Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
File: 9fDwfKCmtMssFZ6QRZdFA64ohYE.mft (raw, json)
Hash identifier: AoMCZ1aZm3oyL6tCMrYCKvm+yvGZLIa6JW61Fv84yuM=
Subject key identifier: 22:C2:FE:DD:E2:D8:E2:73:C1:12:5C:FF:0D:A2:38:FF:91:BC:6D:21
Authority key identifier: F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81
Certificate issuer: /CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581
Certificate serial: 019CE7B709D84577488EB7FF6F65936257A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
Manifest number: 01CD
Signing time: Fri 13 Mar 2026 15:00:58 +0000
Manifest this update: Fri 13 Mar 2026 15:00:58 +0000
Manifest next update: Sat 14 Mar 2026 15:00:58 +0000
Files and hashes: 1: 9fDwfKCmtMssFZ6QRZdFA64ohYE.crl (hash: BMh6TYLSv6c86sBQjTXLQTDMN0gq4rH3jvc4AudTPJQ=)
2: BzRL5dLKwivSlyjmJMancnc4uqU.roa (hash: UbHMELNkAAYWrKJkN37hNTOWEDyB+0NpPi1jJDfFK5I=)
3: PjTeJzbTRv2RxHKdetjA5AhU64o.roa (hash: 5sG8ZewUK8wMTwzvBdT3o63ELvX++X0paAzfcLtiipw=)
4: YZnN_D9K8I6oAKeftWU-F1SrfFA.roa (hash: M+Z8dP+XL6StWORqHxpKktlWJDS4C7Ey8tzneAbTFjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:b7:09:d8:45:77:48:8e:b7:ff:6f:65:93:62:57:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581
Validity
Not Before: Mar 13 15:00:58 2026 GMT
Not After : Mar 14 15:00:58 2026 GMT
Subject: CN=22c2fedde2d8e273c1125cff0da238ff91bc6d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:a3:64:9c:6c:9c:6d:8c:5b:74:05:e0:63:
21:b5:0d:bf:d9:44:e0:2d:e9:8c:d4:ee:44:48:f8:
78:aa:34:61:c8:2b:77:32:6f:a8:38:76:31:a7:f3:
d3:3a:76:a0:66:55:b1:1b:28:9a:29:09:ad:df:e4:
c5:d5:0d:4f:4b:a3:c9:84:79:17:f7:9f:ad:e7:7c:
fe:b6:8f:33:5d:9c:75:38:f9:26:08:bb:87:a0:b9:
92:a3:aa:34:19:08:81:32:4f:39:0f:0c:6c:d3:51:
4b:ba:97:22:5f:0a:f8:ab:de:e6:e8:44:95:d4:95:
79:37:c2:eb:a0:5c:1a:12:eb:29:7b:01:da:35:93:
1b:1e:34:c9:bf:48:2f:a8:bd:2e:81:ef:e7:4c:7b:
86:28:ff:f1:69:aa:96:e2:44:b1:cd:de:ed:61:6c:
33:1d:6a:d8:58:91:83:8d:70:de:34:c4:11:fb:74:
d4:05:c5:17:f3:35:64:31:ba:6e:0d:97:5f:8a:c8:
aa:14:c7:4e:25:c3:af:15:af:6a:76:4f:c7:b5:b7:
0f:fc:c6:33:b4:c9:08:9b:12:7c:fd:aa:5e:f4:a7:
e6:cc:d7:41:50:0a:41:dd:3a:59:10:a6:92:c6:5a:
8c:de:3a:99:9a:76:a3:4c:e0:00:61:03:9f:5b:07:
b2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C2:FE:DD:E2:D8:E2:73:C1:12:5C:FF:0D:A2:38:FF:91:BC:6D:21
X509v3 Authority Key Identifier:
keyid:F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:fe:35:61:69:a8:e0:58:5b:71:96:20:e6:f0:74:c7:67:35:
11:6c:c8:6a:07:f5:75:6f:cb:fe:4f:80:67:d9:46:0d:48:1e:
18:e3:95:f0:e7:26:de:ae:9c:16:d0:2c:79:ea:b5:3a:6d:ea:
03:1c:fd:0d:c8:6f:3d:71:aa:a3:97:f1:74:09:6e:93:de:38:
77:9e:0f:d7:67:e1:05:3e:6c:93:48:06:f1:de:30:80:af:29:
b2:19:5f:cd:e4:0f:f6:1c:d8:15:41:d0:cc:46:06:3e:fd:ba:
81:33:94:7f:05:bb:d6:42:69:c4:a4:37:2e:e3:50:99:23:43:
47:ae:fa:2e:f9:e2:f8:14:10:4e:14:59:02:8d:9e:ae:2d:a9:
c4:cb:18:f8:3e:77:92:c2:a2:86:c5:a9:8e:6b:71:47:9c:9c:
c8:e3:83:01:3b:1a:83:47:98:75:06:2f:ae:49:27:fb:90:32:
5f:a7:37:ce:3b:66:8c:d3:05:2f:41:54:c5:82:42:01:60:bc:
23:e4:52:69:59:4d:f8:2c:6e:88:3c:c7:b3:04:da:5a:f4:24:
83:63:e3:63:92:45:14:d7:af:1e:44:35:04:4f:93:da:f5:cd:
7d:20:5c:c9:c6:ce:a4:2e:6b:8b:e0:d5:98:0e:eb:7a:d1:86:
81:31:95:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:07:09 2026 by rpki-client