Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
File: morKHCZcEygjx4T9qEL3oaBbjLc.mft (raw, json)
Hash identifier: F4j+b/hOHGOApaqQsNdryzioUK9IcsFV8iX+ko5bEp4=
Subject key identifier: 2B:CF:85:48:AB:3E:86:59:E0:5C:A3:96:6D:03:21:1A:08:87:B9:18
Authority key identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
Certificate issuer: /CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Certificate serial: 019D265EDF6E956F2533842F6C82E97E6572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
Manifest number: 04F9
Signing time: Wed 25 Mar 2026 19:00:44 +0000
Manifest this update: Wed 25 Mar 2026 19:00:44 +0000
Manifest next update: Thu 26 Mar 2026 19:00:44 +0000
Files and hashes: 1: AyxCahcSKu47yxPv4m32n1KPeFU.roa (hash: +WkSYCnFPhdi7837ndWHjwqAWUrNMMzWhW5p7s1rMYY=)
2: morKHCZcEygjx4T9qEL3oaBbjLc.crl (hash: 6vZa8V3RpXv1cicp1ug+lfxUMYz6DBBYLmHjikg3feQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:df:6e:95:6f:25:33:84:2f:6c:82:e9:7e:65:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Validity
Not Before: Mar 25 19:00:44 2026 GMT
Not After : Mar 26 19:00:44 2026 GMT
Subject: CN=2bcf8548ab3e8659e05ca3966d03211a0887b918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:d8:30:7f:66:af:09:4a:c3:d1:4a:ec:2f:
19:61:29:31:9f:a7:93:7d:05:b8:21:11:5d:f7:c5:
7c:ed:79:92:4f:2a:88:80:47:44:23:98:43:10:66:
8d:91:f1:da:32:e9:ff:1b:2a:13:9c:92:1a:6e:b7:
8d:ab:7e:08:a1:69:98:30:bb:36:03:97:f2:cc:f4:
31:91:ec:09:51:03:76:4f:ee:c6:fa:54:b3:45:9b:
77:1d:0b:93:65:d3:00:fa:0e:3c:71:c8:7c:ee:72:
42:df:e3:7a:70:08:46:e6:88:43:3e:82:63:ad:de:
ca:d4:6b:7b:88:e1:b3:14:96:60:23:de:62:aa:15:
fa:18:f9:d3:c9:6c:7d:43:59:6f:5a:58:a7:71:91:
ef:27:f9:9b:dc:83:9d:97:3a:da:85:4b:3d:dc:43:
7e:c6:c2:49:b9:f2:15:c4:ef:0c:35:c8:22:dc:ec:
2f:ba:a9:d5:36:be:bc:82:30:26:f8:6d:6b:69:e6:
27:a6:b0:7a:ff:8f:2d:20:77:45:e7:6b:f9:91:be:
e7:c3:d6:c4:d7:32:d6:ca:0f:66:10:e3:a2:23:fa:
7d:7d:3b:27:41:ed:91:2c:dc:cb:18:c7:95:49:04:
a8:d4:76:51:fb:f7:04:36:60:43:1a:10:4a:03:34:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CF:85:48:AB:3E:86:59:E0:5C:A3:96:6D:03:21:1A:08:87:B9:18
X509v3 Authority Key Identifier:
keyid:9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ae:5c:4f:3d:53:dc:d0:43:ac:e9:c2:2d:55:bb:72:28:f6:
b2:0a:2e:01:a9:5c:5d:17:38:34:f0:3a:c1:c5:35:58:89:90:
a2:59:9f:bc:5b:20:e2:d9:d3:1a:d5:c2:0d:2d:62:12:2d:43:
d0:ac:8e:9d:d6:fb:a0:34:43:a3:d1:d7:24:cb:5f:78:76:12:
67:af:c3:ab:ab:92:38:7a:b7:1e:aa:1b:32:0e:60:06:fc:10:
d0:8f:a7:85:6e:04:08:35:67:b1:fc:bf:88:79:19:7e:b9:1e:
48:39:1a:d2:f1:4a:ac:0c:e2:2f:c9:3c:3b:0f:91:a5:c7:0d:
1f:fe:a9:1d:34:3f:17:e0:f4:6f:f8:fc:4c:19:82:95:aa:f8:
56:2c:e5:60:3d:3d:68:34:4d:6d:f0:02:b4:8e:db:51:51:1a:
83:90:53:5c:b2:85:85:ef:5f:6c:7c:c1:87:56:54:27:c2:3c:
b4:1d:b7:c6:22:11:96:a3:d0:55:dd:9c:f9:e5:73:42:f8:92:
26:33:cd:c5:16:cd:04:c2:01:44:cf:41:10:26:65:7c:35:53:
ef:48:44:5c:5f:eb:8e:01:23:76:0b:6b:80:32:b2:59:70:30:
90:33:60:65:45:9d:c8:c5:6d:99:2e:bf:35:9b:1a:09:27:1a:
d7:9d:fd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:25 2026 by rpki-client