Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
File: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft (raw, json)
Hash identifier: 3ZZXwSE8NsMGrZM7zuMYS/G0j5S7EAtTlC+EATH1pTk=
Subject key identifier: 9C:2D:F0:6A:39:B0:84:B3:2B:B4:71:1D:7D:2C:2F:F6:69:BC:2A:AE
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial: 019CAB341244763DFBF8152344082566B114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
Manifest number: 049A
Signing time: Sun 01 Mar 2026 21:00:42 +0000
Manifest this update: Sun 01 Mar 2026 21:00:42 +0000
Manifest next update: Mon 02 Mar 2026 21:00:42 +0000
Files and hashes: 1: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl (hash: VcCDW8zonq7tzZZWLI+efklRgf+xhfHxrW2KvqJivNU=)
2: SkhFbOk8Q8jf5sneshEiRz3bSQA.roa (hash: RJ9KM//Nku3tlDNUzKokzT0RDJoaE+avUqxbNPNx9lI=)
3: iAWiwffF86_QIBQ4X1gfjcEItDE.roa (hash: Iv0B/B+2zc8cn3sWe9D30nXND8TdD/dY+sOwCzKpdxw=)
4: zeU1Vaq8dXip9dmrsScfYVM7AP0.roa (hash: BQS+K71JMdJLJ7pEgI44nP9dmqlZHXq/BC5e2KQgEmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:12:44:76:3d:fb:f8:15:23:44:08:25:66:b1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Validity
Not Before: Mar 1 21:00:42 2026 GMT
Not After : Mar 2 21:00:42 2026 GMT
Subject: CN=9c2df06a39b084b32bb4711d7d2c2ff669bc2aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:6d:9b:74:73:42:bc:a4:13:54:bb:4d:0c:
85:38:d2:d7:ef:d0:88:c0:cc:a4:a3:d7:99:3a:4e:
d3:30:8b:41:1c:b7:b9:d7:7f:c9:53:ec:d8:ac:46:
5b:bf:13:e4:a1:20:2a:85:e4:22:26:da:56:73:c2:
57:26:56:b7:dc:51:81:43:8a:07:22:c4:9d:0a:4c:
32:43:fb:2f:f8:e1:f6:d2:ae:7b:02:33:18:99:c8:
8d:c9:86:e4:fb:24:4a:10:b4:6e:99:d6:80:d8:94:
cd:52:87:47:91:9b:e9:16:eb:7a:92:67:e6:14:e9:
b5:3e:49:8b:2b:7f:a3:4c:a6:11:3b:90:4a:bb:01:
70:08:d2:d0:db:8c:cc:d4:b6:00:51:5a:0c:83:a9:
b8:4f:8c:07:3c:19:f5:0d:2f:24:23:89:8f:9d:92:
d5:37:01:9d:4d:f0:da:f8:7f:f7:b1:cf:5c:3a:69:
26:7e:28:07:24:94:85:45:e2:b4:7a:53:43:64:2d:
ab:62:a1:ef:c5:42:d3:3a:cd:8e:c2:c5:9a:6b:7c:
a7:c5:c1:cb:56:32:46:e7:c4:64:f1:aa:79:9e:0d:
fe:35:16:5a:d3:b6:cc:62:da:89:c6:1d:89:b3:1e:
6c:a5:3c:23:e1:02:b5:38:52:ad:ae:e7:72:4c:1e:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2D:F0:6A:39:B0:84:B3:2B:B4:71:1D:7D:2C:2F:F6:69:BC:2A:AE
X509v3 Authority Key Identifier:
keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a9:90:86:49:28:37:c1:a1:c4:de:e3:59:58:74:b2:bc:8f:
6e:4e:da:b8:a8:7b:44:6a:17:ae:c4:31:03:62:c8:72:95:af:
8a:76:35:2f:36:0a:b3:d5:e1:52:0e:ec:70:89:23:0e:a0:37:
c2:3c:7b:79:fd:85:35:3c:cc:aa:f4:03:b6:46:c4:8b:8f:22:
35:38:9a:72:0b:67:60:8e:48:2e:79:32:6f:97:07:f1:6c:80:
d6:43:f2:94:7d:7b:e1:7a:2e:87:4a:32:03:49:d3:04:fb:c7:
6d:08:e2:f7:c8:81:72:bf:3d:ed:e6:22:63:7d:be:73:b6:ac:
a8:42:82:4f:77:bc:3d:d8:ef:f2:43:ba:b0:65:4c:00:ce:0b:
7d:80:9c:d0:85:c7:a3:f5:12:56:0c:92:43:58:8c:d3:bd:4e:
8a:31:d7:02:86:1c:2f:09:81:97:17:85:fd:53:13:af:40:80:
e2:2f:70:84:b4:34:ea:fa:ea:1f:b2:27:0b:b9:05:e1:8b:b5:
9d:c6:c6:93:2b:2f:98:58:13:e1:70:6a:86:ee:66:9c:5c:1b:
cd:f4:3d:aa:e5:b9:fb:79:51:ba:34:72:93:59:2f:4c:dc:53:
eb:7f:9f:86:8d:b6:31:ec:df:08:52:e6:94:8e:8a:5e:5b:96:
3b:b0:69:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:04 2026 by rpki-client