Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier: 0pwLoONxGxhBbjLbXI9CVXZvpJ0cKZZB/YeNHKhi3wg=
Subject key identifier: 9E:3A:30:AA:47:AA:0D:0C:F1:59:77:86:1A:3F:B8:FC:AB:29:14:AD
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer: /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial: 01A1DFF126000DE5E7553BE0BBFE88443FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number: 0F31
Signing time: Sun 15 Nov 2026 16:01:25 +0000
Manifest this update: Sun 15 Nov 2026 16:01:25 +0000
Manifest next update: Mon 16 Nov 2026 16:01:25 +0000
Files and hashes: 1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: j4RZC2Uk9IMUIGBStVZN2NWrtCsSJKwMoDBcQ9JVDF8=)
2: d5odnptrjJaW4wbv5e-w-InznHA.roa (hash: HdS9hjcjd6FA7NCMLYoBnDJO3cACO6YPZ4nZtli4PVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:26:00:0d:e5:e7:55:3b:e0:bb:fe:88:44:3f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
Validity
Not Before: Nov 15 16:01:25 2026 GMT
Not After : Nov 16 16:01:25 2026 GMT
Subject: CN=9e3a30aa47aa0d0cf15977861a3fb8fcab2914ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:d5:be:3f:86:d6:ed:a1:96:2b:b5:65:f0:
70:9b:88:5f:e0:12:90:36:c2:ea:29:97:71:74:94:
6f:d4:0e:ad:4a:56:9b:76:9b:2a:36:4e:53:c9:91:
98:43:74:db:b3:a0:b2:0c:2c:fa:11:82:a0:14:c1:
3c:87:47:fd:10:50:24:ea:6e:2f:79:3c:7f:f3:c9:
88:f0:79:9f:23:9c:d7:1a:af:86:94:1f:6c:7d:4e:
6a:0c:ab:75:12:8f:1b:ce:84:79:40:0e:82:85:d0:
54:17:b3:f8:9e:f0:81:8b:44:58:5e:32:83:3d:a4:
89:62:d9:29:e7:b5:07:44:ab:d5:fb:32:80:50:64:
c3:57:24:7e:53:c0:07:ef:d6:69:c3:de:c0:ae:2f:
c4:87:75:34:ee:f3:1a:ae:56:ef:1e:6a:51:01:39:
c3:46:b0:65:ad:1b:6f:e2:d5:3e:5c:17:e3:43:e1:
ac:43:ca:39:2b:af:da:e2:e8:cb:91:5f:8c:dd:84:
25:c6:87:54:f5:d4:d6:37:3d:c3:e6:24:f9:3d:b0:
0b:00:e5:e2:dd:38:40:0c:9f:ee:96:cb:21:93:95:
79:72:17:f2:43:aa:4e:bc:8f:1f:2f:6d:e9:57:b3:
55:0d:d1:a1:d0:d2:d1:d6:5d:c1:a9:f6:a3:db:29:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3A:30:AA:47:AA:0D:0C:F1:59:77:86:1A:3F:B8:FC:AB:29:14:AD
X509v3 Authority Key Identifier:
keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:31:eb:79:16:52:a0:76:8c:23:5b:f5:00:c6:86:3f:c2:79:
c8:50:a4:04:20:51:39:aa:60:8b:f7:2e:9c:df:ef:7b:c5:81:
fb:16:99:bf:57:23:62:8f:9b:3f:00:b5:04:93:74:5c:a5:d1:
09:da:17:d9:95:9f:04:53:57:d1:12:ee:f6:98:c2:65:51:73:
35:ae:6c:94:bf:df:cd:be:26:c7:23:f7:29:f6:c2:55:08:85:
19:9c:af:5d:c1:4d:1c:60:ab:5a:02:86:7e:47:4f:b2:b7:1c:
59:02:6f:2f:47:bf:36:f6:c7:0f:ff:58:fe:da:31:ee:38:77:
94:d1:60:87:35:8b:99:da:a1:ad:88:0d:27:93:e5:bc:d5:9e:
7e:2c:c6:b2:4d:42:53:ed:37:b3:5f:1e:27:d5:6f:e9:51:f3:
e5:60:d4:8d:b7:e2:ef:be:30:71:04:a5:a6:07:ea:73:7e:53:
57:f6:a1:5c:ab:b2:fa:62:1a:61:ee:28:68:95:20:cb:5c:3e:
bc:03:46:7c:b3:98:d4:96:11:38:a2:a1:63:68:66:2a:32:2d:
cd:94:99:b7:91:90:02:26:f3:9d:91:8a:53:9a:ed:76:55:20:
53:2e:d5:9d:aa:74:8d:b1:f7:1a:c6:08:09:16:2c:a7:a2:03:
0f:2f:43:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHf8SYADeXnVTvgu/6IRD/aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzMzMTI4OGQ5MDhkZDc2MmU0YjU2ZjAwM2I0NDhmMDE4
ODFkMjQwHhcNMjYxMTE1MTYwMTI1WhcNMjYxMTE2MTYwMTI1WjAzMTEwLwYDVQQD
Eyg5ZTNhMzBhYTQ3YWEwZDBjZjE1OTc3ODYxYTNmYjhmY2FiMjkxNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIjVvj+G1u2hliu1ZfBwm4hf4BKQ
NsLqKZdxdJRv1A6tSlabdpsqNk5TyZGYQ3Tbs6CyDCz6EYKgFME8h0f9EFAk6m4v
eTx/88mI8HmfI5zXGq+GlB9sfU5qDKt1Eo8bzoR5QA6ChdBUF7P4nvCBi0RYXjKD
PaSJYtkp57UHRKvV+zKAUGTDVyR+U8AH79Zpw97Ari/Eh3U07vMarlbvHmpRATnD
RrBlrRtv4tU+XBfjQ+GsQ8o5K6/a4ujLkV+M3YQlxodU9dTWNz3D5iT5PbALAOXi
3ThADJ/ulsshk5V5chfyQ6pOvI8fL23pV7NVDdGh0NLR1l3Bqfaj2ylyIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ46MKpHqg0M8Vl3hho/uPyrKRStMB8GA1UdIwQY
MBaAFPVzMSiNkI3XYuS1bwA7RI8BiB0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgt
OGFlYTFmNjhiNzliLzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgtOGFlYTFmNjhiNzli
LzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTHreRZS
oHaMI1v1AMaGP8J5yFCkBCBROapgi/cunN/ve8WB+xaZv1cjYo+bPwC1BJN0XKXR
CdoX2ZWfBFNX0RLu9pjCZVFzNa5slL/fzb4mxyP3KfbCVQiFGZyvXcFNHGCrWgKG
fkdPsrccWQJvL0e/NvbHD/9Y/tox7jh3lNFghzWLmdqhrYgNJ5PlvNWefizGsk1C
U+03s18eJ9Vv6VHz5WDUjbfi774wcQSlpgfqc35TV/ahXKuy+mIaYe4oaJUgy1w+
vANGfLOY1JYROKKhY2hmKjItzZSZt5GQAibznZGKU5rtdlUgUy7Vnap0jbH3GsYI
CRYsp6IDDy9DEA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 19:14:27 2026 by rpki-client