Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier: 2Q/dBr9SNqPftAUBtutl3Q0SJK6ZDSNw2I1rH+k807s=
Subject key identifier: D1:7E:99:44:FD:FA:99:07:39:DE:E8:0B:AE:A0:F4:9A:83:2B:E7:1C
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 019D29CDDE42C8386A6C2B50FC781FE69048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number: 0FA3
Signing time: Thu 26 Mar 2026 11:00:50 +0000
Manifest this update: Thu 26 Mar 2026 11:00:50 +0000
Manifest next update: Fri 27 Mar 2026 11:00:50 +0000
Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: nlY/80QSrg1dMXApZBDAJ2YLseevnIBIK+w21COJyI4=)
2: i1q-5ppGHZKen0mg4iu01mYnQM0.roa (hash: sIuyBrADQrDmfb4gofoZhceJ2ljMvz5t7ov19sRqXKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:de:42:c8:38:6a:6c:2b:50:fc:78:1f:e6:90:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: Mar 26 11:00:50 2026 GMT
Not After : Mar 27 11:00:50 2026 GMT
Subject: CN=d17e9944fdfa990739dee80baea0f49a832be71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:f0:61:f5:8c:1f:4c:d5:ca:f8:3c:36:43:
8e:33:8b:cf:a6:90:23:39:a6:52:2d:73:56:c8:91:
65:ac:c7:53:9e:ef:e0:75:56:87:4a:d7:e9:4f:b2:
4b:e2:35:6d:5c:4a:73:5d:c9:c9:4d:82:73:ce:85:
88:64:54:8b:b9:60:81:84:b7:99:af:ba:9a:b6:65:
5d:0b:ab:c7:c4:44:2e:47:31:98:18:cf:11:53:4f:
0d:26:cd:1f:f5:6e:6a:2e:bc:d4:86:c6:da:20:14:
cc:48:2b:c5:e1:04:6a:20:24:1f:f0:e7:19:b3:89:
ff:ce:b4:39:50:21:6b:3b:cb:a9:f0:e2:71:f6:c4:
33:8b:fc:2e:16:66:b7:c9:bc:ba:78:61:9c:bf:37:
04:b3:56:a7:49:41:87:31:02:21:53:33:51:75:f1:
56:1a:16:05:4f:d9:85:48:71:d3:f7:e4:d9:4b:2c:
0c:16:86:ec:25:b0:c2:5c:b5:41:1a:14:80:bf:a6:
bc:04:0f:cd:00:9b:ff:61:99:9e:7e:43:49:59:ed:
cf:57:51:da:c6:eb:df:e2:07:b3:5a:99:b4:3d:1f:
23:52:9f:c9:8e:e4:3f:cd:f2:98:37:45:92:4b:94:
50:e5:65:7b:46:ff:ab:e8:f3:9e:c3:29:ca:70:44:
d7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7E:99:44:FD:FA:99:07:39:DE:E8:0B:AE:A0:F4:9A:83:2B:E7:1C
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:02:4b:55:d4:eb:3f:5b:e3:fe:55:b5:7e:70:cf:03:9d:03:
66:87:be:e8:29:b8:9d:71:2e:35:80:d8:af:63:bb:2d:28:b2:
19:a4:0e:74:9e:42:6f:a0:21:3e:7a:85:5b:a9:9a:4c:ae:e5:
e0:98:9b:34:f7:ac:9b:df:a9:18:da:e6:0e:d5:4e:d1:4e:10:
5c:17:c1:f3:ee:f3:6d:43:ee:1b:d0:40:db:7f:85:d5:df:82:
e7:c8:59:40:93:7a:64:73:6e:70:46:3e:07:cd:65:09:53:c7:
98:96:47:10:e9:4a:6b:69:4c:c9:bf:a1:31:7e:06:fd:11:42:
bd:45:17:c9:81:ce:d4:a3:f6:16:59:92:43:5a:62:59:34:ab:
5e:3d:3a:cf:bd:9f:f4:aa:77:d0:c9:6c:ad:7c:08:3a:c3:f4:
70:ea:c4:22:c9:c2:d2:ec:e2:69:16:c5:ed:a5:1c:44:f4:78:
c5:93:63:e8:ae:36:8c:26:bf:50:0e:eb:26:0b:a0:03:df:bc:
43:f1:23:0f:68:1e:71:0e:80:06:b6:4a:8a:52:0a:9d:d0:bb:
95:af:99:f4:93:3b:a0:df:05:c4:f9:54:ea:12:b7:75:4e:6f:
9a:27:64:17:a2:21:63:83:86:e1:e4:48:47:1e:58:3d:62:ad:
7e:33:45:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzd5CyDhqbCtQ/Hgf5pBIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTQxOWUzNzAwYTM2YmEyYjAzOTA2YzlmOGY0ZDJkZmQ4
NDgwNzAwHhcNMjYwMzI2MTEwMDUwWhcNMjYwMzI3MTEwMDUwWjAzMTEwLwYDVQQD
EyhkMTdlOTk0NGZkZmE5OTA3MzlkZWU4MGJhZWEwZjQ5YTgzMmJlNzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV3wYfWMH0zVyvg8NkOOM4vPppAj
OaZSLXNWyJFlrMdTnu/gdVaHStfpT7JL4jVtXEpzXcnJTYJzzoWIZFSLuWCBhLeZ
r7qatmVdC6vHxEQuRzGYGM8RU08NJs0f9W5qLrzUhsbaIBTMSCvF4QRqICQf8OcZ
s4n/zrQ5UCFrO8up8OJx9sQzi/wuFma3yby6eGGcvzcEs1anSUGHMQIhUzNRdfFW
GhYFT9mFSHHT9+TZSywMFobsJbDCXLVBGhSAv6a8BA/NAJv/YZmefkNJWe3PV1Ha
xuvf4gezWpm0PR8jUp/JjuQ/zfKYN0WSS5RQ5WV7Rv+r6POewynKcETXOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNF+mUT9+pkHOd7oC66g9JqDK+ccMB8GA1UdIwQY
MBaAFPZUGeNwCja6KwOQbJ+PTS39hIBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYt
ZDRiNzIzZWQ3ODFjLzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYtZDRiNzIzZWQ3ODFj
LzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAJLVdTr
P1vj/lW1fnDPA50DZoe+6Cm4nXEuNYDYr2O7LSiyGaQOdJ5Cb6AhPnqFW6maTK7l
4JibNPesm9+pGNrmDtVO0U4QXBfB8+7zbUPuG9BA23+F1d+C58hZQJN6ZHNucEY+
B81lCVPHmJZHEOlKa2lMyb+hMX4G/RFCvUUXyYHO1KP2FlmSQ1piWTSrXj06z72f
9Kp30MlsrXwIOsP0cOrEIsnC0uziaRbF7aUcRPR4xZNj6K42jCa/UA7rJgugA9+8
Q/EjD2gecQ6ABrZKilIKndC7la+Z9JM7oN8FxPlU6hK3dU5vmidkF6IhY4OG4eRI
Rx5YPWKtfjNFgQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:29:13 2026 by rpki-client