Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File: 9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier: JdVuu4gZRd3B3NI4azNMoEOM3aqUlQw6mePv3u9UUbw=
Subject key identifier: F0:72:F1:6F:55:CE:39:B5:7F:77:0E:20:66:FD:89:DD:0A:81:46:A0
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial: 019D265F541E1C1F9E11DD8C27BEDD9976C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:01:14 +0000
Manifest this update: Wed 25 Mar 2026 19:01:14 +0000
Manifest next update: Thu 26 Mar 2026 19:01:14 +0000
Files and hashes: 1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: 5nWz76oLwAXmEZ4ITHIVBJMpSP7qrbZeswceXRtIeeg=)
2: C4r9_4LMNZyXrJrExvRTXCrazjo.roa (hash: I0l1JrLTqSKZ4rSbNS1J06hQR75J/+SJ8by7D4fg+Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:54:1e:1c:1f:9e:11:dd:8c:27:be:dd:99:76:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
Validity
Not Before: Mar 25 19:01:14 2026 GMT
Not After : Mar 26 19:01:14 2026 GMT
Subject: CN=f072f16f55ce39b57f770e2066fd89dd0a8146a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:28:a0:a0:b4:c7:03:70:a3:74:a7:60:83:e8:
bd:f2:c6:5f:99:f9:87:bf:73:46:2a:0f:e2:b5:16:
c7:45:a3:c9:f4:cf:bb:a4:21:d7:85:d5:a6:2f:cd:
03:0a:44:b7:00:75:2d:8e:f6:58:cc:df:3d:50:a3:
19:05:4a:db:01:7a:36:65:a8:b3:b9:28:03:65:97:
8a:3c:a8:41:e4:a0:8c:6b:f5:2c:36:e0:68:f6:9f:
92:99:11:ed:e9:c7:c9:a1:0d:e9:d6:c0:2a:85:38:
0c:8a:b3:ad:be:7f:b7:d9:b8:b5:26:65:da:f3:2f:
31:71:60:6e:f6:6f:5d:ac:21:91:a7:35:85:8b:a9:
e9:26:2c:9b:44:11:e7:7e:06:16:f2:29:39:13:9a:
09:ab:7a:18:2a:f0:e4:00:2a:48:d3:41:58:f0:e8:
58:85:7f:2f:f9:26:b6:c3:d5:1d:ef:19:74:fa:ca:
2c:9d:a2:fd:e7:59:67:09:7f:55:8d:5e:24:b7:80:
4b:a1:47:24:34:7f:42:c4:30:e8:81:55:b7:85:8c:
9e:60:7e:58:5b:13:06:81:ce:52:bf:45:bf:66:bd:
24:66:98:e8:3a:39:fc:a8:99:07:62:9d:a4:06:90:
ee:76:be:2d:84:40:9d:77:90:87:ba:40:20:5d:22:
dc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:72:F1:6F:55:CE:39:B5:7F:77:0E:20:66:FD:89:DD:0A:81:46:A0
X509v3 Authority Key Identifier:
keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:92:63:27:65:97:71:a4:79:6c:37:11:7f:01:24:f0:a4:5a:
be:a2:29:d8:96:23:42:d3:24:60:c0:3e:5c:24:46:4e:54:bb:
d5:00:96:ef:12:9b:26:71:c8:43:25:59:76:90:26:c6:94:3c:
b1:3a:44:e3:5b:6a:80:1c:d1:ce:65:ea:96:47:cf:2d:fc:a8:
07:dd:a2:cb:b8:8d:c1:6f:0e:33:84:5c:10:79:81:77:26:35:
c2:7b:69:4f:7f:33:59:15:97:73:cd:47:16:75:b8:21:52:d6:
a5:0a:32:5d:ff:ec:63:c9:c3:d4:4c:b6:a4:94:36:d6:7b:1f:
f6:46:bc:31:ed:fc:95:9b:ee:3d:65:2d:b9:a8:22:aa:bf:cf:
23:2e:f5:f6:0d:17:64:95:38:f7:d0:2f:88:d4:29:4a:ef:3c:
d1:00:03:6b:0b:a6:c6:a7:d2:2d:9b:97:92:03:20:e9:e2:fc:
12:58:d6:d7:da:3b:01:42:53:22:17:88:af:6e:62:dd:92:c8:
d6:aa:a1:b7:70:54:c0:89:0a:74:34:d7:18:65:a2:8e:6f:a2:
cc:cf:6c:6e:36:14:c3:94:1e:68:31:ac:cf:62:f4:27:b6:79:
3a:c4:66:f3:ea:0d:19:06:62:4b:0c:b9:38:ae:f9:81:49:0c:
f4:e6:2c:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX1QeHB+eEd2MJ77dmXbGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTAxOGZkZGZkNDIyNTE3YzMwNjllNzU2NTg2NTdiNDBl
NzM2MDEwHhcNMjYwMzI1MTkwMTE0WhcNMjYwMzI2MTkwMTE0WjAzMTEwLwYDVQQD
EyhmMDcyZjE2ZjU1Y2UzOWI1N2Y3NzBlMjA2NmZkODlkZDBhODE0NmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CigoLTHA3CjdKdgg+i98sZfmfmH
v3NGKg/itRbHRaPJ9M+7pCHXhdWmL80DCkS3AHUtjvZYzN89UKMZBUrbAXo2Zaiz
uSgDZZeKPKhB5KCMa/UsNuBo9p+SmRHt6cfJoQ3p1sAqhTgMirOtvn+32bi1JmXa
8y8xcWBu9m9drCGRpzWFi6npJiybRBHnfgYW8ik5E5oJq3oYKvDkACpI00FY8OhY
hX8v+Sa2w9Ud7xl0+sosnaL951lnCX9VjV4kt4BLoUckNH9CxDDogVW3hYyeYH5Y
WxMGgc5Sv0W/Zr0kZpjoOjn8qJkHYp2kBpDudr4thECdd5CHukAgXSLckQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBy8W9Vzjm1f3cOIGb9id0KgUagMB8GA1UdIwQY
MBaAFPTgGP3f1CJRfDBp51ZYZXtA5zYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9BWV9kX1VJbEY4TUdublZsaGxlMERuTmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hZDZmNWYtNTNiNS00ZTA3LTk0YjQt
NzBmOTRkNWVlNWZjLzEvOU9BWV9kX1VJbEY4TUdublZsaGxlMERuTmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9hZDZmNWYtNTNiNS00ZTA3LTk0YjQtNzBmOTRkNWVlNWZj
LzEvOU9BWV9kX1VJbEY4TUdublZsaGxlMERuTmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJJjJ2WX
caR5bDcRfwEk8KRavqIp2JYjQtMkYMA+XCRGTlS71QCW7xKbJnHIQyVZdpAmxpQ8
sTpE41tqgBzRzmXqlkfPLfyoB92iy7iNwW8OM4RcEHmBdyY1wntpT38zWRWXc81H
FnW4IVLWpQoyXf/sY8nD1Ey2pJQ21nsf9ka8Me38lZvuPWUtuagiqr/PIy719g0X
ZJU499AviNQpSu880QADawumxqfSLZuXkgMg6eL8EljW19o7AUJTIheIr25i3ZLI
1qqht3BUwIkKdDTXGGWijm+izM9sbjYUw5QeaDGsz2L0J7Z5OsRm8+oNGQZiSwy5
OK75gUkM9OYsog==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:51 2026 by rpki-client