Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier: saGp7XCz7i30+twpT6yukLPkQ0FACmETvzsPUT2RQBw=
Subject key identifier: 2B:DF:3E:5A:29:74:F5:F0:12:2A:10:AD:0F:4D:7B:64:7D:28:18:A7
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 019CC1853752686635D1AF091C291AE48161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number: 1646
Signing time: Fri 06 Mar 2026 05:00:59 +0000
Manifest this update: Fri 06 Mar 2026 05:00:59 +0000
Manifest next update: Sat 07 Mar 2026 05:00:59 +0000
Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: s0ls1uBILEyhaWNhCQOaPHBeeFKCkp3rT2jeT8eAlzw=)
2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c1:85:37:52:68:66:35:d1:af:09:1c:29:1a:e4:81:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Mar 6 05:00:59 2026 GMT
Not After : Mar 7 05:00:59 2026 GMT
Subject: CN=2bdf3e5a2974f5f0122a10ad0f4d7b647d2818a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4d:49:1e:25:bf:d8:25:16:c6:1f:c9:89:1f:
f2:3d:bd:51:c7:f6:fa:52:fa:ff:04:26:d9:28:77:
e2:f0:61:08:31:76:80:43:ea:72:9a:3d:c5:96:40:
10:a3:37:62:81:00:7d:d7:aa:fc:f1:22:29:07:0b:
ab:47:26:f7:a9:36:c0:78:ad:a3:d4:91:ca:fc:39:
a3:c9:fe:a5:5f:ac:d5:a2:68:44:98:24:08:86:ec:
9d:03:6b:4d:22:72:1b:41:69:91:22:12:b6:97:50:
d8:f1:99:d6:ed:c7:6f:dc:01:d3:68:5c:cc:d0:b0:
b7:ed:79:4d:13:b4:ba:63:6f:62:b6:8f:b8:87:0b:
86:ca:98:6a:d5:77:23:1a:ed:a0:a1:e0:aa:8d:53:
51:83:0a:32:fd:2b:2d:20:6a:7d:ff:e4:04:c8:d0:
76:49:f5:da:70:29:7a:30:93:34:f2:86:dd:7a:54:
53:e0:fc:e3:96:ab:03:0b:a3:6d:a4:40:3e:4f:98:
5a:e4:b9:76:17:65:c2:c3:98:50:92:92:47:fc:ee:
01:23:6d:60:ae:6a:52:32:12:67:e1:1f:57:eb:6a:
0b:12:88:5a:4b:46:e6:41:38:68:3e:ce:71:36:40:
b9:f5:1b:66:68:2a:fe:ee:dd:5e:bd:6c:ab:7f:49:
cc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DF:3E:5A:29:74:F5:F0:12:2A:10:AD:0F:4D:7B:64:7D:28:18:A7
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8f:43:e6:99:bc:e4:50:11:47:a7:54:f6:96:4d:5a:09:0d:
3a:b5:d5:a2:bb:ae:e2:82:d9:3b:0e:f2:c3:57:a1:06:95:82:
b2:c4:16:0f:19:31:a7:d5:15:f2:75:51:bc:d6:f8:b6:a1:57:
6e:28:d1:b1:56:7a:22:ee:31:d2:f7:ab:46:74:73:4c:03:f1:
0c:5c:51:a3:98:57:07:00:da:85:ae:d6:98:66:ea:96:d0:ac:
b2:bc:cb:b4:c1:ee:d3:a8:79:24:92:03:e4:fa:d0:dc:a0:3f:
fe:74:1d:b4:3e:0e:ab:62:f1:e3:0e:49:a1:74:b2:44:de:0e:
ae:4e:f3:a6:94:1d:a1:2f:dc:ac:68:d5:0d:a5:aa:3b:22:4b:
88:3c:b6:4d:49:32:66:3e:cd:1a:d8:80:2c:54:37:c8:89:fe:
1b:e0:a0:ae:32:7d:ac:29:0d:a3:ce:8f:7a:5c:ab:ae:1a:bc:
28:41:cd:c9:1e:c4:fe:8d:7d:7f:4f:89:fb:29:df:5a:de:02:
95:33:73:b7:44:25:e6:bd:95:be:9f:b4:e0:52:33:f5:f4:e3:
02:67:98:09:7d:9c:cc:a9:84:fd:72:27:67:f5:17:2f:3e:ba:
fc:7c:90:33:15:86:b1:2f:dc:75:d3:64:1b:b5:ef:8f:2a:fa:
a3:a2:c3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 08:35:57 2026 by rpki-client