
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: wW0LPDyfXbcJgrfsv67fXDlGXioRm01Kc+Vq8lgbWY8=
Subject key identifier: 4A:20:73:DD:56:09:CA:F5:06:81:45:99:A5:6F:18:AD:FF:0B:F1:88
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 019CC7191B45338985A862773B4F08D2E59C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 186E
Signing time: Sat 07 Mar 2026 07:00:37 +0000
Manifest this update: Sat 07 Mar 2026 07:00:37 +0000
Manifest next update: Sun 08 Mar 2026 07:00:37 +0000
Files and hashes: 1: 1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa (hash: YWmW+qHhsLN+csw32WYbNSaULT6cEK/L9LG3DcTcfQU=)
2: 2J_enL0mq_HbBFj1p_d_qyIXNks.roa (hash: VBLGjSkxg5gn4s0UWv4znpc4mtgeavbmnZnDA3LFAO4=)
3: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: M2Uf59l0AAzq5KKf/0y0tqtXA/Kz8h8fuepntyd/eUA=)
4: ccMww59mDMVNflZi8lXAUqrYmZg.roa (hash: 18ezwr9Nu+qt8aBJCOh1ezF1Utw1YHeqhJCFEOUAeyw=)
5: hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa (hash: XVLkwzCBrdtM+FxDVfDBn6TZaFDwiuTAGFHK/fSzOJ8=)
6: hhmzN128wuDiRBwUCjO9oZf28Hc.roa (hash: qKwy9aO/5eDeYbjJqOLC4283+7+rAN2JwgIHL3S+j7c=)
7: wRiMz6n-wmWUoLFkxFSSP8HrU5E.roa (hash: gQ8uNZeHK/kIii6trEwXDL6+4QDEEh4ElPmKWLgPx14=)
8: wpCDaZ8CmRmp29ikyeMppBLQrkw.roa (hash: Mky9v4umrVvEcx+IGCTXn8o9SgJSH+g15pwUCUI4mwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:19:1b:45:33:89:85:a8:62:77:3b:4f:08:d2:e5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Mar 7 07:00:37 2026 GMT
Not After : Mar 8 07:00:37 2026 GMT
Subject: CN=4a2073dd5609caf506814599a56f18adff0bf188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:86:24:6e:a0:5b:a5:ed:c6:89:ba:81:1b:
6f:f6:14:32:ac:99:e8:18:66:44:18:ed:1b:b8:ba:
38:7e:17:a0:06:e7:bc:ca:3d:15:33:2a:18:00:60:
0d:87:c2:4a:a7:77:73:33:ae:a0:3d:6d:00:b2:96:
98:55:84:ef:e6:1b:2e:5c:f3:f1:c9:2f:75:e9:b8:
23:30:68:01:88:38:d4:01:ff:bd:92:e3:5c:87:2f:
12:b3:aa:9b:88:c9:64:2b:0b:19:36:0b:0e:1e:f0:
ff:e5:60:1c:7e:c9:b8:9f:bb:34:73:d2:e1:62:ae:
f4:20:cf:e0:95:23:db:b3:7b:67:c6:f0:d1:d5:34:
86:4f:e8:55:b6:3d:b8:c4:ab:bd:59:98:ac:3b:cc:
56:05:24:6c:e5:f6:a5:a7:1b:62:89:4d:b0:02:d6:
dd:d0:ca:86:8f:ef:ba:d4:26:60:aa:b1:de:d2:e7:
4b:4a:14:0a:b4:ce:1b:1e:94:2a:2a:8c:e6:bb:cc:
12:30:22:ee:cc:70:e2:65:e8:c2:fe:df:4d:38:a2:
ff:e8:f2:93:5c:87:3a:b6:e1:f6:a4:1c:df:1f:83:
0c:73:45:fe:85:b6:83:85:5f:0f:09:49:63:84:70:
b3:30:1c:1c:cd:47:29:96:f8:5a:b2:c4:df:12:90:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:20:73:DD:56:09:CA:F5:06:81:45:99:A5:6F:18:AD:FF:0B:F1:88
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:10:85:f5:03:d3:1c:39:e8:22:f1:c4:ed:6e:b0:91:26:7e:
1a:e4:50:b9:27:c1:c3:09:c1:6e:4a:65:fe:f9:71:29:c4:a4:
3b:ca:e9:89:74:ab:1e:f1:df:2b:e7:26:74:b3:3c:68:d1:cf:
92:7b:0f:98:71:91:6b:eb:43:b1:46:db:e0:1c:fc:36:ba:92:
72:b9:f0:01:1d:da:5c:0b:62:33:dd:a7:b7:a8:60:ef:71:7f:
64:b5:6e:10:a4:0e:df:38:13:0d:7c:39:18:f2:1b:fd:42:3e:
9b:29:f2:5f:36:ab:95:03:1d:72:eb:ac:2c:d6:35:45:16:94:
ab:20:5d:33:5b:e4:44:bc:01:83:a7:7c:11:d7:28:c6:12:f1:
62:8a:83:d6:96:c9:09:51:66:63:3c:f0:8e:3b:32:07:dc:1a:
88:2a:1e:c3:6a:65:c1:7c:e6:03:c9:a2:f2:8f:a2:f0:a6:26:
35:61:d5:f4:0d:a1:cd:e6:12:39:83:2e:1b:16:40:33:17:44:
48:75:37:23:b7:c8:1d:d2:03:58:bc:63:d3:a3:c6:69:31:45:
1f:d7:a8:f3:cb:d5:e2:37:44:94:82:91:4e:77:21:d8:73:ce:
e8:2e:a8:3e:b9:c6:22:8e:51:19:50:6e:5b:87:c3:54:27:2d:
c8:22:29:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 18:21:16 2026 by rpki-client