Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.mft
File: 9shwRAz4UVUUmSVRYoEpJs9u39M.mft (raw, json)
Hash identifier: EH9uQ4Z78rZDspHpv2pRMtV/1gy1kjQpJccBvDHXGp8=
Subject key identifier: 64:80:DB:60:2C:3E:BF:8E:83:10:2B:F8:86:E0:35:59:92:96:84:13
Authority key identifier: F6:C8:70:44:0C:F8:51:55:14:99:25:51:62:81:29:26:CF:6E:DF:D3
Certificate issuer: /CN=f6c870440cf851551499255162812926cf6edfd3
Certificate serial: 019D333F04D799C06DF175CAC87CF9CBE8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9shwRAz4UVUUmSVRYoEpJs9u39M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.mft
Manifest number: 90
Signing time: Sat 28 Mar 2026 07:01:01 +0000
Manifest this update: Sat 28 Mar 2026 07:01:01 +0000
Manifest next update: Sun 29 Mar 2026 07:01:01 +0000
Files and hashes: 1: 70a0Lc6K02o54FM6PX05XeuuRi8.roa (hash: PtJL+LlSx9gEGZnO3go2ShBwbA0iEFFNYQSTPl1KJgU=)
2: 9shwRAz4UVUUmSVRYoEpJs9u39M.crl (hash: 88Ue/aob+FRPjIpu8g1xEj/oX+Yb3eqA9dk+pg1iYTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.mft
rsync://rpki.ripe.net/repository/DEFAULT/9shwRAz4UVUUmSVRYoEpJs9u39M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:04:d7:99:c0:6d:f1:75:ca:c8:7c:f9:cb:e8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c870440cf851551499255162812926cf6edfd3
Validity
Not Before: Mar 28 07:01:01 2026 GMT
Not After : Mar 29 07:01:01 2026 GMT
Subject: CN=6480db602c3ebf8e83102bf886e0355992968413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6d:69:be:3c:26:38:40:f8:e1:82:7a:c9:6d:
f7:0f:cd:36:24:17:05:eb:ab:49:0c:22:ab:2a:84:
a1:96:f0:15:21:45:4a:7f:3f:63:6b:1c:8f:56:53:
a0:47:ac:dd:41:95:7f:a9:6b:3b:82:e4:7b:a3:73:
3f:d4:47:42:9f:4e:5f:61:ef:a4:35:d5:44:6e:c2:
e0:87:9b:72:5b:bc:75:36:5c:47:da:ae:7a:f6:9e:
d4:6e:3c:99:62:b8:61:af:40:ba:5a:9e:79:79:c1:
52:d6:b4:29:6a:2b:4a:c5:82:0d:16:9c:76:1d:1a:
07:71:1d:f3:7a:aa:2b:c7:26:7d:fe:ce:f9:16:c7:
87:6f:ae:62:5b:8b:36:67:ca:1f:ca:ed:00:07:96:
e2:92:83:76:1a:f7:17:67:ad:d3:f0:95:97:35:09:
e1:38:0e:f0:38:d3:51:b3:cb:03:97:80:e6:dc:e8:
6c:25:43:17:8d:5f:b7:a9:9f:4e:71:ff:9b:90:6e:
78:70:6e:41:43:81:84:02:a9:41:e5:b3:b3:8e:ac:
da:47:0f:43:d5:09:f2:46:fe:48:37:73:fd:6d:ec:
c1:cb:17:c6:c0:d7:36:b9:2b:94:a3:ee:4a:e9:67:
b2:f3:65:80:63:66:b3:8b:f2:01:81:db:b7:11:b3:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:80:DB:60:2C:3E:BF:8E:83:10:2B:F8:86:E0:35:59:92:96:84:13
X509v3 Authority Key Identifier:
