Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
File: 9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json)
Hash identifier: ESV/OYo0E91aSKvohT4Jb9MbfXBcV2Bdciy9t8Q126k=
Subject key identifier: A8:C8:72:30:C8:7B:E7:9F:22:58:66:7A:A8:D9:7F:10:39:34:FC:08
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Certificate issuer: /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial: 019D29608AE66D7787467D8DC2156FBC5256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
Manifest number: 11FC
Signing time: Thu 26 Mar 2026 09:01:25 +0000
Manifest this update: Thu 26 Mar 2026 09:01:25 +0000
Manifest next update: Fri 27 Mar 2026 09:01:25 +0000
Files and hashes: 1: 1BAPBEHZ2kSoCDAM5eDbrIA1dgo.roa (hash: 1vCNqRI8XEb7PjtGyd1pWNMKL00lL0ojPCYN9P6eYI4=)
2: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: ykGtIsoUk1YGgKVhcIChCK4azHtVHoW/9HX4mtrATPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:8a:e6:6d:77:87:46:7d:8d:c2:15:6f:bc:52:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Validity
Not Before: Mar 26 09:01:25 2026 GMT
Not After : Mar 27 09:01:25 2026 GMT
Subject: CN=a8c87230c87be79f2258667aa8d97f103934fc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:d5:02:bb:ce:66:e9:de:53:dd:3f:b4:43:
c1:63:5b:01:df:f5:a5:d8:3f:e0:a8:f6:fa:89:b9:
9d:79:e0:5a:d4:88:68:dd:f9:e6:45:dd:ee:52:51:
8c:6d:2c:b9:02:de:9f:22:ee:da:15:09:89:92:e1:
55:1e:73:e3:c3:a5:7e:14:32:ba:1a:c3:d1:0d:b8:
c9:28:f4:f2:fc:e9:e9:2c:98:b4:18:ff:a5:ef:e7:
96:37:77:03:3c:05:f4:30:d4:d6:0b:02:98:34:16:
10:a5:00:6d:cd:95:ea:c6:7c:f5:41:c4:a9:73:38:
3c:dd:a8:33:70:cd:be:f8:ef:34:20:93:19:44:fc:
fc:1a:4a:fa:53:47:f6:57:d1:55:07:9f:84:d8:70:
35:84:af:23:f5:aa:ab:e7:92:4e:c4:ed:c9:cf:23:
0e:04:fe:19:c6:5c:60:71:0d:c1:16:22:9d:62:cb:
bf:ec:08:e3:95:97:bc:ff:9f:17:f6:20:d9:6e:83:
8c:8c:ad:0b:e0:ac:71:a7:99:70:d9:e5:aa:6a:15:
20:0a:c6:c3:2f:5d:48:ed:e8:17:5c:e5:cb:58:40:
d4:7f:17:b9:54:53:f1:81:4f:aa:a6:de:f5:ea:9b:
b9:52:70:13:a2:2b:71:d1:1c:d8:51:8a:e8:3c:08:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C8:72:30:C8:7B:E7:9F:22:58:66:7A:A8:D9:7F:10:39:34:FC:08
X509v3 Authority Key Identifier:
keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a0:75:1b:e1:6e:aa:6f:9c:38:57:4a:c2:61:15:e2:30:97:
3c:dc:d2:e7:8c:34:65:81:bf:29:05:b5:24:ba:84:89:90:4b:
53:d3:1c:56:43:f6:fd:fa:fc:13:6b:df:85:e2:73:44:0d:20:
a1:d0:dc:9e:49:01:7c:2a:22:5e:63:92:4d:e0:d4:00:c1:05:
1d:92:49:5a:5c:a0:27:49:8c:82:ae:f4:45:68:b9:39:61:c7:
b0:9b:dc:64:00:29:f5:0a:ff:72:9a:66:d9:d3:70:38:20:e9:
49:a0:85:91:69:92:b6:59:7e:b4:01:1f:c6:a1:5f:92:9b:5c:
32:f4:6a:8d:56:cd:13:ae:04:c7:b0:8a:c3:7a:15:a9:4e:1d:
50:78:f3:40:41:8a:b6:43:01:9b:37:fc:f7:7d:b0:5f:64:5c:
68:2d:cd:e5:c7:ed:e1:e7:8d:73:c1:8d:60:af:a8:b0:10:3f:
d7:63:9e:ae:28:d3:6f:c0:60:c5:2c:87:27:e5:43:0a:57:b0:
fb:44:30:4c:1b:0e:63:05:60:2f:55:a3:b0:20:d1:f4:f6:fb:
ad:91:2e:61:e0:b5:31:1a:b5:3d:aa:13:b5:b0:7d:16:66:25:
bc:36:78:03:63:52:71:53:d8:ce:d5:75:dd:24:1d:b0:e2:08:
79:68:f3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:46 2026 by rpki-client