Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
File: f9GKakmRDMMx3JERSuWbcYXV8w0.mft (raw, json)
Hash identifier: a7oCHcpLxn4KSm6T9inoEDd39LUSHALhbA4YZ6uZ0bU=
Subject key identifier: BA:80:A6:7A:E7:B7:C5:DE:42:2C:D7:62:01:C0:0E:0B:28:F3:01:AA
Authority key identifier: 7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
Certificate issuer: /CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Certificate serial: 019D28F2EAFA3F0AD91F122F9C2A2978DC56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 07:01:41 +0000
Manifest this update: Thu 26 Mar 2026 07:01:41 +0000
Manifest next update: Fri 27 Mar 2026 07:01:41 +0000
Files and hashes: 1: CYtuVU0sbWBUALYLU6zRKuDdNos.roa (hash: p/Z6mIOgkBgm2djYUHmco8dUrJgppMghuSCBMeA0BPY=)
2: f9GKakmRDMMx3JERSuWbcYXV8w0.crl (hash: e+yRb9VDae/xtQHl1ZLAiAS3ycQcmyVyHZmfrbxBiEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:ea:fa:3f:0a:d9:1f:12:2f:9c:2a:29:78:dc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Validity
Not Before: Mar 26 07:01:41 2026 GMT
Not After : Mar 27 07:01:41 2026 GMT
Subject: CN=ba80a67ae7b7c5de422cd76201c00e0b28f301aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:64:79:32:95:71:11:bd:99:91:a8:b8:d8:bd:
e8:8e:0e:96:d9:63:21:d3:b8:25:12:cd:7c:08:68:
10:e5:ef:07:f6:eb:42:20:e9:9b:5e:43:11:96:c2:
2f:4f:57:6a:3a:88:03:43:c3:c1:35:a4:bb:53:30:
a4:5a:8e:a9:f7:10:d3:02:6d:a4:54:7f:42:d3:db:
28:c6:d6:e9:bc:5c:65:d0:6e:8a:a1:ef:fa:d9:13:
5c:0f:b1:ad:6c:87:3e:ee:70:aa:4a:31:17:ca:04:
f4:d2:8d:fe:ae:c5:eb:99:7f:1a:9b:ed:54:c9:ac:
71:41:e3:01:6e:ff:7e:48:e6:85:d0:81:c0:3c:bc:
66:2f:60:06:ba:29:6b:ec:41:e9:67:c4:10:2b:0a:
a7:72:23:e5:8b:be:f7:25:48:f9:8c:24:1b:ce:6d:
e8:b6:b7:7c:6c:74:49:ee:38:cc:2f:ca:e4:26:0a:
b4:a8:2c:a5:be:3f:ff:cc:c5:ce:d2:10:1a:e0:4d:
9a:78:7c:a1:e2:d0:3c:e7:67:b4:c2:9f:ae:37:4e:
0d:8c:41:fd:15:4c:97:37:23:a6:86:3a:f7:72:8b:
9b:56:2d:89:ce:f3:14:ed:65:70:8e:6f:75:2e:75:
49:63:2a:8c:56:f7:01:a6:9e:ad:e6:ec:de:fc:39:
0e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:80:A6:7A:E7:B7:C5:DE:42:2C:D7:62:01:C0:0E:0B:28:F3:01:AA
X509v3 Authority Key Identifier:
keyid:7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b8:cf:92:5f:2b:9c:3b:76:a1:3e:bc:22:7b:66:60:b7:fa:
fc:44:ed:88:c3:6e:a7:4f:13:68:36:94:01:45:48:4e:37:a1:
54:0c:fd:08:0d:84:6f:e6:c8:19:6a:e1:90:2b:1c:8d:73:f5:
10:19:09:ff:92:45:25:a7:d1:3c:bf:5d:e1:a8:84:1d:ee:da:
4a:0c:d8:23:c4:0a:a3:f9:cb:2c:20:c6:cc:2c:6b:ad:24:28:
f7:1f:ef:3c:8c:89:f7:9f:42:0e:cd:15:66:56:ca:75:0c:ab:
c3:4f:8e:ce:19:8d:8a:5d:4b:1c:29:43:b5:9e:3a:ae:9a:a5:
20:ae:8c:91:55:22:9b:46:f0:bd:29:6d:5b:2b:41:32:23:bd:
01:64:d5:af:14:e7:85:d4:d6:da:e9:a1:e7:19:6a:23:04:23:
47:47:c3:b5:1a:db:9a:1b:13:45:6f:29:35:18:95:22:7a:5e:
3f:f3:ef:8f:b0:04:96:75:eb:d8:4d:c9:7d:77:45:cf:17:17:
f7:c2:ba:4b:4c:58:d4:f5:e1:4a:81:28:5e:15:0b:13:77:c6:
e7:65:ff:e9:68:b4:f5:0d:ad:40:22:0b:c6:e7:50:e4:d6:88:
66:8d:59:56:71:72:72:90:f2:bd:2f:16:20:90:b9:99:15:67:
35:0a:00:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:48 2026 by rpki-client