Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
File: T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json)
Hash identifier: 54uXA0xvVC01Nhzlguq/nVTUx+n7+9Vs5Ad9CjvYUBw=
Subject key identifier: 22:24:07:88:98:BC:8A:57:50:3A:8A:C5:33:2C:00:B3:E8:9F:25:16
Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
Certificate issuer: /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Certificate serial: 019D25F1D477D9C829197807CD4032BA5F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
Manifest number: 0774
Signing time: Wed 25 Mar 2026 17:01:38 +0000
Manifest this update: Wed 25 Mar 2026 17:01:38 +0000
Manifest next update: Thu 26 Mar 2026 17:01:38 +0000
Files and hashes: 1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: ResZzQpvtaqOEGyJ88UXqxpo0RIrsehV1N09L66iS6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:d4:77:d9:c8:29:19:78:07:cd:40:32:ba:5f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Validity
Not Before: Mar 25 17:01:38 2026 GMT
Not After : Mar 26 17:01:38 2026 GMT
Subject: CN=2224078898bc8a57503a8ac5332c00b3e89f2516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:86:21:99:ec:4d:dd:9e:f1:71:c8:07:5c:
45:2a:6a:26:90:22:c7:75:67:94:7c:2e:93:f8:bf:
db:61:e1:03:38:65:75:58:b1:18:1e:d0:3c:9a:14:
22:3d:c6:38:de:0e:0b:87:d2:a4:e8:0b:a3:53:2d:
32:51:c0:b8:69:2b:ee:cf:81:b1:f4:78:53:80:c6:
70:0a:51:2e:73:3d:55:c6:67:65:bc:69:06:06:cb:
76:2d:1e:d9:72:6b:35:13:0f:b6:6a:7f:81:26:d8:
56:07:d3:87:b6:77:96:b3:cd:c8:12:f8:37:d6:72:
1d:0f:05:df:b8:1c:24:38:9a:f8:89:04:0e:da:8f:
be:af:d8:e8:f9:cf:b1:b9:be:de:2c:0e:e6:aa:40:
1f:15:5f:89:4e:38:91:6f:c9:30:ba:af:3b:cf:f6:
17:16:d1:0f:ec:d7:eb:56:27:f1:ff:10:a0:55:eb:
f4:d5:02:b5:6f:92:eb:89:26:1a:34:2b:05:0a:d4:
db:22:28:32:9d:a7:69:51:26:17:33:c8:06:b4:6a:
39:1e:56:8c:1d:65:1b:c6:f6:39:cb:21:fc:e2:59:
45:8f:99:fc:78:31:49:cb:8e:92:ce:f5:42:4c:5f:
eb:18:c8:50:f5:2f:27:90:2d:d8:2e:76:e8:f2:86:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:24:07:88:98:BC:8A:57:50:3A:8A:C5:33:2C:00:B3:E8:9F:25:16
X509v3 Authority Key Identifier:
keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c1:39:fb:1e:b3:e7:ba:c4:3b:11:e7:cb:bf:c5:c0:a6:e6:
d1:3a:20:8d:ff:a3:96:f7:d2:49:13:a8:f2:1b:ce:12:39:7f:
75:53:40:8f:d9:a2:8a:e4:2e:99:ee:c7:14:ca:33:47:6c:4d:
2e:56:ba:cf:8c:ad:24:6e:05:fa:a1:5a:7e:bd:d6:76:b3:6c:
07:24:42:80:c4:72:b0:54:d3:23:85:ef:86:55:84:95:38:b1:
84:c4:b1:6b:9a:62:87:84:ca:69:55:5b:12:a5:56:4b:df:25:
8c:9b:76:cc:38:b6:06:70:94:33:bb:9a:6a:45:78:c6:5c:15:
0a:f9:fe:f1:be:05:e3:4e:fe:4d:d1:ce:25:20:40:ed:1b:34:
da:0a:ca:3d:25:b4:fa:37:e9:d3:8b:d5:30:f3:8a:a1:ec:0c:
88:e8:f5:91:bb:96:5c:59:55:33:0a:28:e5:0b:f5:99:78:54:
ea:a7:30:a6:41:b5:22:fd:62:94:7d:5b:1b:90:f3:fc:61:f4:
b1:6e:dc:7e:38:f3:3a:fe:59:9b:c5:3d:50:39:80:a8:d6:cc:
6f:48:42:a4:17:7a:bb:db:92:57:68:e5:d6:f7:42:3c:8a:64:
7c:b1:e1:6b:57:be:f7:c2:e0:07:02:de:5f:c6:1f:17:15:2f:
89:e5:c7:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8dR32cgpGXgHzUAyul8gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZDZiN2QwYTYzMDM1N2JjM2MxZTBjZGRhMDZkY2E4OGEz
NDYzZWMwHhcNMjYwMzI1MTcwMTM4WhcNMjYwMzI2MTcwMTM4WjAzMTEwLwYDVQQD
EygyMjI0MDc4ODk4YmM4YTU3NTAzYThhYzUzMzJjMDBiM2U4OWYyNTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5WGIZnsTd2e8XHIB1xFKmomkCLH
dWeUfC6T+L/bYeEDOGV1WLEYHtA8mhQiPcY43g4Lh9Kk6AujUy0yUcC4aSvuz4Gx
9HhTgMZwClEucz1VxmdlvGkGBst2LR7Zcms1Ew+2an+BJthWB9OHtneWs83IEvg3
1nIdDwXfuBwkOJr4iQQO2o++r9jo+c+xub7eLA7mqkAfFV+JTjiRb8kwuq87z/YX
FtEP7NfrVifx/xCgVev01QK1b5LriSYaNCsFCtTbIigynadpUSYXM8gGtGo5HlaM
HWUbxvY5yyH84llFj5n8eDFJy46SzvVCTF/rGMhQ9S8nkC3YLnbo8oajOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIkB4iYvIpXUDqKxTMsALPonyUWMB8GA1UdIwQY
MBaAFE/Wt9CmMDV7w8HgzdoG3KiKNGPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9mZjMxZjAtNzk2MC00ZGYxLTk4ODUt
ZDMxNDZiZmNkZGZmLzEvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9mZjMxZjAtNzk2MC00ZGYxLTk4ODUtZDMxNDZiZmNkZGZm
LzEvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcE5+x6z
57rEOxHny7/FwKbm0Togjf+jlvfSSROo8hvOEjl/dVNAj9miiuQume7HFMozR2xN
Lla6z4ytJG4F+qFafr3WdrNsByRCgMRysFTTI4XvhlWElTixhMSxa5pih4TKaVVb
EqVWS98ljJt2zDi2BnCUM7uaakV4xlwVCvn+8b4F407+TdHOJSBA7Rs02grKPSW0
+jfp04vVMPOKoewMiOj1kbuWXFlVMwoo5Qv1mXhU6qcwpkG1Iv1ilH1bG5Dz/GH0
sW7cfjjzOv5Zm8U9UDmAqNbMb0hCpBd6u9uSV2jl1vdCPIpkfLHha1e+98LgBwLe
X8YfFxUvieXHhA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:46 2026 by rpki-client