Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File: 9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier: 4J5x6N7yMRr0af9/DHTjKD2b+OkSmr6FXaL8ZOL+OPE=
Subject key identifier: A8:52:98:9B:B4:62:D3:97:65:56:70:EF:A8:56:2F:81:42:EF:A3:A6
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer: /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial: 019D25831FC29D045D1BEEB489EB9B6FE892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number: 15C1
Signing time: Wed 25 Mar 2026 15:00:43 +0000
Manifest this update: Wed 25 Mar 2026 15:00:43 +0000
Manifest next update: Thu 26 Mar 2026 15:00:43 +0000
Files and hashes: 1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: MaaYUyEHdwkkZQBxHbKjp5+Piwn3hzOLCplvfjKb5XE=)
2: mEgDM3l5c0LrVuCqn477ft25k3w.roa (hash: KJ2JP42lCHcxJukTZAz4D69v5GnFU1eWXwSmVHNVnQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:1f:c2:9d:04:5d:1b:ee:b4:89:eb:9b:6f:e8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f501b9e20616d686b405da906afa597635063640
Validity
Not Before: Mar 25 15:00:43 2026 GMT
Not After : Mar 26 15:00:43 2026 GMT
Subject: CN=a852989bb462d397655670efa8562f8142efa3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:24:3e:b4:d6:62:80:c2:ba:95:d7:77:b6:
5b:19:2f:81:aa:50:7f:e8:76:82:04:12:4e:ff:c0:
7f:c5:68:b7:f5:bc:e7:b4:c7:d0:9e:26:e2:df:ff:
fc:78:34:c0:12:fb:ff:bc:7d:ff:c2:10:ab:af:f3:
3a:bc:a5:c6:b2:7f:4a:26:8b:58:9e:a8:55:b0:87:
98:a8:21:08:73:5f:b8:8f:a7:28:04:6d:01:c0:37:
d6:f9:59:9e:58:15:ec:08:d6:2a:3d:d8:f2:7c:66:
fe:ef:1e:7d:b8:2a:5e:fb:82:18:32:d0:df:b2:61:
2d:57:25:3c:ff:83:05:ca:44:ee:2b:6d:bb:64:45:
e6:67:1c:12:46:95:d4:c3:c3:3e:b2:6a:f0:b1:e1:
80:7d:88:24:27:f7:c3:32:a4:9d:35:f6:1f:e4:7e:
98:94:61:0c:4d:2d:8f:3a:06:cd:bf:ed:e3:9f:d0:
14:7e:10:25:24:1f:25:1f:19:33:73:f3:41:ce:e9:
33:57:5a:bf:08:9f:71:34:8b:f7:c1:55:5b:f7:93:
07:f4:71:76:c5:4c:6b:7e:f9:c7:75:7b:0a:07:b7:
32:84:b9:3c:7b:05:41:d2:ce:25:81:47:a3:4a:91:
3d:89:41:78:e0:63:e6:d8:99:c1:ee:d1:42:17:f7:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:52:98:9B:B4:62:D3:97:65:56:70:EF:A8:56:2F:81:42:EF:A3:A6
X509v3 Authority Key Identifier:
keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ae:b0:69:57:b5:4c:31:91:ff:51:b9:74:69:84:bf:a4:92:
00:15:36:95:01:c9:c3:d7:bf:86:22:35:f3:35:bd:b1:3c:d2:
94:d2:c7:45:ce:e9:ed:12:ae:c9:a2:72:ed:06:5e:c0:ce:b0:
e9:25:64:82:5f:a3:a7:bf:d4:5f:52:3b:e2:d0:68:9b:61:92:
05:37:67:64:f5:85:42:5d:ec:2c:00:e7:c7:0a:6a:a0:25:ee:
f8:59:24:5d:b3:ee:1b:a9:bd:2a:1c:db:89:35:a1:0f:9e:e3:
bc:19:af:d2:a7:db:00:94:0c:75:65:c7:71:9a:2e:ab:44:4f:
ed:7c:da:a8:ef:ab:91:1b:e7:f2:27:39:03:e2:e3:d0:9c:f7:
a8:fd:68:d7:10:68:84:97:1e:80:d1:c0:b0:99:e1:3f:94:d8:
64:6c:3e:b4:f8:cd:d3:a4:aa:8d:d0:ae:58:0a:f3:58:0a:61:
8a:f1:fc:73:1e:ae:e3:d0:0e:e5:8d:e5:d2:c2:e7:49:81:e7:
ef:17:0a:ad:de:ae:83:76:86:6e:ad:73:6b:4e:ef:06:47:5b:
ec:72:d6:b5:68:01:23:c7:2f:f5:14:4a:00:12:f2:df:9d:3b:
86:8f:76:f5:53:91:9a:f7:40:70:34:a4:36:64:09:0f:10:5c:
77:55:fe:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lgx/CnQRdG+60ieubb+iSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MDFiOWUyMDYxNmQ2ODZiNDA1ZGE5MDZhZmE1OTc2MzUw
NjM2NDAwHhcNMjYwMzI1MTUwMDQzWhcNMjYwMzI2MTUwMDQzWjAzMTEwLwYDVQQD
EyhhODUyOTg5YmI0NjJkMzk3NjU1NjcwZWZhODU2MmY4MTQyZWZhM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykskPrTWYoDCupXXd7ZbGS+BqlB/
6HaCBBJO/8B/xWi39bzntMfQnibi3//8eDTAEvv/vH3/whCrr/M6vKXGsn9KJotY
nqhVsIeYqCEIc1+4j6coBG0BwDfW+VmeWBXsCNYqPdjyfGb+7x59uCpe+4IYMtDf
smEtVyU8/4MFykTuK227ZEXmZxwSRpXUw8M+smrwseGAfYgkJ/fDMqSdNfYf5H6Y
lGEMTS2POgbNv+3jn9AUfhAlJB8lHxkzc/NBzukzV1q/CJ9xNIv3wVVb95MH9HF2
xUxrfvnHdXsKB7cyhLk8ewVB0s4lgUejSpE9iUF44GPm2JnB7tFCF/f/aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhSmJu0YtOXZVZw76hWL4FC76OmMB8GA1UdIwQY
MBaAFPUBueIGFtaGtAXakGr6WXY1BjZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83YWZjZTQtMjE4Yi00N2VkLTk1YWIt
NzVkNTg0M2FhNDg5LzEvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83YWZjZTQtMjE4Yi00N2VkLTk1YWItNzVkNTg0M2FhNDg5
LzEvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP66waVe1
TDGR/1G5dGmEv6SSABU2lQHJw9e/hiI18zW9sTzSlNLHRc7p7RKuyaJy7QZewM6w
6SVkgl+jp7/UX1I74tBom2GSBTdnZPWFQl3sLADnxwpqoCXu+FkkXbPuG6m9Khzb
iTWhD57jvBmv0qfbAJQMdWXHcZouq0RP7XzaqO+rkRvn8ic5A+Lj0Jz3qP1o1xBo
hJcegNHAsJnhP5TYZGw+tPjN06SqjdCuWArzWAphivH8cx6u49AO5Y3l0sLnSYHn
7xcKrd6ug3aGbq1za07vBkdb7HLWtWgBI8cv9RRKABLy3507ho929VORmvdAcDSk
NmQJDxBcd1X+fg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:19 2026 by rpki-client