Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier: ss/MlFA8tTDiI7IVujPQpfk0/WrgiQ7HTVnMnIaUp2w=
Subject key identifier: 41:7E:2D:86:B4:3B:05:97:CE:24:DE:34:AD:15:42:65:C6:66:B8:81
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer: /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial: 019D2704C9F0048B390D40172A2FC637BDBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number: 0CBF
Signing time: Wed 25 Mar 2026 22:01:58 +0000
Manifest this update: Wed 25 Mar 2026 22:01:58 +0000
Manifest next update: Thu 26 Mar 2026 22:01:58 +0000
Files and hashes: 1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: JxIjxaMiDoEn32XWsLpWEEje/Hx6/+JZrHTRcoT1fAs=)
2: d5odnptrjJaW4wbv5e-w-InznHA.roa (hash: HdS9hjcjd6FA7NCMLYoBnDJO3cACO6YPZ4nZtli4PVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c9:f0:04:8b:39:0d:40:17:2a:2f:c6:37:bd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
Validity
Not Before: Mar 25 22:01:58 2026 GMT
Not After : Mar 26 22:01:58 2026 GMT
Subject: CN=417e2d86b43b0597ce24de34ad154265c666b881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:15:f5:c6:87:53:a0:d7:00:21:2a:2b:48:5f:
fb:e4:d5:00:f2:92:66:3e:6f:5d:23:02:59:3e:4e:
b7:14:2a:73:af:0a:3b:fb:d8:a4:55:06:a6:67:b3:
b7:67:55:76:27:07:ac:69:21:ef:01:ea:0e:31:1b:
cb:b2:bf:cb:85:9d:63:58:cc:48:cb:9f:37:b8:29:
0c:36:7a:08:92:38:ad:6b:00:f2:a1:39:ab:28:dd:
50:75:f3:1d:d1:dc:9b:48:73:a9:f3:e4:87:89:1f:
63:c3:5a:d0:6c:f5:76:0b:66:b0:28:1f:e6:12:f7:
23:8e:c4:cb:a4:57:0b:53:ad:d3:29:b2:07:c7:e6:
43:ee:f9:8b:48:71:4c:f3:5e:5f:b5:d6:f7:a3:2c:
56:4a:bb:4c:96:ad:26:4e:a3:cc:50:98:2a:59:e8:
07:0f:b5:91:12:53:21:72:73:f4:ca:fa:5a:ea:d6:
70:69:05:52:bb:7f:ec:a9:32:2c:78:01:95:d1:8b:
31:26:49:2a:34:39:48:5c:f0:38:7d:48:c1:e1:a5:
8c:60:80:9a:7c:d7:e0:c0:ca:5d:85:97:25:f7:63:
f6:fa:1d:41:64:b4:17:d3:c0:85:84:ba:3f:ec:f7:
ba:a0:da:a2:c3:b9:0d:f4:a8:13:6a:ec:8c:ec:44:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7E:2D:86:B4:3B:05:97:CE:24:DE:34:AD:15:42:65:C6:66:B8:81
X509v3 Authority Key Identifier:
keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9e:c1:4f:e8:9b:77:6d:a5:27:26:8c:e9:f7:1c:4e:28:83:
5b:0c:66:cd:d0:45:2d:23:18:d3:71:08:d3:4c:dd:df:13:ae:
bd:26:ad:cf:9d:e4:f4:8d:d8:15:e0:b2:a3:e9:5b:93:66:78:
21:e7:7e:a2:66:4f:ac:e2:58:e7:cf:f8:5c:29:08:58:d2:c7:
c5:0e:69:c6:08:82:4b:cb:b3:be:25:e6:0d:06:be:40:1a:4d:
e7:b1:d1:84:04:53:30:25:0d:6c:77:1b:ed:70:72:64:33:93:
21:d0:48:95:3b:86:da:4f:3c:e6:59:df:be:e7:28:c4:72:ec:
62:cf:ee:32:db:75:a1:7e:36:fa:e7:ab:26:f1:be:f0:f7:24:
41:19:a1:50:fd:01:1e:f8:06:f7:9c:d5:ac:2b:a5:33:13:69:
41:50:a1:e2:bb:f4:df:13:f3:ff:ea:7d:85:35:ff:77:a6:c2:
6c:ef:a8:2d:d4:cf:f0:7b:0d:1c:79:e1:ec:ba:d7:8f:97:98:
51:72:eb:77:71:cd:92:67:4d:47:69:3e:da:e1:67:bc:64:4f:
7f:c3:61:bc:5c:24:03:c9:1a:74:1f:fb:46:1f:96:52:cf:ee:
79:23:b2:35:88:07:a7:2c:28:6e:eb:34:64:15:f3:a5:20:97:
1e:08:ea:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBMnwBIs5DUAXKi/GN729MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzMzMTI4OGQ5MDhkZDc2MmU0YjU2ZjAwM2I0NDhmMDE4
ODFkMjQwHhcNMjYwMzI1MjIwMTU4WhcNMjYwMzI2MjIwMTU4WjAzMTEwLwYDVQQD
Eyg0MTdlMmQ4NmI0M2IwNTk3Y2UyNGRlMzRhZDE1NDI2NWM2NjZiODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhX1xodToNcAISorSF/75NUA8pJm
Pm9dIwJZPk63FCpzrwo7+9ikVQamZ7O3Z1V2JwesaSHvAeoOMRvLsr/LhZ1jWMxI
y583uCkMNnoIkjitawDyoTmrKN1QdfMd0dybSHOp8+SHiR9jw1rQbPV2C2awKB/m
EvcjjsTLpFcLU63TKbIHx+ZD7vmLSHFM815ftdb3oyxWSrtMlq0mTqPMUJgqWegH
D7WRElMhcnP0yvpa6tZwaQVSu3/sqTIseAGV0YsxJkkqNDlIXPA4fUjB4aWMYICa
fNfgwMpdhZcl92P2+h1BZLQX08CFhLo/7Pe6oNqiw7kN9KgTauyM7ETXwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEF+LYa0OwWXziTeNK0VQmXGZriBMB8GA1UdIwQY
MBaAFPVzMSiNkI3XYuS1bwA7RI8BiB0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgt
OGFlYTFmNjhiNzliLzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgtOGFlYTFmNjhiNzli
LzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJ7BT+ib
d22lJyaM6fccTiiDWwxmzdBFLSMY03EI00zd3xOuvSatz53k9I3YFeCyo+lbk2Z4
Ied+omZPrOJY58/4XCkIWNLHxQ5pxgiCS8uzviXmDQa+QBpN57HRhARTMCUNbHcb
7XByZDOTIdBIlTuG2k885lnfvucoxHLsYs/uMtt1oX42+uerJvG+8PckQRmhUP0B
HvgG95zVrCulMxNpQVCh4rv03xPz/+p9hTX/d6bCbO+oLdTP8HsNHHnh7LrXj5eY
UXLrd3HNkmdNR2k+2uFnvGRPf8NhvFwkA8kadB/7Rh+WUs/ueSOyNYgHpywobus0
ZBXzpSCXHgjqHA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:40 2026 by rpki-client