Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
File: 9vqbUoZNztDV7ON-dDciSyVCJIs.mft (raw, json)
Hash identifier: KpWGVFx2NigBX0I2Z3iRKMJoSCUkqAhWUuFFObsIoCM=
Subject key identifier: 51:BA:EE:83:30:77:84:BA:08:48:8D:89:C1:93:73:11:82:3B:5F:BB
Authority key identifier: F6:FA:9B:52:86:4D:CE:D0:D5:EC:E3:7E:74:37:22:4B:25:42:24:8B
Certificate issuer: /CN=f6fa9b52864dced0d5ece37e7437224b2542248b
Certificate serial: 019D2929095910F94DDDE28F6D1DB1146AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
Manifest number: 01E3
Signing time: Thu 26 Mar 2026 08:00:48 +0000
Manifest this update: Thu 26 Mar 2026 08:00:48 +0000
Manifest next update: Fri 27 Mar 2026 08:00:48 +0000
Files and hashes: 1: 9vqbUoZNztDV7ON-dDciSyVCJIs.crl (hash: uaq79J0Abe+3Zaf+C+3rUnGSJckjbRucUIMfT7vPAB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:09:59:10:f9:4d:dd:e2:8f:6d:1d:b1:14:6a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6fa9b52864dced0d5ece37e7437224b2542248b
Validity
Not Before: Mar 26 08:00:48 2026 GMT
Not After : Mar 27 08:00:48 2026 GMT
Subject: CN=51baee83307784ba08488d89c1937311823b5fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:be:f9:8c:c0:93:1d:f1:09:85:26:e5:72:
5e:fc:a3:27:e8:70:2d:70:36:31:a5:e5:99:e5:c3:
12:ed:3c:24:e2:10:7f:54:10:6b:50:d7:9f:b8:73:
3b:7a:15:70:e2:8f:37:1f:1c:17:16:ce:d9:b1:82:
a0:bb:72:5a:74:ec:82:c2:20:6e:5d:06:b9:2a:13:
dd:76:c7:30:76:43:ed:31:35:e9:6b:88:6d:93:45:
1a:29:da:10:e3:71:7d:0c:29:ae:0d:ad:c0:af:8f:
2a:89:5f:0a:9c:a1:23:af:77:9c:6b:e6:3d:d6:71:
8e:aa:d7:54:5c:1a:0d:cf:ff:09:06:0e:8a:04:5a:
00:ac:04:8b:1f:af:91:ee:12:12:10:53:3f:99:9a:
a3:97:8f:6c:1a:08:4e:1d:35:50:be:d4:03:cb:ff:
ae:f0:cc:79:29:8b:31:b6:dc:07:be:47:5f:c1:4f:
5f:3c:18:25:f0:ff:54:de:ef:8a:41:53:ac:90:e4:
66:3a:cc:76:a3:6e:32:10:d7:a0:12:54:1e:0f:ed:
5b:f1:21:6d:df:94:9d:76:bd:a6:6b:2e:67:80:a1:
21:65:ae:f6:fb:39:ff:67:55:3d:fb:48:36:71:37:
e8:a5:17:a2:c1:de:1e:19:58:d6:e0:d2:95:9b:33:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BA:EE:83:30:77:84:BA:08:48:8D:89:C1:93:73:11:82:3B:5F:BB
X509v3 Authority Key Identifier:
keyid:F6:FA:9B:52:86:4D:CE:D0:D5:EC:E3:7E:74:37:22:4B:25:42:24:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a9:60:0a:4b:3a:bf:4e:60:db:f5:e1:e8:f8:f6:e8:96:d8:
f2:b2:ba:f2:e3:81:de:85:fa:16:5f:98:bb:df:d1:68:32:61:
