA:AF:CA:70:57:21:E9:37:88:6E:CE:1A:11
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial: 019CABD912446D1E21C6CB2E35519E7012A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
Manifest number: 0A36
Signing time: Mon 02 Mar 2026 00:00:55 +0000
Manifest this update: Mon 02 Mar 2026 00:00:55 +0000
Manifest next update: Tue 03 Mar 2026 00:00:55 +0000
Files and hashes: 1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: EZcYNI9N1elale5I9hFXS8faSAyOvRK3qWXUZ6uaaL8=)
2: DASQ8NU1yHanG6tnp7TCLgdJSB8.roa (hash: W/n6G98Zq5gjZZSilKHseC4jqvetgfkl6TxxF14gb54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:12:44:6d:1e:21:c6:cb:2e:35:51:9e:70:12:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Validity
Not Before: Mar 2 00:00:55 2026 GMT
Not After : Mar 3 00:00:55 2026 GMT
Subject: CN=833e09904aa1b0eaafca705721e937886ece1a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:6b:56:51:77:d9:f2:dd:10:23:0c:3e:41:
cd:2e:4d:18:a5:36:07:46:f9:b7:e0:ca:a4:33:cc:
38:17:80:55:ee:29:fc:1d:19:87:5b:d5:da:90:17:
8f:c4:38:60:30:49:be:1b:f8:e2:01:01:0f:17:b6:
32:eb:f7:54:26:40:fa:67:5c:f8:91:a3:08:a7:aa:
31:f6:42:2a:b5:5c:44:7e:2f:a2:6d:4f:5e:da:5e:
2e:6d:b2:8e:3b:e9:96:37:be:61:a9:23:c4:fe:97:
46:fa:26:ca:45:6c:c1:9b:e8:d8:b6:53:f5:76:96:
8d:a0:41:3c:1b:7c:d9:5b:75:fc:1f:28:f3:5b:7c:
5c:6b:7a:8d:cf:a1:04:f2:54:99:1c:87:e1:27:38:
49:57:c8:ba:72:6b:64:cc:7f:06:1e:d9:39:4f:02:
21:4c:cd:54:2e:74:8f:74:4c:ac:e7:de:00:67:b8:
41:33:ed:c2:0a:a4:59:41:7a:36:37:6b:70:06:5b:
85:de:7b:46:90:76:e3:74:0e:45:b8:a0:df:4c:30:
79:3e:2d:de:19:c7:45:c8:89:fa:1c:0e:cb:55:8f:
48:2c:8d:ca:1b:0b:2c:e5:e2:f9:74:d6:05:3d:5e:
a1:59:f3:c2:d6:a2:42:28:d2:f4:aa:0e:4d:0d:8b:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3E:09:90:4A:A1:B0:EA:AF:CA:70:57:21:E9:37:88:6E:CE:1A:11
X509v3 Authority Key Identifier:
keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:00:31:28:8d:b8:7d:d3:3e:3d:5e:8d:2a:0e:be:d6:a7:a8:
8c:1f:ab:b3:7a:12:b8:9e:9b:a5:7e:a0:0c:9c:75:3a:02:a1:
e1:4c:68:89:38:a8:82:11:83:22:d3:c2:d3:74:69:d0:0e:55:
06:8a:e0:9b:3f:11:77:ee:f8:9f:36:3d:e6:e5:89:5e:8b:b9:
53:b9:0d:70:77:f9:33:d3:18:fb:d7:f8:c1:97:05:4f:d9:a0:
a5:e6:a5:13:47:31:6a:04:1c:67:47:dd:58:42:62:39:dc:ce:
59:99:7a:92:b1:ca:dd:39:eb:8e:af:ac:06:a6:9e:43:2a:fe:
f9:77:c7:06:25:bc:ce:7c:75:1e:0f:48:f1:24:87:5f:ec:b8:
ea:bc:3f:d4:8a:63:a8:27:f6:1a:70:18:d0:7a:b0:d4:22:74:
9b:c8:cd:89:ef:f4:7f:1a:81:67:1b:18:de:83:09:c3:c8:0f:
45:0e:16:2b:bc:48:eb:9a:d9:50:91:a9:2a:ff:dd:82:ea:d4:
77:7a:88:3f:57:30:b1:df:d4:3f:4a:f2:87:7e:f3:3a:a2:04:
67:65:df:c8:b2:11:3b:34:a5:05:97:c2:3f:ba:b7:e8:2e:4a:
b1:36:4c:88:22:fe:1e:4c:15:7c:f1:23:45:4b:3b:01:76:e6:
9d:69:a8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:36:27 2026 by rpki-client