Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier: jtY7zq5lTngKcklUc5cu9csb+0vDbgr2UqniY7yUbiE=
Subject key identifier: CF:94:9C:19:52:79:35:E5:4F:02:00:98:8B:79:2F:13:0E:10:01:33
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 019CD8B13FC4077B0216645A274A43510D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number: 1652
Signing time: Tue 10 Mar 2026 17:00:20 +0000
Manifest this update: Tue 10 Mar 2026 17:00:20 +0000
Manifest next update: Wed 11 Mar 2026 17:00:20 +0000
Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: pz1WY2nMha0+MdiJsi9BQVkXb9TNxfSnP16ekyJ0b2w=)
2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 15:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:b1:3f:c4:07:7b:02:16:64:5a:27:4a:43:51:0d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Mar 10 17:00:20 2026 GMT
Not After : Mar 11 17:00:20 2026 GMT
Subject: CN=cf949c19527935e54f0200988b792f130e100133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e0:64:b5:ef:4f:14:dc:41:29:20:c4:92:24:
61:7b:c2:bb:db:86:ee:98:b9:5c:d5:18:a1:90:32:
45:d3:78:a8:e0:58:d1:10:e8:0e:06:aa:ec:5c:90:
ab:20:1d:25:60:36:72:fe:0f:fb:c0:a4:b1:57:b9:
51:59:6d:91:65:a4:d1:a7:96:55:f4:fc:92:33:4a:
2a:38:58:e8:2a:73:8e:e5:b9:a2:82:7f:e2:f5:ec:
2f:4f:95:93:73:04:d3:27:84:e2:6c:cb:b7:39:d3:
ca:40:81:d6:0b:a8:39:57:51:67:4a:39:04:94:07:
f6:6e:d3:99:43:6d:4b:3c:c4:d2:dd:68:0a:8a:7a:
13:79:94:29:15:78:ac:90:b6:d5:99:ed:21:5c:67:
13:fb:26:86:c5:39:5a:5f:fa:31:a9:0b:5c:33:69:
f3:67:26:d3:6d:9c:5a:a6:bb:43:89:ef:a4:d7:78:
39:9e:e3:b5:ee:54:c8:91:4c:40:c2:27:33:ce:ec:
44:92:3a:77:35:dd:85:36:91:0e:c9:ff:05:3c:e8:
6b:5d:66:7e:30:c0:25:89:67:d1:65:70:b3:eb:52:
6d:e2:43:b1:48:43:fd:c6:52:c1:1d:54:78:c6:c8:
06:a9:a2:86:a9:d1:5b:d7:62:c6:07:a0:dd:89:ec:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:94:9C:19:52:79:35:E5:4F:02:00:98:8B:79:2F:13:0E:10:01:33
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ef:db:ef:e0:e1:a6:a3:89:71:85:f6:3c:3d:6f:c7:11:92:
32:33:bc:e8:a1:e9:20:e5:3d:9b:96:8d:8e:40:c5:3e:6f:64:
aa:76:1d:d5:f4:5f:85:08:93:f3:ef:07:58:f4:7d:92:e1:3a:
58:1c:a8:19:ad:19:3e:ac:11:f4:53:1a:ba:d4:17:6c:11:4a:
ba:a8:9d:40:c6:c8:09:ee:2a:ca:4e:95:e2:fe:af:27:7b:a0:
00:d9:e6:a0:4e:39:a5:e5:db:cc:93:76:4f:ef:08:d3:88:38:
f8:10:ba:ad:f4:84:a4:8c:23:ea:1c:eb:c3:ff:26:b0:8d:89:
e5:56:34:ea:af:31:00:22:79:f8:55:5a:00:c8:7b:21:6c:a0:
ef:8d:ee:74:79:83:e1:cd:ce:e5:9c:90:bb:5b:f8:85:55:71:
01:ec:6c:54:03:9f:e8:3c:3d:ad:2e:81:ba:27:b4:9f:31:9a:
98:ea:a8:d4:aa:a8:2c:a4:99:ec:51:bc:c6:50:78:22:70:ec:
ee:00:c3:58:bf:9d:64:21:b3:4d:41:26:0a:fc:34:be:02:22:
7b:29:c9:6b:5d:83:ce:b2:af:ce:6e:68:c8:75:3f:3c:94:b5:
9f:e4:f2:82:1d:36:6b:2f:ea:2f:b2:85:6e:fb:bc:00:37:a0:
27:f2:91:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 02:06:53 2026 by rpki-client