Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
File: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft (raw, json)
Hash identifier: XWb5nZYqn5yzkEcB5UhSAA86kbr9eK1rWf6vNT+1APQ=
Subject key identifier: 6A:B3:11:0D:4B:0A:77:0E:18:3B:58:28:A7:06:8F:BD:A2:E0:87:A8
Authority key identifier: F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
Certificate issuer: /CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Certificate serial: 019D2816E136254B0A0B220532709B334087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
Manifest number: 04AA
Signing time: Thu 26 Mar 2026 03:01:21 +0000
Manifest this update: Thu 26 Mar 2026 03:01:21 +0000
Manifest next update: Fri 27 Mar 2026 03:01:21 +0000
Files and hashes: 1: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl (hash: pNOJrCDbUbSnpndmcAkViDu8MrqHA8lBycOEla9buuE=)
2: Z5Bt0mcpjuYCBhTBe_0r3j_HEOE.roa (hash: CQtnMCBgc31J7ELcq2ticHIWUxTxloi8VsRDj7ga9wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e1:36:25:4b:0a:0b:22:05:32:70:9b:33:40:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Validity
Not Before: Mar 26 03:01:21 2026 GMT
Not After : Mar 27 03:01:21 2026 GMT
Subject: CN=6ab3110d4b0a770e183b5828a7068fbda2e087a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:90:e6:e5:d3:88:65:47:0c:fe:48:e6:47:
6d:bc:88:f7:b8:45:5e:26:f9:38:70:5c:79:41:5f:
f2:c5:48:4c:90:b3:5f:71:7a:91:fb:65:0d:9f:cf:
eb:e7:37:b1:1c:16:06:b6:74:52:c4:50:eb:03:92:
d4:91:3e:4b:0e:50:b7:8d:eb:2d:e0:a8:b5:71:62:
60:aa:6c:a6:ea:31:2c:82:19:dc:cb:da:41:7f:94:
c7:38:fb:43:ec:9e:6e:7d:c2:df:11:a5:c2:e9:1c:
a8:3a:31:74:19:45:01:72:1d:2d:ef:78:70:6b:35:
ef:2b:d8:7e:69:b5:b8:0b:71:6b:e5:d9:f6:22:6b:
f4:5f:e8:b9:d4:69:d3:18:2a:7f:f6:56:a5:5c:11:
75:30:1c:67:aa:49:80:eb:ef:36:cb:85:a1:c9:76:
c3:1e:77:2c:c7:7c:0e:ad:35:e8:22:e2:6a:5c:60:
30:a4:7f:18:2e:c2:46:ba:81:0e:11:4d:9d:92:80:
63:c0:d5:9a:ae:98:2e:60:80:76:a7:b7:80:ee:e7:
ec:48:f1:59:48:bc:66:03:3e:9f:ac:e9:b1:49:c7:
a4:16:1b:98:85:25:ec:d6:5d:2d:e5:ce:3e:42:a2:
be:22:eb:d1:3c:7e:c6:3b:5f:ed:39:3a:c0:59:f5:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B3:11:0D:4B:0A:77:0E:18:3B:58:28:A7:06:8F:BD:A2:E0:87:A8
X509v3 Authority Key Identifier:
keyid:F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:99:93:f6:8b:4e:33:85:9d:e0:73:ad:6f:13:c4:6f:82:37:
8e:82:4f:c1:a6:a5:92:b9:cf:1e:bd:c9:1b:62:74:55:19:45:
c0:d8:ba:36:c9:21:40:6f:5e:e8:4b:a3:13:b6:64:64:5f:75:
96:c8:24:6a:12:e0:af:a2:04:94:11:e9:6f:9f:0e:ff:56:b6:
e3:15:bc:d1:72:f4:77:43:00:0c:d3:4c:ad:7e:a9:8d:4a:a3:
d8:af:71:3c:cc:3e:df:63:80:a4:86:da:86:2e:ec:31:17:a9:
c8:a8:b8:30:3a:a9:0e:82:51:4b:6d:9f:b1:9d:8a:43:e6:97:
55:46:8c:57:14:fb:1f:a0:ab:11:0a:39:93:90:59:3b:98:33:
7e:ed:19:f7:56:ba:3b:4a:b3:74:ee:01:b4:c9:68:57:83:95:
24:28:bd:c0:db:2a:95:21:f8:2c:9f:d2:b3:c0:47:71:a3:99:
16:e9:c7:e4:e7:6f:a6:09:da:3a:b5:ab:7e:3f:64:60:c7:d0:
e7:23:bd:b9:33:79:8d:a3:2c:a7:94:5a:3b:d3:0b:47:70:93:
57:a0:aa:7e:98:61:de:2e:95:20:e0:3c:86:3a:f7:a9:bb:57:
cd:c5:3d:a9:40:52:2d:5c:14:22:08:7f:2e:2f:28:f8:f7:7f:
46:1b:b8:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFuE2JUsKCyIFMnCbM0CHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWZiMjRjZTY3YzIxMTI5N2IwNjVjNjdmMWI4MjA5Yjk5
NDRiMGYwHhcNMjYwMzI2MDMwMTIxWhcNMjYwMzI3MDMwMTIxWjAzMTEwLwYDVQQD
Eyg2YWIzMTEwZDRiMGE3NzBlMTgzYjU4MjhhNzA2OGZiZGEyZTA4N2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAiQ5uXTiGVHDP5I5kdtvIj3uEVe
Jvk4cFx5QV/yxUhMkLNfcXqR+2UNn8/r5zexHBYGtnRSxFDrA5LUkT5LDlC3jest
4Ki1cWJgqmym6jEsghncy9pBf5THOPtD7J5ufcLfEaXC6RyoOjF0GUUBch0t73hw
azXvK9h+abW4C3Fr5dn2Imv0X+i51GnTGCp/9lalXBF1MBxnqkmA6+82y4WhyXbD
Hncsx3wOrTXoIuJqXGAwpH8YLsJGuoEOEU2dkoBjwNWarpguYIB2p7eA7ufsSPFZ
SLxmAz6frOmxScekFhuYhSXs1l0t5c4+QqK+IuvRPH7GO1/tOTrAWfUWIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqzEQ1LCncOGDtYKKcGj72i4IeoMB8GA1UdIwQY
MBaAFPafskzmfCESl7Blxn8bggm5lEsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zZTZiMjYtYTE0Ni00MmNmLTgyZjMt
OWU1MTM4ZTEyMGM5LzEvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zZTZiMjYtYTE0Ni00MmNmLTgyZjMtOWU1MTM4ZTEyMGM5
LzEvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5mT9otO
M4Wd4HOtbxPEb4I3joJPwaalkrnPHr3JG2J0VRlFwNi6NskhQG9e6EujE7ZkZF91
lsgkahLgr6IElBHpb58O/1a24xW80XL0d0MADNNMrX6pjUqj2K9xPMw+32OApIba
hi7sMRepyKi4MDqpDoJRS22fsZ2KQ+aXVUaMVxT7H6CrEQo5k5BZO5gzfu0Z91a6
O0qzdO4BtMloV4OVJCi9wNsqlSH4LJ/Ss8BHcaOZFunH5OdvpgnaOrWrfj9kYMfQ
5yO9uTN5jaMsp5RaO9MLR3CTV6Cqfphh3i6VIOA8hjr3qbtXzcU9qUBSLVwUIgh/
Li8o+Pd/Rhu4gQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:03 2026 by rpki-client