Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json)
Hash identifier: MRRQE3aU4amk0h/2t5jt2i0ksR3MD0+Uty1m/xXuWNI=
Subject key identifier: 97:AB:49:07:4E:B4:CA:4B:1C:C1:0B:82:27:9E:3D:39:F0:E9:D8:C8
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019CE5FEFDD48253481A1D3729622481BD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
Manifest number: 18FB
Signing time: Fri 13 Mar 2026 07:00:19 +0000
Manifest this update: Fri 13 Mar 2026 07:00:19 +0000
Manifest next update: Sat 14 Mar 2026 07:00:19 +0000
Files and hashes: 1: 1-dWfWWM2Q4bjUSimugWWfOBMll4.roa (hash: 9k9cnyjwgTflpSvsCNop1Tp//B4oTSziXJvJrKx7enw=)
2: 1if2l0vuSUyA8aKOlZRwZBTqr58.roa (hash: MYKlinKANRkkXALYuH4dNJZg3DMiY6cZlGtlrNDBss0=)
3: 6c9spiMI22fbQ_S_riFTxN6JTnQ.roa (hash: WySy31z3A7Sqe9phj35VMgqeabINWeNkJj5/iHanhck=)
4: 9QOoNpd76OPVl49TOCbIH5K-Xuc.roa (hash: iHslUv59RlEtWqhiDG50P5ptUXczZiGq5UnFqrvblIU=)
5: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: O5WJpUotdaFL5JdhsqHOq6Ouzft3phfeI/b96aNs8mk=)
6: Xlo2dAjL9Nrixz0iYa0SAY5SYBc.roa (hash: Bg+pB+Sxi3uvjFsg12Ez9WbynlaVnSIe2mie+DFh+2c=)
7: ih0mxzFH0MUiJNPNZCziaJJuGMU.roa (hash: Xd9Xc8lt28a42B6a+zDM/Y1fYiUSVn12an9g9QH+NKk=)
8: oiD41d0i1VuwEQttPBFodXn6upI.roa (hash: uAOn8Pa9tipVHC9vk2BfHXqfrIzw8lI2qK4bQp5y4a8=)
9: wUIQuE5RAl6yjUP9k5UHyxLRIPw.roa (hash: NCMtFKefqHShmwgJRWPFU+3g5xSc9WX2hSElA5v9Foo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:fe:fd:d4:82:53:48:1a:1d:37:29:62:24:81:bd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Mar 13 07:00:19 2026 GMT
Not After : Mar 14 07:00:19 2026 GMT
Subject: CN=97ab49074eb4ca4b1cc10b82279e3d39f0e9d8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:50:32:2c:b4:21:de:62:c3:71:82:83:4b:
ae:57:54:8b:4d:f8:42:e9:16:8d:16:3c:d3:80:71:
11:a9:d6:6a:78:73:bf:17:c1:19:33:e1:a4:2d:e3:
0a:46:ad:49:f3:59:14:63:91:63:7f:b9:d8:61:ef:
b9:71:25:c1:a0:b4:33:c4:fb:38:8b:62:8b:b2:6e:
49:98:78:e5:45:44:62:4f:eb:22:a2:6d:3c:4c:89:
81:ea:d3:cf:b1:dc:29:aa:72:9c:44:f1:2f:21:ce:
c4:cb:11:ea:ae:63:c7:0e:1d:9e:86:8a:e8:b7:fb:
e1:7e:a6:b5:52:63:c0:df:00:cd:12:b2:1f:7a:db:
78:51:c1:0f:6a:a4:0d:9c:53:18:fe:0c:be:c5:22:
ee:2a:3a:a3:17:42:58:77:93:0b:bd:ac:dd:3e:b1:
00:f2:0f:a4:ab:d1:15:eb:b6:f5:91:16:4c:47:9d:
2d:32:bc:0b:be:a1:b1:68:d1:b9:88:34:05:6e:9a:
52:b2:c0:60:df:9e:8f:34:8e:90:74:59:fe:aa:c4:
e8:9a:c6:cf:e7:50:d2:1e:9f:e4:b2:1a:30:69:5a:
be:8a:3e:1d:21:80:20:ab:04:0a:dd:5e:3c:ba:32:
54:15:cc:fa:dd:53:71:7b:91:a4:11:12:c7:5d:b2:
2e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AB:49:07:4E:B4:CA:4B:1C:C1:0B:82:27:9E:3D:39:F0:E9:D8:C8
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f3:be:d3:96:f1:e9:df:08:4b:6d:61:b7:78:86:1b:40:d0:
4b:a1:65:db:c1:d8:b8:a8:80:de:44:6a:bc:c3:97:1a:e9:db:
1d:32:78:f7:13:c7:fc:0a:2e:5a:b0:fb:91:60:b5:a3:75:19:
36:11:fc:ab:87:fd:28:3e:7e:60:dd:80:95:45:eb:92:31:8f:
b9:0d:63:08:b7:c5:19:aa:3e:d5:bd:2c:97:3d:91:f5:f8:c2:
bd:39:35:d1:5a:bf:83:63:3c:43:21:00:e3:72:8e:d8:50:60:
9d:5f:df:fe:be:7e:28:21:61:a6:b1:9e:7f:25:c2:17:8c:a1:
6a:e5:26:67:4b:bd:02:7f:6c:90:68:04:ee:a7:92:7a:21:32:
91:94:b4:0c:1e:44:b0:dc:17:59:6c:94:50:33:1a:e1:4b:cc:
1e:f8:07:fa:3b:53:23:9c:d0:5a:b0:8d:4b:4c:9c:9e:55:53:
aa:0d:89:01:7e:76:6c:a4:d2:f7:32:50:55:e7:8e:42:ab:1e:
11:d2:a3:bc:5e:56:8a:91:07:6d:88:84:de:01:ae:b8:d3:d0:
7f:23:aa:11:e4:67:94:da:b4:df:ec:60:2a:7b:83:3c:fa:4b:
2c:1e:7a:ca:b0:b1:61:6d:1f:7b:dc:2e:4e:4e:78:66:b8:02:
e5:5b:ae:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:13:14 2026 by rpki-client