keyid:F6:C8:70:44:0C:F8:51:55:14:99:25:51:62:81:29:26:CF:6E:DF:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9shwRAz4UVUUmSVRYoEpJs9u39M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:6c:3d:4a:90:81:86:2a:ef:f5:a1:b4:8f:5a:13:db:81:3e:
d8:25:e5:e2:52:6d:ee:43:ed:c9:99:76:5a:bc:ea:9e:82:b6:
c0:b2:c6:e6:55:d1:b8:4f:4d:14:b7:89:b5:2e:37:ed:bb:9c:
94:93:9c:0c:e6:6b:f5:a3:1b:27:ad:8c:59:c2:c1:c0:74:fe:
65:a2:26:06:5e:0b:46:86:3c:58:ad:a7:b1:9f:62:9e:e8:86:
81:71:3d:2b:ac:17:9a:0f:8f:f4:9f:fe:18:2c:85:6c:c6:79:
39:0b:ab:dd:fb:25:ee:57:e3:d3:09:c5:b8:1b:22:c8:85:f7:
b8:1c:d9:e5:c6:a9:86:6a:ab:0d:70:ca:18:c8:12:39:55:ef:
81:da:df:bc:20:8c:30:1e:44:74:6a:c7:12:05:5a:72:a2:5c:
72:ae:25:d6:7c:27:8c:8f:e2:ef:b9:c4:38:cb:0c:a4:7f:6e:
c6:34:09:6b:7c:cd:59:56:5f:0d:91:74:1c:31:76:8e:ea:01:
57:63:e3:5b:bd:8b:48:84:8b:e0:c2:ae:70:1c:12:0a:ce:90:
46:20:97:06:e6:38:1a:fc:5e:c4:c6:4f:f6:c0:3d:7b:9b:65:
41:74:a1:91:b4:36:5e:db:a3:bd:76:18:66:17:4d:1f:44:38:
b2:07:3b:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPwTXmcBt8XXKyHz5y+j0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2Yzg3MDQ0MGNmODUxNTUxNDk5MjU1MTYyODEyOTI2Y2Y2
ZWRmZDMwHhcNMjYwMzI4MDcwMTAxWhcNMjYwMzI5MDcwMTAxWjAzMTEwLwYDVQQD
Eyg2NDgwZGI2MDJjM2ViZjhlODMxMDJiZjg4NmUwMzU1OTkyOTY4NDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG1pvjwmOED44YJ6yW33D802JBcF
66tJDCKrKoShlvAVIUVKfz9jaxyPVlOgR6zdQZV/qWs7guR7o3M/1EdCn05fYe+k
NdVEbsLgh5tyW7x1NlxH2q569p7UbjyZYrhhr0C6Wp55ecFS1rQpaitKxYINFpx2
HRoHcR3zeqorxyZ9/s75FseHb65iW4s2Z8ofyu0AB5bikoN2GvcXZ63T8JWXNQnh
OA7wONNRs8sDl4Dm3OhsJUMXjV+3qZ9Ocf+bkG54cG5BQ4GEAqlB5bOzjqzaRw9D
1QnyRv5IN3P9bezByxfGwNc2uSuUo+5K6Wey82WAY2azi/IBgdu3EbOrbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSA22AsPr+OgxAr+IbgNVmSloQTMB8GA1UdIwQY
MBaAFPbIcEQM+FFVFJklUWKBKSbPbt/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNod1JBejRVVlVVbVNWUllvRXBKczl1MzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80MjFhNzQtNTgxNi00ZjExLWFjMDgt
MGFmMzg1NjJhM2FiLzEvOXNod1JBejRVVlVVbVNWUllvRXBKczl1MzlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi80MjFhNzQtNTgxNi00ZjExLWFjMDgtMGFmMzg1NjJhM2Fi
LzEvOXNod1JBejRVVlVVbVNWUllvRXBKczl1MzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmw9SpCB
hirv9aG0j1oT24E+2CXl4lJt7kPtyZl2WrzqnoK2wLLG5lXRuE9NFLeJtS437buc
lJOcDOZr9aMbJ62MWcLBwHT+ZaImBl4LRoY8WK2nsZ9inuiGgXE9K6wXmg+P9J/+
GCyFbMZ5OQur3fsl7lfj0wnFuBsiyIX3uBzZ5caphmqrDXDKGMgSOVXvgdrfvCCM
MB5EdGrHEgVacqJccq4l1nwnjI/i77nEOMsMpH9uxjQJa3zNWVZfDZF0HDF2juoB
V2PjW72LSISL4MKucBwSCs6QRiCXBuY4GvxexMZP9sA9e5tlQXShkbQ2XtujvXYY
ZhdNH0Q4sgc7vw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:36 2026 by rpki-client