Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier: wbl8QoyHo8YEgQ7Ylg+YjDY8ppOsfOdRmzZE1tB517I=
Subject key identifier: 08:A3:D7:A6:BD:BC:F8:D8:CC:E5:F7:66:36:F5:1B:0E:07:1C:6F:49
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer: /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial: 019D27A8C31587A4ABD95166DF419E4D7B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number: 086B
Signing time: Thu 26 Mar 2026 01:01:04 +0000
Manifest this update: Thu 26 Mar 2026 01:01:04 +0000
Manifest next update: Fri 27 Mar 2026 01:01:04 +0000
Files and hashes: 1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: 9JRIJlOh5H3aD7YZvgQoMSVhuroVT5c0zj9FN9klY9o=)
2: rHQdQwrAVRUi1O-wNwGNXoOAwg0.roa (hash: 99E6Pbyu+albbhKOZ1Sk3PoNSHlEGTIbABGjf0VzSBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c3:15:87:a4:ab:d9:51:66:df:41:9e:4d:7b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
Validity
Not Before: Mar 26 01:01:04 2026 GMT
Not After : Mar 27 01:01:04 2026 GMT
Subject: CN=08a3d7a6bdbcf8d8cce5f76636f51b0e071c6f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:ce:a5:36:7f:65:07:37:56:76:ce:57:17:
9c:95:a8:3c:10:ad:d8:dc:a0:3e:54:2e:63:d6:0b:
0c:64:13:ff:f8:f7:f7:c0:86:44:c4:e1:a8:bd:f8:
a9:bb:23:65:71:0a:25:df:92:2f:99:a7:d0:9c:b3:
38:de:a4:2f:a9:e4:37:63:45:ba:18:49:50:c4:c9:
9a:05:03:be:03:34:7d:dc:bf:92:13:ea:61:72:ed:
fd:32:a4:c1:62:eb:c9:a4:b2:66:16:6e:dc:17:07:
a6:4e:51:13:73:19:d2:b1:74:34:fa:62:13:c6:a2:
39:0a:18:c8:1b:27:2e:98:51:1a:58:70:aa:4e:06:
0c:40:66:b8:81:67:68:4a:0e:2c:ed:d4:16:44:f3:
cc:59:c2:44:ea:7a:8d:d8:93:0e:bc:3f:eb:2e:2e:
ed:e6:ed:eb:ec:11:9e:d9:eb:e1:1c:65:a0:8a:e9:
e3:0b:4d:ba:35:e0:d1:d1:74:59:7f:c4:5f:3f:36:
5c:a4:28:27:66:d4:5b:53:0a:c6:29:02:a3:97:93:
35:88:a6:a6:bd:35:e9:ed:99:58:2e:e2:47:ef:6b:
3a:1e:54:8c:ae:25:25:14:bc:93:b8:ba:6e:09:d5:
6e:31:87:c5:81:88:9a:6f:23:45:d4:85:3e:f3:75:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A3:D7:A6:BD:BC:F8:D8:CC:E5:F7:66:36:F5:1B:0E:07:1C:6F:49
X509v3 Authority Key Identifier:
keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:80:63:39:0a:b5:3f:97:ce:8b:37:d1:46:03:c7:1f:d7:a7:
3f:b7:eb:04:37:0e:68:6e:a9:8b:fb:56:6a:c0:98:fb:f5:b9:
e3:cc:f1:16:9b:1d:ca:6b:bf:45:33:b4:18:58:97:90:d8:72:
bc:d1:23:d0:e9:68:dd:dc:bb:c9:71:ea:ea:13:0c:73:b7:42:
ba:09:ee:16:32:fd:da:1a:9c:88:4d:2a:a0:f6:37:b4:5f:bf:
bf:a6:93:4e:73:c4:af:48:3a:48:14:f6:c5:2c:9d:93:25:21:
8e:38:97:8c:56:7e:f4:0e:e4:2f:b7:7b:13:65:43:98:07:ef:
9e:4c:1a:af:bb:dd:8d:4a:04:a2:c8:3d:87:00:85:92:64:c2:
24:c7:0e:9d:80:69:71:31:84:04:70:f8:54:37:c2:dd:77:6d:
bb:7e:73:66:f4:f6:79:30:96:89:17:29:e2:96:1b:62:6d:98:
fc:e6:89:ce:51:b5:77:b1:20:eb:7b:d5:ad:b2:c6:35:39:d0:
b0:c0:e9:0d:7a:b3:47:7e:69:25:5e:7e:5c:eb:0b:a2:f0:be:
8b:aa:40:d1:2e:5e:31:e0:95:eb:3f:a7:96:29:50:eb:f2:61:
75:2a:e2:f8:34:e8:35:60:71:20:2f:ec:c7:10:1d:0a:23:8f:
dc:15:10:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqMMVh6Sr2VFm30GeTXuUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MDk1MjhiODgyOGI0ZDgyNjM1NWUyYzUyMjM3ZDY0MjA3
MWNkNTQwHhcNMjYwMzI2MDEwMTA0WhcNMjYwMzI3MDEwMTA0WjAzMTEwLwYDVQQD
EygwOGEzZDdhNmJkYmNmOGQ4Y2NlNWY3NjYzNmY1MWIwZTA3MWM2ZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mTOpTZ/ZQc3VnbOVxeclag8EK3Y
3KA+VC5j1gsMZBP/+Pf3wIZExOGovfipuyNlcQol35IvmafQnLM43qQvqeQ3Y0W6
GElQxMmaBQO+AzR93L+SE+phcu39MqTBYuvJpLJmFm7cFwemTlETcxnSsXQ0+mIT
xqI5ChjIGycumFEaWHCqTgYMQGa4gWdoSg4s7dQWRPPMWcJE6nqN2JMOvD/rLi7t
5u3r7BGe2evhHGWgiunjC026NeDR0XRZf8RfPzZcpCgnZtRbUwrGKQKjl5M1iKam
vTXp7ZlYLuJH72s6HlSMriUlFLyTuLpuCdVuMYfFgYiabyNF1IU+83VFtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAij16a9vPjYzOX3Zjb1Gw4HHG9JMB8GA1UdIwQY
MBaAFPcJUouIKLTYJjVeLFIjfWQgcc1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEt
OWY3NGZhY2FlOGYxLzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEtOWY3NGZhY2FlOGYx
LzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoBjOQq1
P5fOizfRRgPHH9enP7frBDcOaG6pi/tWasCY+/W548zxFpsdymu/RTO0GFiXkNhy
vNEj0Olo3dy7yXHq6hMMc7dCugnuFjL92hqciE0qoPY3tF+/v6aTTnPEr0g6SBT2
xSydkyUhjjiXjFZ+9A7kL7d7E2VDmAfvnkwar7vdjUoEosg9hwCFkmTCJMcOnYBp
cTGEBHD4VDfC3Xdtu35zZvT2eTCWiRcp4pYbYm2Y/OaJzlG1d7Eg63vVrbLGNTnQ
sMDpDXqzR35pJV5+XOsLovC+i6pA0S5eMeCV6z+nlilQ6/JhdSri+DToNWBxIC/s
xxAdCiOP3BUQzw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:37 2026 by rpki-client