Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File: 9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier: eyViEj+LNItJ+R7e8Z1JR2JBbNe0xcTLLaCENUftkQo=
Subject key identifier: 86:52:06:48:B8:CA:82:69:CA:A5:30:2C:7F:63:B3:B0:7C:3C:63:87
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 019D28BBA52F0C4DA301FF37087C61858F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 06:01:19 +0000
Manifest this update: Thu 26 Mar 2026 06:01:19 +0000
Manifest next update: Fri 27 Mar 2026 06:01:19 +0000
Files and hashes: 1: 14LKfzEcyprlucXZUzPgqnyuaSo.roa (hash: owEZKmUqoURhemkZHaPKsDWoCPoanQn9LH86MqhDwCI=)
2: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: FP3beFXdfaSEbufMcbXFFtf6V4GZCxmJGYYfg7K+yyo=)
3: G5qi4rCJoI8AUX8isP7b0ojIn7g.roa (hash: FS/t0aq2LUO9zTLCRQWanvLuxo6AAzEoo01kqAkUXDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:a5:2f:0c:4d:a3:01:ff:37:08:7c:61:85:8f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Mar 26 06:01:19 2026 GMT
Not After : Mar 27 06:01:19 2026 GMT
Subject: CN=86520648b8ca8269caa5302c7f63b3b07c3c6387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:17:6c:67:99:36:87:e3:e4:46:4c:ea:1d:d0:
4e:3c:62:d1:88:95:c2:8d:5d:1d:a7:4d:28:04:c0:
48:b6:3d:6f:73:04:9a:ce:29:1c:77:b0:17:69:41:
6d:75:63:be:28:c8:a5:b2:8c:ba:0f:6b:13:90:36:
86:43:8c:99:96:48:c2:2e:51:f2:53:bb:93:d0:47:
7d:4d:1d:31:0c:32:f6:db:76:8e:7c:2a:03:b0:ae:
e3:ad:0f:82:14:d2:00:4f:73:13:a3:9f:8a:cc:f7:
94:47:75:ab:83:a8:9d:c2:7c:2c:89:cc:ac:0a:46:
42:f4:15:7f:10:f5:c1:d3:c9:d2:b1:3a:cd:a6:a3:
45:4e:71:43:07:30:4b:42:b8:29:e4:80:50:73:6b:
f0:11:fe:aa:69:c5:04:52:97:8f:b0:bc:32:77:ef:
04:df:50:16:4d:4f:c5:b6:ee:90:7a:e0:ff:9c:dc:
42:9b:7b:93:dd:de:ff:79:fb:d2:81:b7:79:b6:d6:
e5:37:3b:6a:93:24:1f:5d:bb:2e:3a:78:ae:c9:cc:
3e:39:ab:a6:d8:ed:89:c2:b1:85:cf:7a:40:36:e2:
c8:9e:4e:d0:d5:b2:d4:e6:ff:42:92:e8:be:d8:a8:
05:a6:ec:17:58:52:ba:8f:b4:82:38:72:ad:7e:2d:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:52:06:48:B8:CA:82:69:CA:A5:30:2C:7F:63:B3:B0:7C:3C:63:87
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9c:d4:4e:a7:c9:dd:fe:e9:55:59:36:e1:e1:5a:3e:9f:e0:
c7:fd:2d:9d:6e:98:b4:50:65:76:05:21:92:e2:ac:ae:fe:3b:
da:61:df:55:8e:d2:38:8f:ff:a2:64:19:0f:1b:0f:30:6a:95:
79:38:11:ce:6d:28:49:81:d6:6e:d8:70:1b:57:ca:52:65:95:
cf:f5:59:0f:1c:97:1a:04:7c:e1:28:58:57:9a:26:7d:e9:ba:
79:bb:14:e0:bb:d1:19:d3:1e:2b:b3:e0:02:78:cd:ce:a3:ec:
58:ab:41:66:c6:c4:ad:ec:92:5c:e4:5a:18:b6:86:0d:74:2c:
cd:e0:25:93:fa:f2:82:25:ba:94:9f:68:56:8e:37:0b:6f:b2:
b5:ea:56:ca:5e:0f:1d:49:0c:b7:f8:18:54:dd:58:88:58:fc:
17:ad:75:65:56:f3:fb:7b:60:c4:27:73:8f:77:be:67:04:64:
b0:84:19:58:09:bd:01:72:49:a3:bf:46:4d:1c:81:fd:57:f6:
4d:57:df:fb:22:0b:2d:11:fc:f2:bd:96:ba:84:0a:d3:80:15:
2b:5b:6d:26:fc:8b:2a:b3:12:8d:cc:12:81:dc:0c:aa:54:4c:
30:1a:bc:94:26:17:20:40:d2:89:f0:6c:7e:16:00:6e:b8:5e:
5a:b3:9d:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou6UvDE2jAf83CHxhhY+LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjdhYjQ1ODdlNjkwMjJlNWUyYmMyNDEwN2I1MDFkMDMx
YzM3MjAwHhcNMjYwMzI2MDYwMTE5WhcNMjYwMzI3MDYwMTE5WjAzMTEwLwYDVQQD
Eyg4NjUyMDY0OGI4Y2E4MjY5Y2FhNTMwMmM3ZjYzYjNiMDdjM2M2Mzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BdsZ5k2h+PkRkzqHdBOPGLRiJXC
jV0dp00oBMBItj1vcwSazikcd7AXaUFtdWO+KMilsoy6D2sTkDaGQ4yZlkjCLlHy
U7uT0Ed9TR0xDDL223aOfCoDsK7jrQ+CFNIAT3MTo5+KzPeUR3Wrg6idwnwsicys
CkZC9BV/EPXB08nSsTrNpqNFTnFDBzBLQrgp5IBQc2vwEf6qacUEUpePsLwyd+8E
31AWTU/Ftu6QeuD/nNxCm3uT3d7/efvSgbd5ttblNztqkyQfXbsuOniuycw+Oaum
2O2JwrGFz3pANuLInk7Q1bLU5v9Ckui+2KgFpuwXWFK6j7SCOHKtfi1fOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZSBki4yoJpyqUwLH9js7B8PGOHMB8GA1UdIwQY
MBaAFPT3q0WH5pAi5eK8JBB7UB0DHDcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83N2Y0ZjAtYjgzMy00N2I3LWEzYzct
ZWY3MTBlYzdiMmZlLzEvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83N2Y0ZjAtYjgzMy00N2I3LWEzYzctZWY3MTBlYzdiMmZl
LzEvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZzUTqfJ
3f7pVVk24eFaPp/gx/0tnW6YtFBldgUhkuKsrv472mHfVY7SOI//omQZDxsPMGqV
eTgRzm0oSYHWbthwG1fKUmWVz/VZDxyXGgR84ShYV5omfem6ebsU4LvRGdMeK7Pg
AnjNzqPsWKtBZsbEreySXORaGLaGDXQszeAlk/rygiW6lJ9oVo43C2+ytepWyl4P
HUkMt/gYVN1YiFj8F611ZVbz+3tgxCdzj3e+ZwRksIQZWAm9AXJJo79GTRyB/Vf2
TVff+yILLRH88r2WuoQK04AVK1ttJvyLKrMSjcwSgdwMqlRMMBq8lCYXIEDSifBs
fhYAbrheWrOdww==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:56 2026 by rpki-client