Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
File: 9rrOePyQJ42C8ehmiooZ7pmCzcM.mft (raw, json)
Hash identifier: uhrdcvcSM6ZoipXWll4Ju5qyunw+4b1HjMRnjaPhVGM=
Subject key identifier: 2B:77:C0:FB:C6:FD:F9:7C:E9:B9:8E:AC:AB:DA:24:E7:46:43:8E:16
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 01A1DE0330A1D04FDE0DEB6D725F42808B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
Manifest number: 0D1B
Signing time: Sun 15 Nov 2026 07:01:53 +0000
Manifest this update: Sun 15 Nov 2026 07:01:53 +0000
Manifest next update: Mon 16 Nov 2026 07:01:53 +0000
Files and hashes: 1: 9rrOePyQJ42C8ehmiooZ7pmCzcM.crl (hash: mtQ4bKN4yU/CkNHCWFBKw5f49lGr34n0HFok5ELwT4U=)
2: eiKeW5DZrw8ubUVRgQR3ZnISUA8.roa (hash: G/mSpJ5ilGB6NcS3kOpxScz/226GTJNOO7cls8f2b0g=)
3: ey3Mr8JzbFWqpi_zpEHpZfcPVTI.roa (hash: RZTYOXGch0DUBzdLJFR6bBMusCngAipnQLe9rTFjcIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:03:30:a1:d0:4f:de:0d:eb:6d:72:5f:42:80:8b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Nov 15 07:01:53 2026 GMT
Not After : Nov 16 07:01:53 2026 GMT
Subject: CN=2b77c0fbc6fdf97ce9b98eacabda24e746438e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:e1:a5:4b:5b:f0:52:ff:18:b9:80:cc:0a:
38:3e:e6:34:d1:bb:a9:e3:ed:c3:53:1e:aa:62:4b:
e2:0f:a8:c1:2e:a7:10:7f:2a:19:dd:d7:05:33:ef:
c9:1c:e3:ef:a9:cf:63:ff:58:d2:bc:80:99:8b:33:
18:dd:04:82:9e:03:84:37:5b:79:58:df:98:fd:35:
fa:f6:63:95:11:b0:9a:2f:18:5c:9a:51:12:6a:62:
bf:d4:91:14:18:9e:2d:e7:ee:79:0e:5d:3d:26:8d:
06:44:bd:d9:49:2e:65:11:1e:1c:bf:07:4b:8f:44:
95:b3:4a:da:b7:61:99:40:a3:03:4c:6a:f8:b6:b9:
79:8f:6e:b5:6f:9f:47:cd:2e:4b:5a:99:ec:a2:c8:
d7:61:32:a9:ef:4b:28:86:64:cd:92:d6:79:2f:3f:
bb:7e:4e:55:42:bf:83:f7:3e:66:71:3b:f2:16:b5:
6d:e2:d0:c0:ed:d6:43:1f:42:dc:2d:8a:12:95:f8:
66:4c:a7:76:53:ba:33:f1:eb:61:da:2d:60:ce:6a:
6f:f2:92:54:34:13:e3:50:2a:87:26:d8:1a:2f:62:
8b:1f:b1:27:08:2d:88:70:9b:48:d6:34:b2:20:9c:
6a:ce:14:11:6a:3c:40:94:7c:41:a9:52:f3:53:e0:
4e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:77:C0:FB:C6:FD:F9:7C:E9:B9:8E:AC:AB:DA:24:E7:46:43:8E:16
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b7:db:8d:87:86:9f:12:be:60:a5:36:21:81:bc:41:b9:c4:
6f:df:1b:70:6d:0a:e8:79:8d:fc:a1:df:49:60:7e:47:2a:1f:
f9:86:44:fa:74:fa:8f:c7:07:9f:39:24:62:52:4c:0e:56:3f:
9f:e0:7a:8d:81:be:b9:9d:52:e2:86:9c:bc:53:de:d7:d2:51:
f6:7b:cd:51:c5:57:c0:a5:69:95:a2:48:72:a7:65:89:e4:bf:
77:6a:c0:d6:c3:27:e5:39:ce:fc:f8:e0:d5:5b:2e:a2:f7:c5:
a4:4c:27:03:0d:61:a3:01:00:68:6f:28:4c:9f:f7:37:f1:8d:
6c:b7:98:be:04:dd:68:a8:32:cf:3d:94:16:a5:7c:71:44:97:
49:06:ae:89:75:a1:e2:55:f9:4a:2f:75:82:89:f1:5a:a6:22:
eb:c3:55:a1:c2:9d:ec:53:ae:2c:96:19:00:ca:db:06:18:82:
88:ab:38:e1:23:87:66:87:9d:3f:11:96:ae:f6:10:67:b5:3d:
14:49:ff:f2:3d:c3:99:4f:a1:03:65:f2:14:8a:19:1f:0d:28:
d4:cc:68:00:1c:23:3f:9a:5d:72:e2:de:37:20:9d:27:5b:f1:
65:0c:a0:0d:86:8f:05:71:65:2d:95:05:8e:9c:77:96:bd:86:
2e:4a:28:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeAzCh0E/eDettcl9CgIsFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YmFjZTc4ZmM5MDI3OGQ4MmYxZTg2NjhhOGExOWVlOTk4
MmNkYzMwHhcNMjYxMTE1MDcwMTUzWhcNMjYxMTE2MDcwMTUzWjAzMTEwLwYDVQQD
EygyYjc3YzBmYmM2ZmRmOTdjZTliOThlYWNhYmRhMjRlNzQ2NDM4ZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPPhpUtb8FL/GLmAzAo4PuY00bup
4+3DUx6qYkviD6jBLqcQfyoZ3dcFM+/JHOPvqc9j/1jSvICZizMY3QSCngOEN1t5
WN+Y/TX69mOVEbCaLxhcmlESamK/1JEUGJ4t5+55Dl09Jo0GRL3ZSS5lER4cvwdL
j0SVs0rat2GZQKMDTGr4trl5j261b59HzS5LWpnsosjXYTKp70sohmTNktZ5Lz+7
fk5VQr+D9z5mcTvyFrVt4tDA7dZDH0LcLYoSlfhmTKd2U7oz8eth2i1gzmpv8pJU
NBPjUCqHJtgaL2KLH7EnCC2IcJtI1jSyIJxqzhQRajxAlHxBqVLzU+BO5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCt3wPvG/fl86bmOrKvaJOdGQ44WMB8GA1UdIwQY
MBaAFPa6znj8kCeNgvHoZoqKGe6Zgs3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC83ODM1YzItMjA0Yy00ZGRlLThlZjkt
ZjZkZDNiNTE2MWY1LzEvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC83ODM1YzItMjA0Yy00ZGRlLThlZjktZjZkZDNiNTE2MWY1
LzEvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7fbjYeG
nxK+YKU2IYG8QbnEb98bcG0K6HmN/KHfSWB+Ryof+YZE+nT6j8cHnzkkYlJMDlY/
n+B6jYG+uZ1S4oacvFPe19JR9nvNUcVXwKVplaJIcqdlieS/d2rA1sMn5TnO/Pjg
1VsuovfFpEwnAw1howEAaG8oTJ/3N/GNbLeYvgTdaKgyzz2UFqV8cUSXSQauiXWh
4lX5Si91gonxWqYi68NVocKd7FOuLJYZAMrbBhiCiKs44SOHZoedPxGWrvYQZ7U9
FEn/8j3DmU+hA2XyFIoZHw0o1MxoABwjP5pdcuLeNyCdJ1vxZQygDYaPBXFlLZUF
jpx3lr2GLkoomQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:12:02 2026 by rpki-client