Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
File: 9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json)
Hash identifier: Cnxbc4F8LmbYtnGvJRfcWzzwMPYmBMoOGfdhj2yKgt8=
Subject key identifier: CD:E1:B5:46:9E:33:1E:83:70:93:82:CC:44:E2:7F:AD:00:C1:51:2B
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Certificate issuer: /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial: 019D2AA9DC42ACE0E971190C467FCCA4582D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
Manifest number: 038E
Signing time: Thu 26 Mar 2026 15:01:08 +0000
Manifest this update: Thu 26 Mar 2026 15:01:08 +0000
Manifest next update: Fri 27 Mar 2026 15:01:08 +0000
Files and hashes: 1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: Ny6p5OpePR0kAf7G2mjfYSZ4gcwVBQ3tvcMeSXYBE+c=)
2: wxYzOEFFE7ZvQ_jUpzfcf7qWdJY.roa (hash: zi/D1IuQaIKBqfBUtIU/P0ojOtlc8op63UfckXGc4cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:dc:42:ac:e0:e9:71:19:0c:46:7f:cc:a4:58:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Validity
Not Before: Mar 26 15:01:08 2026 GMT
Not After : Mar 27 15:01:08 2026 GMT
Subject: CN=cde1b5469e331e83709382cc44e27fad00c1512b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:68:5d:af:ed:ec:9e:9b:8e:c1:a4:2e:83:4f:
56:00:d0:43:55:ee:a2:dc:a5:c3:63:6a:a8:3a:15:
02:60:98:ef:f8:8c:e9:84:4b:81:fa:fd:21:86:7c:
f3:2e:56:a4:47:f2:bc:b5:a2:4c:82:35:f7:a7:81:
93:77:0b:0d:63:0c:6a:d2:91:15:13:e2:06:4d:c8:
10:6e:44:47:23:e6:5b:a9:74:a3:d4:90:9d:44:4f:
77:bf:47:24:bc:f5:78:9e:11:2a:3b:96:65:62:11:
36:48:d4:37:a2:73:1e:f2:be:08:7f:54:a7:9a:fe:
37:41:15:f3:86:4b:1a:16:9f:5b:eb:ae:f7:bf:09:
82:29:ea:59:8d:44:ef:9b:ec:13:4c:82:07:58:d4:
04:f5:1f:e6:c4:3a:2c:90:9a:f1:e2:2a:b5:9f:ca:
29:4f:e0:94:1e:ae:ca:8d:95:07:1f:d0:fc:09:f8:
04:82:0a:66:7b:53:11:e4:6b:96:01:f7:cc:08:a3:
a0:0c:f3:ee:07:cd:57:e3:77:4d:63:2a:18:bd:60:
26:43:99:06:00:84:a4:d8:c1:95:19:fd:f8:24:3c:
16:c7:0a:34:df:7b:e2:29:9c:20:ec:52:e0:fc:ab:
14:2a:73:60:b1:f1:7d:98:38:0a:1f:1f:4c:ec:7c:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E1:B5:46:9E:33:1E:83:70:93:82:CC:44:E2:7F:AD:00:C1:51:2B
X509v3 Authority Key Identifier:
keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:dc:6c:53:91:38:d9:30:cd:aa:28:ed:8f:b2:bc:25:9a:0d:
6b:c3:8a:08:46:51:5e:2f:0d:82:b2:11:51:a2:4a:6f:c8:79:
f6:7d:cc:3c:8d:1c:88:30:3e:57:03:22:0c:44:38:8a:51:22:
19:9b:71:dd:b1:68:94:be:ff:5c:9e:97:22:21:d6:e5:5a:3e:
58:b8:02:b4:b3:e1:d4:96:53:0f:af:86:d9:e0:72:9e:cb:ca:
4e:fd:be:f4:49:65:c1:a1:f0:14:fc:c2:88:09:35:f8:4b:aa:
fa:1b:53:26:35:8a:d4:12:c2:a8:06:8b:83:3a:a0:93:4c:4b:
ef:b5:90:ec:e6:a8:4a:e0:83:34:45:f1:ee:7e:49:e5:e3:58:
b6:92:15:39:76:91:63:35:73:bb:26:7a:83:ee:78:51:2a:cc:
d5:66:3e:c8:0c:0f:61:72:e1:be:12:d3:eb:ee:dd:a0:fb:49:
d2:1e:cd:49:3b:81:c3:c8:36:89:6f:5a:a2:4f:8e:b3:c9:a4:
44:dc:85:14:9f:5f:82:36:ef:ce:0d:da:99:ea:13:27:fe:c7:
df:e0:82:c2:93:8e:62:fd:c5:c6:77:90:22:99:a3:57:c7:0c:
ea:d2:57:97:21:61:ef:22:0f:4a:ac:cd:5a:46:4f:74:8d:d0:
2a:25:5d:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqdxCrODpcRkMRn/MpFgtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2Q5YzhmZmMyMDRiNmRiZGUwMTIwNTMwM2JkZjhiNTA2
MzhhYTYwHhcNMjYwMzI2MTUwMTA4WhcNMjYwMzI3MTUwMTA4WjAzMTEwLwYDVQQD
EyhjZGUxYjU0NjllMzMxZTgzNzA5MzgyY2M0NGUyN2ZhZDAwYzE1MTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62hdr+3snpuOwaQug09WANBDVe6i
3KXDY2qoOhUCYJjv+IzphEuB+v0hhnzzLlakR/K8taJMgjX3p4GTdwsNYwxq0pEV
E+IGTcgQbkRHI+ZbqXSj1JCdRE93v0ckvPV4nhEqO5ZlYhE2SNQ3onMe8r4If1Sn
mv43QRXzhksaFp9b6673vwmCKepZjUTvm+wTTIIHWNQE9R/mxDoskJrx4iq1n8op
T+CUHq7KjZUHH9D8CfgEggpme1MR5GuWAffMCKOgDPPuB81X43dNYyoYvWAmQ5kG
AISk2MGVGf34JDwWxwo033viKZwg7FLg/KsUKnNgsfF9mDgKHx9M7HwWuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3htUaeMx6DcJOCzETif60AwVErMB8GA1UdIwQY
MBaAFPV9nI/8IEttveASBTA734tQY4qmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNTBiODMtYjI5Mi00MTE3LTg5OTEt
YjY3ZDMyMDk5MGM2LzEvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lNTBiODMtYjI5Mi00MTE3LTg5OTEtYjY3ZDMyMDk5MGM2
LzEvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNxsU5E4
2TDNqijtj7K8JZoNa8OKCEZRXi8NgrIRUaJKb8h59n3MPI0ciDA+VwMiDEQ4ilEi
GZtx3bFolL7/XJ6XIiHW5Vo+WLgCtLPh1JZTD6+G2eBynsvKTv2+9EllwaHwFPzC
iAk1+Euq+htTJjWK1BLCqAaLgzqgk0xL77WQ7OaoSuCDNEXx7n5J5eNYtpIVOXaR
YzVzuyZ6g+54USrM1WY+yAwPYXLhvhLT6+7doPtJ0h7NSTuBw8g2iW9aok+Os8mk
RNyFFJ9fgjbvzg3ameoTJ/7H3+CCwpOOYv3FxneQIpmjV8cM6tJXlyFh7yIPSqzN
WkZPdI3QKiVdMw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:25:37 2026 by rpki-client