Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
File: 9oXcPBRGS4xAgXUl2aJUtO06ijo.mft (raw, json)
Hash identifier: aSKgbFsYTtMK8Rhm3/TBgWvDIlLVSDliGAEXAJHe3N4=
Subject key identifier: 33:EE:50:86:26:D5:02:06:9F:AB:25:D3:F1:71:50:EF:F7:2D:E6:77
Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Certificate serial: 019CB95D55E17407FFCF559CED40B593FD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
Manifest number: 02A9
Signing time: Wed 04 Mar 2026 15:00:27 +0000
Manifest this update: Wed 04 Mar 2026 15:00:27 +0000
Manifest next update: Thu 05 Mar 2026 15:00:27 +0000
Files and hashes: 1: 9oXcPBRGS4xAgXUl2aJUtO06ijo.crl (hash: Z3PaMvjIfFt/cVAxWM6M3kaX6QnS6AifFkMIYfkRb4s=)
2: HSRkhqaXY-J-szKJGb322CNozlI.roa (hash: AvBoZFMkLxLlkN5UUWxsTcEYLDw2vSTiZXKpkSzpzYg=)
3: _KbUElUf-kiJtWzmpDSNHdJCbc0.roa (hash: uVsgENyH2wJmt2BQoXK1ivNHMgsy0rMlEbl/JQCYCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:5d:55:e1:74:07:ff:cf:55:9c:ed:40:b5:93:fd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Validity
Not Before: Mar 4 15:00:27 2026 GMT
Not After : Mar 5 15:00:27 2026 GMT
Subject: CN=33ee508626d502069fab25d3f17150eff72de677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:23:43:af:9c:2f:92:70:f9:b6:28:ff:19:
7d:cd:40:a1:17:b3:02:26:7c:fc:f2:44:05:b3:04:
56:75:ff:f1:0e:4c:d1:f4:62:9d:6b:3f:bf:50:6a:
94:b8:34:3f:44:a9:19:d3:1b:b7:d3:ed:c1:b9:58:
04:d3:d3:0f:82:ee:9c:d8:9c:35:9c:28:82:06:4a:
6c:d0:28:4b:e4:c2:ce:83:b4:6f:74:a5:aa:96:b4:
bc:5e:f3:99:76:8b:e3:27:ad:0a:6b:79:79:6d:93:
1a:69:81:65:fa:bf:d2:f4:41:46:7c:d2:6b:70:33:
57:db:88:47:44:98:79:f3:c5:ad:d5:92:a7:88:5a:
b7:83:33:57:17:28:84:b7:11:be:f1:3f:31:90:d6:
11:ad:2c:65:fa:81:9c:4c:94:d7:24:f7:48:eb:dd:
27:01:fa:8e:66:3c:76:20:23:1d:92:2e:08:79:6d:
3f:af:a4:89:f2:7c:1a:f7:83:d7:a8:22:5c:c0:81:
54:42:f1:24:95:c2:ab:ed:5d:c7:45:21:98:3b:c7:
aa:e5:ad:f4:0d:de:d9:1d:af:f5:3c:45:bb:c1:b3:
5d:d5:84:81:d4:17:59:6b:75:91:08:ca:25:df:20:
8f:41:df:b8:92:c8:6a:5b:6a:fb:3d:81:d0:29:86:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EE:50:86:26:D5:02:06:9F:AB:25:D3:F1:71:50:EF:F7:2D:E6:77
X509v3 Authority Key Identifier:
keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:12:26:ae:d9:63:41:b0:8b:b6:f4:c7:bf:dd:5f:5b:5c:41:
75:3a:7a:28:8e:57:ad:d9:59:92:22:9d:58:f3:08:2c:28:73:
4c:14:18:55:0e:86:22:9e:04:66:6c:d8:92:b8:54:03:71:9e:
42:c4:13:84:21:13:d3:14:03:d8:b5:fe:5d:fe:b4:74:a8:c3:
be:3b:4b:a2:04:0f:c3:ac:1d:62:40:15:ef:a5:63:6d:53:eb:
78:f5:79:ff:5b:b6:d3:98:27:4e:20:43:32:bd:81:db:12:7e:
d0:9d:ff:42:0d:88:2b:9c:fe:61:05:ce:8d:2b:f6:81:3a:23:
25:a6:32:41:7b:a8:96:2d:cf:23:15:2f:9c:5e:97:a3:c7:b2:
78:73:be:6b:a4:5c:70:02:99:0b:22:1b:cd:07:73:d1:9d:12:
3e:6b:af:bc:f6:6b:05:41:ca:8d:28:b4:99:57:8b:53:7a:86:
e9:05:42:47:72:0c:01:a4:67:3b:5f:a3:7d:81:fe:11:bc:60:
8f:d1:11:46:19:86:e8:ae:b3:4a:0a:23:44:fd:e2:30:7c:6c:
c1:95:2f:dc:09:23:4c:3f:0e:74:39:80:5f:f0:04:4a:db:2f:
51:8b:d1:6c:ec:56:0f:69:54:7c:be:af:c3:fe:1d:98:86:c4:
dc:3c:1e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:54:30 2026 by rpki-client