Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
File: _-cGk0VLwzSF3sadIZ0FAmVKwEo.mft (raw, json)
Hash identifier: PvSrwp9KIJpwFtqnNYfx1FtfNz20uVBlJPjkGkvFteg=
Subject key identifier: F1:03:36:93:83:70:63:82:38:B1:2A:65:0B:5F:F0:83:D4:A6:E7:11
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial: 019CE7B6EAAAE7E75CC08B1F1005D26F0BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
Manifest number: 12F9
Signing time: Fri 13 Mar 2026 15:00:50 +0000
Manifest this update: Fri 13 Mar 2026 15:00:50 +0000
Manifest next update: Sat 14 Mar 2026 15:00:50 +0000
Files and hashes: 1: _-cGk0VLwzSF3sadIZ0FAmVKwEo.crl (hash: qj092toGzy+Hfj5Vae4CrXbAaEKndCBJDR7j3xL/WdM=)
2: x50nfPWrcxkZfg31dDtVSDNo-l0.roa (hash: Zf8Bocjkzb8ajAA1WIwAKEh12BnqmBQgyIDI1yF5zzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:b6:ea:aa:e7:e7:5c:c0:8b:1f:10:05:d2:6f:0b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
Validity
Not Before: Mar 13 15:00:50 2026 GMT
Not After : Mar 14 15:00:50 2026 GMT
Subject: CN=f10336938370638238b12a650b5ff083d4a6e711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:b9:51:e2:3c:08:b1:3e:50:9b:f5:b9:b3:
4b:bd:bf:99:8f:2f:a6:60:53:f4:d4:a9:16:fb:3f:
68:46:43:8b:74:10:e0:3b:0b:70:bf:a9:c6:0f:7d:
73:bd:f5:26:90:5a:ea:bc:88:c1:1d:ab:06:fb:d4:
c1:51:2b:27:63:e8:56:47:76:d8:54:80:2e:41:46:
f2:35:3d:60:cf:2d:65:d9:87:69:03:7e:18:69:76:
ea:7c:d2:0c:a3:ae:f3:f9:7a:f0:cb:44:3b:a2:9d:
5f:d2:07:d4:91:60:80:e6:be:39:4c:cc:92:56:97:
e9:36:15:12:7c:b9:7e:7b:12:bf:9d:90:5e:3a:28:
eb:a6:ee:2b:98:d1:09:81:f5:63:28:d0:83:e6:7e:
41:58:4e:08:f1:88:15:6d:41:fe:63:a2:13:a0:6a:
cf:ae:14:e0:0c:09:19:a3:ed:0d:53:68:88:01:ae:
53:34:db:22:7b:a0:67:e5:cb:fd:3f:00:af:22:09:
1e:cf:ee:3d:32:35:45:82:c9:8e:8a:c3:87:d4:a3:
d5:92:fa:fa:b3:23:83:fd:c4:b4:c9:38:6e:b7:70:
84:c7:c9:ca:7b:63:47:09:17:60:2b:a9:0c:af:63:
16:21:3e:e5:a4:a2:fe:8f:0f:ca:f3:aa:9e:8f:c1:
89:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:03:36:93:83:70:63:82:38:B1:2A:65:0B:5F:F0:83:D4:A6:E7:11
X509v3 Authority Key Identifier:
keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bf:da:60:71:11:cc:be:f0:96:c9:03:db:e7:f8:2a:3b:27:
44:f9:ce:f1:e6:30:91:d3:75:f0:88:62:6f:9f:9f:7b:26:66:
ae:23:8f:8b:53:7b:9f:1f:ef:77:21:61:b9:f2:4f:f0:19:1f:
0d:1e:dc:1f:c3:2a:8f:28:ee:f1:8a:18:11:dd:74:dc:97:d9:
65:cd:32:78:d6:95:ec:c6:ac:6e:51:92:7d:e0:35:6a:73:b2:
d2:87:50:21:7e:9e:6e:60:e4:57:cc:fc:8b:4d:b2:33:60:b9:
2d:13:ea:1a:b2:19:47:b8:2d:36:19:6e:bf:5d:ee:48:c8:c1:
42:79:af:b2:55:4a:a7:6b:25:c4:c3:e4:ae:df:b3:56:90:ca:
6d:d6:82:c8:f6:6b:ce:6a:55:dd:26:69:06:d9:7c:c8:f1:21:
ad:89:09:21:06:11:bf:84:e1:27:52:e4:cf:e0:7b:10:b2:84:
8e:8f:ac:6e:75:38:52:da:ed:69:ea:5d:4a:56:9c:f4:0b:6b:
fb:22:a1:af:91:57:9c:5f:fe:c3:bd:d2:74:2d:83:1b:d0:8b:
2f:f1:49:20:d7:ad:11:38:cb:45:21:2d:de:0a:73:74:e4:bd:
dd:4a:46:fe:70:8b:44:04:19:f5:d5:55:ce:38:9b:19:c8:0b:
bc:74:e9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:51:08 2026 by rpki-client