Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier: 5zmSAURAtDRdULhGlxOfCgfuXfpXVafqpucdT3980E8=
Subject key identifier: DB:6C:6D:AF:1D:A4:75:6D:DF:59:F4:D2:2F:45:4C:A0:72:DD:5F:40
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial: 019CE17DCF00AC459B28029CA40D9C7AF369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number: 0CBB
Signing time: Thu 12 Mar 2026 10:00:44 +0000
Manifest this update: Thu 12 Mar 2026 10:00:44 +0000
Manifest next update: Fri 13 Mar 2026 10:00:44 +0000
Files and hashes: 1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: E6S0MugqeXOPYG66F2TIVAX5bQB1ymGWHCYDa80aZ9c=)
2: 3hEZWyItuy9dwAtzmZ-AFWLhT5w.roa (hash: L+BYsmG/Ibo7acCTPtDZVtgHekYwJ5+kmxxZnt4e2i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:7d:cf:00:ac:45:9b:28:02:9c:a4:0d:9c:7a:f3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Validity
Not Before: Mar 12 10:00:44 2026 GMT
Not After : Mar 13 10:00:44 2026 GMT
Subject: CN=db6c6daf1da4756ddf59f4d22f454ca072dd5f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:83:57:f5:90:d4:ac:5b:65:76:c1:7f:d0:44:
55:cf:29:0b:31:18:8b:b2:0f:e1:33:63:b3:a4:fa:
63:8b:fb:7d:32:60:b9:79:af:ce:c4:31:92:71:f0:
92:09:de:b1:de:e9:58:c7:86:61:96:00:09:d8:8d:
bc:41:7d:f6:fb:8c:5f:8b:c5:3c:80:d1:10:50:1a:
a1:e5:c7:49:a9:d4:62:f1:b3:c9:93:7f:7c:a9:f0:
3a:65:4a:f1:41:15:e3:68:35:d6:f4:81:19:80:2f:
67:b1:72:7c:e6:d9:c9:e2:01:25:b6:0b:82:4d:4a:
8c:54:84:c8:27:91:8b:42:a7:25:25:cc:30:b3:0e:
29:b4:64:01:9c:c3:c7:51:75:5b:84:fa:65:cf:b8:
70:3d:91:1c:3d:11:44:b6:28:65:13:5a:01:f2:4f:
0d:8c:f6:48:be:9d:31:64:1d:2a:ae:bb:4d:a7:ab:
a2:21:16:5a:1e:da:58:1d:40:e6:92:56:6d:cc:4f:
c1:98:af:b3:41:70:e1:2a:90:ac:9c:fd:29:87:36:
ed:1c:d6:ae:78:ba:6c:d5:8f:2b:e0:08:37:f0:0d:
d6:3d:55:fd:81:28:78:39:b2:d1:81:1e:4e:97:5c:
60:5a:f3:c1:85:21:0a:a5:fb:99:a4:c6:d4:46:a9:
c5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6C:6D:AF:1D:A4:75:6D:DF:59:F4:D2:2F:45:4C:A0:72:DD:5F:40
X509v3 Authority Key Identifier:
keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:39:8a:8a:2b:72:da:a8:5e:41:a5:3f:39:be:57:94:b9:27:
f8:15:e1:c5:c1:f5:5b:1b:08:89:29:af:5d:20:2c:c9:4c:d9:
f0:11:54:2a:88:0d:e5:a1:60:1e:bc:50:d3:f6:71:62:ff:87:
ec:5a:e4:6f:6b:a6:21:f6:d3:f3:3e:eb:97:9d:8a:b0:b6:a5:
16:a2:07:ee:01:0c:22:9f:9e:fc:49:2f:99:da:f5:99:7a:e7:
7f:78:ff:0f:14:ce:36:42:83:2c:4d:ef:a6:d2:48:f1:f9:4d:
e3:ac:0b:41:db:64:de:ee:32:92:31:94:51:bb:aa:55:05:c9:
48:b4:97:5e:27:d1:12:38:e0:40:c5:04:82:15:28:d3:2a:fa:
b1:ae:cb:a8:f9:af:32:2e:be:39:be:d9:70:9d:9b:86:c2:ab:
67:b8:a0:11:f4:fd:eb:bc:06:f3:38:60:20:93:ff:22:1a:6a:
96:c1:94:10:7a:db:71:26:04:af:14:55:73:31:f7:0a:da:93:
ec:7a:16:88:3c:00:4d:2c:55:b5:82:33:b1:fe:5d:bc:44:3a:
67:29:42:57:c0:72:cc:78:62:c6:fd:54:eb:4d:c0:a4:a7:89:
93:cc:f2:46:ac:62:72:cc:97:1d:fd:9f:28:8c:ae:68:69:74:
4a:5e:e7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:26:49 2026 by rpki-client