Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: LjZiDqah7dPOGA1S5oEpOSf2wh5s4PNATdJYtlc9HrE=
Subject key identifier: B8:74:9B:7C:3B:FC:ED:99:99:FA:F5:EA:31:B5:09:A2:A1:EF:CD:4A
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 019CE259B52AAC7E3B3501929ECF2C150AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 1863
Signing time: Thu 12 Mar 2026 14:00:55 +0000
Manifest this update: Thu 12 Mar 2026 14:00:55 +0000
Manifest next update: Fri 13 Mar 2026 14:00:55 +0000
Files and hashes: 1: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: w0a8TfZ6Gumi9tIA/lCsd+HpGfOlgJaMENkhS5EoDIw=)
2: EUgLAWtAQkj2b81EVNaYNI21B8Q.roa (hash: YH1yRF3btNqvfXvDOf+ohxslhwH0GDsrS4U4ZZBSNxE=)
3: PEehES5SpZnr6s-nLTRBCvh0KiA.roa (hash: KLNyhN+bpOs8kGrk8EPysrLFKdZzU9fW9CEvBaXVGAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:59:b5:2a:ac:7e:3b:35:01:92:9e:cf:2c:15:0a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Mar 12 14:00:55 2026 GMT
Not After : Mar 13 14:00:55 2026 GMT
Subject: CN=b8749b7c3bfced9999faf5ea31b509a2a1efcd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:60:93:b5:3f:98:8e:2b:a1:c1:0d:66:23:
ea:43:f7:4e:ec:13:69:65:88:08:ea:6d:bc:f4:50:
b3:7e:b1:da:43:ea:de:a7:f4:9e:4d:27:36:46:47:
92:2b:8a:87:39:3c:21:75:a0:b3:db:f8:bd:94:56:
c8:a1:fc:5b:5b:97:3c:5f:5e:a9:aa:21:a8:c7:48:
e7:e0:5a:0c:71:6d:ae:ad:aa:9e:85:a7:fd:aa:c1:
c7:0b:db:63:cf:83:a9:26:c0:13:07:9a:44:55:d7:
e0:76:67:b2:a6:b8:92:eb:23:fd:ca:ec:d3:f3:28:
1a:c1:01:a2:fe:b3:e0:01:e5:80:ad:08:23:ed:82:
16:1c:4e:d2:4f:f7:ca:61:89:92:34:a8:2c:1e:8e:
1c:6b:78:9f:73:c2:56:07:8b:f4:9e:97:6e:a9:ce:
9f:b6:80:cb:2e:68:b3:93:6d:af:05:b4:2e:68:48:
69:43:56:f2:a7:c9:ae:1d:7b:25:cb:c0:54:67:17:
b6:34:b5:3d:2f:c4:08:6e:a8:5c:b0:42:3d:30:89:
9f:c1:36:ac:6a:d0:ab:79:29:d2:87:68:e7:38:56:
cd:33:c6:5b:6b:c5:8f:f1:d7:6f:ab:89:b8:42:52:
25:d3:d0:ae:4f:72:df:d6:4b:e4:b4:ba:50:6e:f0:
28:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:74:9B:7C:3B:FC:ED:99:99:FA:F5:EA:31:B5:09:A2:A1:EF:CD:4A
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ff:c8:45:74:43:5c:ff:7d:01:a4:d8:0b:94:d4:1e:b7:4b:
11:b0:df:0e:85:35:69:52:85:49:88:f3:5f:8f:33:1f:31:98:
1e:0d:f2:b1:8e:dc:8e:32:9c:2a:49:fa:6e:22:82:7f:90:38:
ea:09:62:bb:9d:8f:b9:cc:ee:01:21:c4:ed:99:6f:17:93:ad:
84:9d:4d:dc:03:02:e3:a9:07:e0:c0:c2:5d:63:b3:fa:b8:e2:
4e:69:53:1f:d9:be:ee:c9:f6:38:eb:38:d3:bc:73:29:e4:f5:
9c:a9:dc:42:7d:af:2f:c8:88:2d:72:6b:0e:63:29:f6:fa:d8:
84:e7:61:34:5f:38:af:d5:7c:ab:13:af:84:78:d6:67:30:32:
52:9d:23:c7:a9:82:cb:d8:73:f8:cb:fd:16:a7:75:65:ce:15:
bd:09:94:84:a4:05:5d:dc:1d:ec:ee:5f:ca:af:b6:d6:4c:e2:
dc:46:4c:47:28:91:66:33:63:6a:e2:c5:42:15:01:d5:92:12:
b5:6f:31:93:ea:2a:b5:ea:59:24:9f:49:5a:64:e0:f1:81:97:
aa:b7:96:c2:83:68:fb:f8:1e:54:a2:8b:72:e3:48:39:5c:f6:
71:0f:c4:11:7f:c4:7e:63:b8:82:4a:28:87:94:6c:ed:32:97:
63:10:4c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:42:11 2026 by rpki-client