c2:ce:53:e3:c6:37:3e:9b:da:33:0d:d4:36:4f:5c:ac:a3:ac:
47:90:97:9c:85:b1:73:c9:45:44:95:1f:2f:9a:0a:d8:9f:80:
6d:b6:13:bd:5b:2a:7f:5d:d0:3d:0a:9c:0a:22:33:81:93:6e:
46:f5:5c:0d:bb:1e:57:f0:a5:2a:43:52:86:a2:db:bb:6c:a0:
3a:32:e7:2d:52:a9:91:b0:ce:f4:aa:79:2c:1f:61:19:23:a5:
58:16:ca:47:b1:9c:63:f7:49:40:07:c0:8d:d9:56:c3:b9:59:
e7:6c:cb:97:75:8f:6c:16:9c:94:24:0c:f1:12:2d:88:47:ac:
58:e1:d5:68:ad:99:8b:8d:c1:68:88:b9:56:0a:11:e0:7b:e7:
68:46:66:38:fd:f3:a9:61:5a:66:9f:7c:9a:0d:53:06:b2:9e:
b7:fc:1a:64:a8:9c:d9:15:3e:0d:db:3b:f2:5c:08:39:40:2f:
e7:48:f2:17:f2:bd:0e:dc:47:19:bf:31:b9:bc:7b:ed:22:a5:
2b:a5:25:53:56:cf:28:bb:09:39:b8:21:7e:65:13:79:3a:4c:
cb:57:2e:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKQlZEPlN3eKPbR2xFGqsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZmE5YjUyODY0ZGNlZDBkNWVjZTM3ZTc0MzcyMjRiMjU0
MjI0OGIwHhcNMjYwMzI2MDgwMDQ4WhcNMjYwMzI3MDgwMDQ4WjAzMTEwLwYDVQQD
Eyg1MWJhZWU4MzMwNzc4NGJhMDg0ODhkODljMTkzNzMxMTgyM2I1ZmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrO++YzAkx3xCYUm5XJe/KMn6HAt
cDYxpeWZ5cMS7Twk4hB/VBBrUNefuHM7ehVw4o83HxwXFs7ZsYKgu3JadOyCwiBu
XQa5KhPddscwdkPtMTXpa4htk0UaKdoQ43F9DCmuDa3Ar48qiV8KnKEjr3eca+Y9
1nGOqtdUXBoNz/8JBg6KBFoArASLH6+R7hISEFM/mZqjl49sGghOHTVQvtQDy/+u
8Mx5KYsxttwHvkdfwU9fPBgl8P9U3u+KQVOskORmOsx2o24yENegElQeD+1b8SFt
35Sddr2may5ngKEhZa72+zn/Z1U9+0g2cTfopReiwd4eGVjW4NKVmzN6aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFG67oMwd4S6CEiNicGTcxGCO1+7MB8GA1UdIwQY
MBaAFPb6m1KGTc7Q1ezjfnQ3IkslQiSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXZxYlVvWk56dERWN09OLWREY2lTeVZDSklzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80OGQ5ODctNGNhNi00MzIwLTkyZDAt
MDk5YjZiYmYxYTQ1LzEvOXZxYlVvWk56dERWN09OLWREY2lTeVZDSklzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS80OGQ5ODctNGNhNi00MzIwLTkyZDAtMDk5YjZiYmYxYTQ1
LzEvOXZxYlVvWk56dERWN09OLWREY2lTeVZDSklzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6lgCks6
v05g2/Xh6Pj26JbY8rK68uOB3oX6Fl+Yu9/RaDJhws5T48Y3PpvaMw3UNk9crKOs
R5CXnIWxc8lFRJUfL5oK2J+AbbYTvVsqf13QPQqcCiIzgZNuRvVcDbseV/ClKkNS
hqLbu2ygOjLnLVKpkbDO9Kp5LB9hGSOlWBbKR7GcY/dJQAfAjdlWw7lZ52zLl3WP
bBaclCQM8RItiEesWOHVaK2Zi43BaIi5VgoR4HvnaEZmOP3zqWFaZp98mg1TBrKe
t/waZKic2RU+Dds78lwIOUAv50jyF/K9DtxHGb8xubx77SKlK6UlU1bPKLsJObgh
fmUTeTpMy1cuNQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:48 2026 by rpki-client