Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: BghmP4Rl4BRvdZ/RXcPsonY4bnLgorSap0AXZJ8qUA0=
Subject key identifier: 2C:CF:AA:65:7D:16:B2:0C:C5:98:AF:D7:14:85:05:E2:27:75:D8:26
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 019CC004A41FF1882D553CE8B1499B24CA32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 1855
Signing time: Thu 05 Mar 2026 22:00:55 +0000
Manifest this update: Thu 05 Mar 2026 22:00:55 +0000
Manifest next update: Fri 06 Mar 2026 22:00:55 +0000
Files and hashes: 1: 8gINa2lFaHAK60FtqIDDhXwZP7w.roa (hash: z1FvylnNOuEEDQQea39SZ8k3cYtqZE6bJ6wCeGonrDw=)
2: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: d+fH+2T9bPFxpXB8M7Cd0JtZ8qLpK5uwabv1F1gUMpE=)
3: IbJ4yELvtm8HXdu0Yp_CCRHVlP8.asa (hash: NPCHrCQgVoOMqCSPlDc/hj6wxQzJAbSJUalGFEL7VEc=)
4: tRcrwi6Z0c7Sb0NYMrmjnVVjOto.roa (hash: unf/ZbmoQZ2C8O0WxuwscfoRSvADWqKnPxDoOQZPINs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c0:04:a4:1f:f1:88:2d:55:3c:e8:b1:49:9b:24:ca:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Mar 5 22:00:55 2026 GMT
Not After : Mar 6 22:00:55 2026 GMT
Subject: CN=2ccfaa657d16b20cc598afd7148505e22775d826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:2e:a9:53:d6:cc:ae:94:f1:ba:23:ee:5d:
be:6a:ed:1c:62:9b:a3:4a:74:19:f4:45:6e:c0:ff:
ed:a9:f9:23:5c:77:cf:92:6a:e0:9f:9b:dd:a8:1c:
12:ac:79:ce:6e:ea:52:10:c1:96:3a:05:17:74:cc:
a1:68:2d:2f:14:1f:45:4f:4d:f3:89:48:b1:11:10:
f9:6a:1c:79:2d:e9:3e:11:cb:f3:87:69:9a:9b:e7:
f3:ce:79:da:f4:54:2b:ec:5d:23:5a:6d:f0:b6:18:
64:42:15:07:75:c6:97:11:3c:2d:36:95:cd:fe:e3:
bb:3d:57:ae:64:e4:f4:57:0b:fb:44:dd:64:50:3d:
80:fd:02:6f:05:47:8b:7f:a5:6f:36:62:30:57:cc:
4c:a8:40:98:ec:6b:3c:85:11:82:5b:26:55:3a:50:
74:f8:b6:3a:1a:95:78:ae:9a:8b:58:a3:62:a6:d6:
01:6e:3a:10:d3:33:98:53:2b:9c:82:ae:0e:15:14:
55:62:19:37:c2:b9:eb:0b:66:80:3b:32:94:40:01:
10:81:9b:a6:fc:74:67:f1:56:ce:ef:3b:90:4e:5d:
0b:46:03:ce:a3:6a:1a:79:a5:3a:ed:4e:45:37:ab:
c6:ea:01:ac:68:8e:47:84:0d:1e:5d:8f:0b:b9:48:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CF:AA:65:7D:16:B2:0C:C5:98:AF:D7:14:85:05:E2:27:75:D8:26
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3f:9f:95:77:10:20:8b:9a:4a:8f:d7:67:f1:1e:6a:96:65:
71:f7:79:cd:bb:31:0e:47:54:d7:ef:32:b6:d4:23:b9:78:49:
2b:a1:e4:c1:d5:84:7c:74:d6:fb:72:41:23:54:a4:1c:ee:41:
9e:93:df:93:2f:27:f7:0b:c3:d0:e7:9c:33:1e:07:62:92:9e:
af:42:07:d7:bf:87:d5:6a:ae:80:7a:a1:2e:da:fa:b4:72:67:
f6:28:61:15:ef:c7:cb:6c:39:c9:5e:c8:e2:36:cb:cd:c4:c4:
6d:a0:6e:a7:98:e8:63:b3:36:6d:0f:fc:da:e0:18:70:3d:5e:
ce:3c:74:c4:f0:31:ff:db:ee:72:93:9e:5b:eb:e8:8f:9c:fe:
c1:bb:7a:4e:11:fb:d2:e3:b8:46:e3:72:d3:38:7c:1c:db:16:
32:9f:3a:ca:9e:7a:8f:c2:52:c5:ad:32:54:fa:e1:f5:9c:39:
4e:e8:b7:99:cf:f0:de:11:13:90:da:66:e2:9f:0e:1a:78:36:
c4:40:5a:95:f9:28:c4:1a:78:07:da:45:ab:c6:ee:1e:b1:d7:
0d:6c:13:7f:bd:4e:2e:31:b0:69:9b:be:4b:dc:20:ff:d4:d3:
c5:e5:b6:3f:35:ac:fa:d0:0f:55:7c:9d:ae:2a:1f:b4:46:c0:
c3:c4:13:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzABKQf8YgtVTzosUmbJMoyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MmIwODRmOWI5Yzk4Y2ZkOTA0MTBiODMwNWNjNmNiNDZk
Y2NlZDgwHhcNMjYwMzA1MjIwMDU1WhcNMjYwMzA2MjIwMDU1WjAzMTEwLwYDVQQD
EygyY2NmYWE2NTdkMTZiMjBjYzU5OGFmZDcxNDg1MDVlMjI3NzVkODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZMuqVPWzK6U8boj7l2+au0cYpuj
SnQZ9EVuwP/tqfkjXHfPkmrgn5vdqBwSrHnObupSEMGWOgUXdMyhaC0vFB9FT03z
iUixERD5ahx5Lek+Ecvzh2mam+fzznna9FQr7F0jWm3wthhkQhUHdcaXETwtNpXN
/uO7PVeuZOT0Vwv7RN1kUD2A/QJvBUeLf6VvNmIwV8xMqECY7Gs8hRGCWyZVOlB0
+LY6GpV4rpqLWKNiptYBbjoQ0zOYUyucgq4OFRRVYhk3wrnrC2aAOzKUQAEQgZum
/HRn8VbO7zuQTl0LRgPOo2oaeaU67U5FN6vG6gGsaI5HhA0eXY8LuUh/HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzPqmV9FrIMxZiv1xSFBeInddgmMB8GA1UdIwQY
MBaAFPQrCE+bnJjP2QQQuDBcxstG3M7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAt
NmE5Y2Q5NDIwMmZmLzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAtNmE5Y2Q5NDIwMmZm
LzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAET+flXcQ
IIuaSo/XZ/EeapZlcfd5zbsxDkdU1+8yttQjuXhJK6HkwdWEfHTW+3JBI1SkHO5B
npPfky8n9wvD0OecMx4HYpKer0IH17+H1WqugHqhLtr6tHJn9ihhFe/Hy2w5yV7I
4jbLzcTEbaBup5joY7M2bQ/82uAYcD1ezjx0xPAx/9vucpOeW+voj5z+wbt6ThH7
0uO4RuNy0zh8HNsWMp86yp56j8JSxa0yVPrh9Zw5Tui3mc/w3hETkNpm4p8OGng2
xEBalfkoxBp4B9pFq8buHrHXDWwTf71OLjGwaZu+S9wg/9TTxeW2PzWs+tAPVXyd
rioftEbAw8QTGg==
-----END CERTIFICATE-----
Generated at Thu Mar 5 23:20:29 2026 by rpki-client