Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
File: 9Fe8GTpZWUint6CWtxC7UmKDD0E.mft (raw, json)
Hash identifier: q2yws1CZCWYykwTGp2H9SsfdzzfxRAJL87eSePmfLis=
Subject key identifier: 05:0A:68:4C:92:83:DF:A6:6B:54:BB:E2:0A:12:41:8A:A0:4F:22:CD
Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
Certificate issuer: /CN=f457bc193a595948a7b7a096b710bb5262830f41
Certificate serial: 019D265F1A824DCB1480541329BD2CC43605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
Manifest number: 0755
Signing time: Wed 25 Mar 2026 19:01:00 +0000
Manifest this update: Wed 25 Mar 2026 19:01:00 +0000
Manifest next update: Thu 26 Mar 2026 19:01:00 +0000
Files and hashes: 1: 9Fe8GTpZWUint6CWtxC7UmKDD0E.crl (hash: kxw8ZJbl5DVD/fuOt+pBNw0nksdCpPzks5ns1AqQD70=)
2: fBJnMHALZfcjzCrh2ePgybbFbm0.roa (hash: O2YCNOyi52ka2IOCrOYs4Cry49I7H3lrzo66p5voKNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:1a:82:4d:cb:14:80:54:13:29:bd:2c:c4:36:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41
Validity
Not Before: Mar 25 19:01:00 2026 GMT
Not After : Mar 26 19:01:00 2026 GMT
Subject: CN=050a684c9283dfa66b54bbe20a12418aa04f22cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d2:f7:8d:ef:2a:cb:8a:21:64:cc:0d:51:c5:
84:ce:c9:ed:22:90:11:06:17:fb:d8:23:5c:fd:ef:
2d:80:ca:c0:2a:b8:4b:aa:2b:60:eb:07:21:c3:43:
23:0e:48:f6:6c:1b:f2:de:f4:84:2d:3c:e2:5c:52:
55:8e:bc:69:dd:1b:8c:9c:8d:03:a2:84:98:67:d0:
95:4c:4c:e9:8c:fc:02:01:c7:92:51:b1:a1:2d:c4:
ef:c9:46:64:9e:02:63:f3:c7:33:25:d2:5f:03:c1:
0d:0d:10:95:f8:bf:eb:c5:99:7c:c6:35:e8:23:fe:
b8:f7:c4:0e:a3:c3:19:18:9d:ed:a3:3d:de:ff:e1:
d5:13:d5:d9:fd:fb:13:5a:d6:88:36:33:e3:de:b0:
73:37:77:13:45:c5:73:b1:7a:8b:c0:a2:34:01:ff:
5e:8f:57:21:86:c3:ac:e4:11:3f:38:a4:3d:f6:e3:
50:11:b7:86:bd:fa:cd:c8:5d:e4:36:a5:8d:59:be:
c3:c4:53:aa:bb:bc:31:79:c2:ef:bf:81:d5:a5:b6:
64:dd:53:42:3c:59:88:f0:0d:f3:2c:f9:2d:3d:f7:
29:d4:f6:27:c2:1f:e4:a4:7f:73:e2:dc:7c:af:c8:
a5:af:fa:7b:08:72:98:3b:47:52:08:21:02:69:ce:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0A:68:4C:92:83:DF:A6:6B:54:BB:E2:0A:12:41:8A:A0:4F:22:CD
X509v3 Authority Key Identifier:
keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ed:67:26:df:76:b4:03:f2:be:fe:72:ca:62:58:97:76:d9:
dd:46:66:06:5f:89:54:61:95:e3:ae:e5:45:55:6b:bf:74:62:
cc:34:45:ce:d0:9b:2c:6f:8f:8e:1c:0c:fd:d4:b4:ce:27:43:
a9:a1:ab:5d:fe:86:d9:5e:9a:28:f9:5d:b4:3d:f9:65:35:74:
cb:d7:1e:b6:bb:4f:84:69:94:58:46:a6:4f:16:c7:60:5b:e1:
fb:76:f2:4c:e0:ad:e9:1d:f2:df:87:83:6b:54:33:d8:06:17:
4d:ca:25:73:5c:5f:b0:8a:60:2e:2d:c5:1e:57:1d:dc:e1:6c:
81:2a:70:53:29:9d:e0:30:bc:96:d5:cb:5b:0e:88:28:3d:84:
c7:02:f2:3f:c1:6c:d3:b9:52:df:a1:82:30:59:7f:60:ad:2b:
9d:c7:49:ba:c1:06:29:d7:d3:c8:96:f8:6b:a0:60:81:77:95:
5e:35:a8:a3:43:b1:8f:b3:91:be:3e:3a:b3:9c:80:49:5a:20:
e8:e6:3d:34:9d:9f:11:80:0b:e8:8e:c9:1c:11:d5:26:cb:e8:
c8:24:e5:54:6a:cb:58:a6:01:9f:35:46:e9:95:92:57:45:f5:
87:f2:d7:f4:90:e3:cf:c6:6f:71:14:40:14:8f:ad:ae:0f:e5:
4a:bb:83:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXxqCTcsUgFQTKb0sxDYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NTdiYzE5M2E1OTU5NDhhN2I3YTA5NmI3MTBiYjUyNjI4
MzBmNDEwHhcNMjYwMzI1MTkwMTAwWhcNMjYwMzI2MTkwMTAwWjAzMTEwLwYDVQQD
EygwNTBhNjg0YzkyODNkZmE2NmI1NGJiZTIwYTEyNDE4YWEwNGYyMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitL3je8qy4ohZMwNUcWEzsntIpAR
Bhf72CNc/e8tgMrAKrhLqitg6wchw0MjDkj2bBvy3vSELTziXFJVjrxp3RuMnI0D
ooSYZ9CVTEzpjPwCAceSUbGhLcTvyUZkngJj88czJdJfA8ENDRCV+L/rxZl8xjXo
I/6498QOo8MZGJ3toz3e/+HVE9XZ/fsTWtaINjPj3rBzN3cTRcVzsXqLwKI0Af9e
j1chhsOs5BE/OKQ99uNQEbeGvfrNyF3kNqWNWb7DxFOqu7wxecLvv4HVpbZk3VNC
PFmI8A3zLPktPfcp1PYnwh/kpH9z4tx8r8ilr/p7CHKYO0dSCCECac5iiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUKaEySg9+ma1S74goSQYqgTyLNMB8GA1UdIwQY
MBaAFPRXvBk6WVlIp7eglrcQu1Jigw9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNjZmQtNTM1Yy00ZDJhLWJiMjct
NDM2YjNlZTdlZDM1LzEvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC80NTNjZmQtNTM1Yy00ZDJhLWJiMjctNDM2YjNlZTdlZDM1
LzEvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASu1nJt92
tAPyvv5yymJYl3bZ3UZmBl+JVGGV467lRVVrv3RizDRFztCbLG+PjhwM/dS0zidD
qaGrXf6G2V6aKPldtD35ZTV0y9cetrtPhGmUWEamTxbHYFvh+3byTOCt6R3y34eD
a1Qz2AYXTcolc1xfsIpgLi3FHlcd3OFsgSpwUymd4DC8ltXLWw6IKD2ExwLyP8Fs
07lS36GCMFl/YK0rncdJusEGKdfTyJb4a6BggXeVXjWoo0Oxj7ORvj46s5yASVog
6OY9NJ2fEYAL6I7JHBHVJsvoyCTlVGrLWKYBnzVG6ZWSV0X1h/LX9JDjz8ZvcRRA
FI+trg/lSruDAA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:38 2026 by rpki-client