Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: 1YHtGJ3crfd1dLywwkMr5NMDFH3c1DEpnbj3gQEX/uM=
Subject key identifier: 80:3C:81:B1:66:12:17:6E:B0:41:D6:A6:15:E2:0A:66:1E:CB:95:A8
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 019D247124152D4D8AD55E5404099BCB949D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 10:01:27 +0000
Manifest this update: Wed 25 Mar 2026 10:01:27 +0000
Manifest next update: Thu 26 Mar 2026 10:01:27 +0000
Files and hashes: 1: 8gINa2lFaHAK60FtqIDDhXwZP7w.roa (hash: z1FvylnNOuEEDQQea39SZ8k3cYtqZE6bJ6wCeGonrDw=)
2: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: Eq0YNvnmAIyki4UADJ0/ESZ03KtdOfLPquRoRaVto+I=)
3: IbJ4yELvtm8HXdu0Yp_CCRHVlP8.asa (hash: NPCHrCQgVoOMqCSPlDc/hj6wxQzJAbSJUalGFEL7VEc=)
4: tRcrwi6Z0c7Sb0NYMrmjnVVjOto.roa (hash: unf/ZbmoQZ2C8O0WxuwscfoRSvADWqKnPxDoOQZPINs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:71:24:15:2d:4d:8a:d5:5e:54:04:09:9b:cb:94:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Mar 25 10:01:27 2026 GMT
Not After : Mar 26 10:01:27 2026 GMT
Subject: CN=803c81b16612176eb041d6a615e20a661ecb95a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:e7:4e:c5:c0:4e:f3:9c:c8:84:db:cb:e7:
9f:01:7c:3c:71:c5:50:6d:27:b1:c7:fe:34:fc:b3:
9c:0a:33:d2:4b:de:2f:bf:56:08:8e:c7:32:b3:d6:
19:8c:7e:58:0c:b2:a6:81:de:b2:15:3c:33:ce:bc:
f8:a5:82:0a:e9:29:fd:59:93:93:7a:88:26:76:48:
24:d9:4a:37:64:d5:2e:73:00:9e:6c:89:76:22:97:
f0:62:37:80:bb:2d:b6:8f:3b:1c:9b:3c:92:d8:1f:
d7:fb:76:8e:97:02:e1:b4:b0:de:43:a8:74:43:ee:
39:b1:18:fe:a0:24:f6:86:52:68:21:e9:4f:08:24:
f1:b0:ac:d1:65:e7:e2:61:92:a3:de:56:b8:03:47:
be:67:86:f3:bc:23:6d:48:9f:d6:fc:bc:5a:6d:67:
f9:fb:a9:d0:dd:c4:00:e5:9a:f9:78:16:0f:13:f9:
90:28:f6:3d:5f:5a:b1:3b:10:1b:e4:af:6b:29:17:
47:ef:3a:9f:38:81:b4:1f:78:c1:33:89:94:09:20:
80:55:7d:0c:11:8a:0e:eb:ab:70:28:b8:4b:39:79:
7c:0c:ef:d6:25:0c:80:26:10:f1:9d:6d:6d:66:fe:
c9:c7:c6:8d:14:a0:d4:9e:b1:01:d9:ba:a2:35:81:
af:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3C:81:B1:66:12:17:6E:B0:41:D6:A6:15:E2:0A:66:1E:CB:95:A8
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:35:7e:db:c8:d4:84:c4:7d:f3:34:5a:e1:61:97:f9:83:56:
d5:98:9d:21:90:a6:28:e7:69:57:1d:0e:43:e1:cf:ac:17:11:
66:0b:6b:d6:e1:40:f4:e4:13:7e:aa:6c:0c:dc:61:27:f7:e0:
6b:a5:c1:f4:75:a2:b2:f5:bc:95:2f:35:5b:e0:66:11:e6:1a:
c5:b7:c0:59:eb:31:6d:9a:25:7f:54:47:95:3d:73:f8:fb:bb:
e5:fb:32:49:f4:83:73:97:f7:c0:38:1f:c2:ea:7d:52:31:42:
24:2f:04:47:4b:83:0b:c6:6b:05:7f:c7:7b:28:2b:54:64:96:
89:08:ec:1e:c1:95:67:65:71:65:39:d3:f0:ac:b0:01:37:28:
c0:4c:e3:4a:54:b5:89:8b:17:13:fb:87:f3:de:bd:8d:6e:83:
9e:c9:c5:d1:aa:15:13:9b:46:78:5b:e7:94:34:1a:e0:55:64:
dc:96:bb:21:aa:7e:63:be:56:b9:11:24:ae:3f:90:16:2c:f9:
c5:c7:04:52:bf:e1:02:ec:b9:48:d9:ba:55:1a:96:79:f0:48:
3a:ac:af:df:c8:17:3d:d4:e9:f8:85:ea:05:ed:2e:7c:ce:de:
28:fc:a9:6b:4d:08:f1:bd:e8:45:67:11:29:4e:af:cb:3c:f6:
e2:bb:a3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:57 2026 by rpki-client