Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
File: _c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft (raw, json)
Hash identifier: DgQxEsA3p+FmVrbb7mYcCrU8Y8+wKTs2CGBfsr0ytn0=
Subject key identifier: 85:A0:9A:5A:D6:50:19:06:3A:3A:5A:BF:23:65:83:6A:39:5B:70:CF
Authority key identifier: FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
Certificate issuer: /CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
Certificate serial: 019D2A3BFE97C2E7B4ADD9B74EC7EC2A65A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
Manifest number: 0F90
Signing time: Thu 26 Mar 2026 13:01:07 +0000
Manifest this update: Thu 26 Mar 2026 13:01:07 +0000
Manifest next update: Fri 27 Mar 2026 13:01:07 +0000
Files and hashes: 1: _c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl (hash: A+BHokocfKBO+BLwZLSOFwRxQpzvLKguEtPW/0wil0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:fe:97:c2:e7:b4:ad:d9:b7:4e:c7:ec:2a:65:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
Validity
Not Before: Mar 26 13:01:07 2026 GMT
Not After : Mar 27 13:01:07 2026 GMT
Subject: CN=85a09a5ad65019063a3a5abf2365836a395b70cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:bc:7d:3c:8c:1e:b2:33:7d:6b:cd:fc:ad:
da:51:11:63:ce:17:6e:01:7f:57:5a:d0:1a:45:3d:
f6:6e:63:4d:d1:53:6d:b8:a8:fb:a2:37:3b:fd:e7:
49:44:1e:4a:6e:88:87:b0:1b:3d:2f:05:b4:d7:75:
bd:5f:f0:8a:a4:24:de:b2:8f:f4:d0:ca:42:6d:00:
dc:1d:91:1d:32:64:ba:54:4b:fc:08:3b:ab:f8:7a:
36:f0:0c:ab:15:5d:e4:01:13:06:88:b1:3c:54:8b:
45:a0:f7:2d:42:42:31:78:50:93:de:ce:cb:01:70:
94:5c:51:95:7b:6e:0f:ba:42:4f:d7:ab:f8:53:fa:
ee:43:ce:03:4b:55:f0:c2:71:11:54:da:7a:03:89:
dc:2e:d2:aa:45:04:28:d8:75:6a:63:47:12:cd:1b:
e9:ce:29:26:bf:c5:05:ca:d7:6a:f2:78:0c:3d:49:
ab:3d:54:7b:db:dd:20:59:2d:17:ba:33:c4:2c:c0:
7e:ff:33:42:cd:cc:7b:15:a3:1d:c2:2f:9e:e8:2c:
c3:f8:8b:00:8e:09:0b:71:ed:86:3c:e0:29:04:2d:
ee:b2:fd:b2:5e:ea:32:cf:54:9d:5c:1f:78:05:9d:
32:d1:12:21:b0:84:c8:01:30:0d:aa:bc:cb:49:7d:
93:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A0:9A:5A:D6:50:19:06:3A:3A:5A:BF:23:65:83:6A:39:5B:70:CF
X509v3 Authority Key Identifier:
keyid:FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6a:60:e7:a2:ac:e5:b7:0a:43:e9:a3:2c:ce:8c:0f:62:c9:
a4:ce:c6:ec:29:60:53:f6:c2:fe:11:b8:1e:a8:62:a1:9e:a5:
57:ff:a1:93:d3:dc:7b:42:c2:4e:c2:ec:d5:84:36:59:5f:b3:
fc:58:1f:2a:70:50:91:7e:9d:7a:f8:7f:a2:71:bb:ba:ef:5d:
70:92:aa:03:fe:b4:d3:6e:da:43:d0:68:37:6e:4a:ce:11:db:
0c:61:48:01:37:c2:6c:e4:fb:33:a7:37:2d:86:d8:9d:de:b9:
53:e4:99:eb:9a:d6:38:7b:6d:d4:51:de:51:ec:a0:ba:8b:93:
cf:56:f4:14:0e:da:2c:07:13:f3:bb:7a:cf:58:46:70:e5:80:
19:02:34:99:15:d7:43:08:76:77:70:63:13:f3:96:90:df:0a:
06:93:a4:2e:4c:96:23:85:7c:45:e3:44:91:a8:db:ea:93:7d:
70:e6:ea:25:a9:a3:a9:09:e3:8f:ce:51:d2:f8:7e:41:ab:2e:
d0:51:b8:ba:4f:b6:dc:fd:55:2d:80:43:fc:55:3a:ce:0f:b0:
7d:71:a5:c3:4f:a4:ef:ae:57:b5:7e:b8:8c:ff:ed:86:0e:32:
33:f4:d4:1d:4c:e5:d8:7b:53:70:7f:1b:cf:33:ee:10:26:ee:
46:9b:3e:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO/6Xwue0rdm3TsfsKmWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkY2Y3MmJiNmM4Njg3NTA4NjI4OWRkMjUxOGZiMDNmODgy
MmVlOWQwHhcNMjYwMzI2MTMwMTA3WhcNMjYwMzI3MTMwMTA3WjAzMTEwLwYDVQQD
Eyg4NWEwOWE1YWQ2NTAxOTA2M2EzYTVhYmYyMzY1ODM2YTM5NWI3MGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5O8fTyMHrIzfWvN/K3aURFjzhdu
AX9XWtAaRT32bmNN0VNtuKj7ojc7/edJRB5KboiHsBs9LwW013W9X/CKpCTeso/0
0MpCbQDcHZEdMmS6VEv8CDur+Ho28AyrFV3kARMGiLE8VItFoPctQkIxeFCT3s7L
AXCUXFGVe24PukJP16v4U/ruQ84DS1XwwnERVNp6A4ncLtKqRQQo2HVqY0cSzRvp
zikmv8UFytdq8ngMPUmrPVR7290gWS0XujPELMB+/zNCzcx7FaMdwi+e6CzD+IsA
jgkLce2GPOApBC3usv2yXuoyz1SdXB94BZ0y0RIhsITIATANqrzLSX2TYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWgmlrWUBkGOjpavyNlg2o5W3DPMB8GA1UdIwQY
MBaAFP3PcrtshodQhiid0lGPsD+IIu6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2M5eXUyeUdoMUNHS0ozU1VZLXdQNGdpN3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZThmMDYtMGFjMS00ZTFiLWIwN2Yt
N2UwMzNiOWRlMjNlLzEvX2M5eXUyeUdoMUNHS0ozU1VZLXdQNGdpN3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZThmMDYtMGFjMS00ZTFiLWIwN2YtN2UwMzNiOWRlMjNl
LzEvX2M5eXUyeUdoMUNHS0ozU1VZLXdQNGdpN3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqmpg56Ks
5bcKQ+mjLM6MD2LJpM7G7ClgU/bC/hG4HqhioZ6lV/+hk9Pce0LCTsLs1YQ2WV+z
/FgfKnBQkX6devh/onG7uu9dcJKqA/60027aQ9BoN25KzhHbDGFIATfCbOT7M6c3
LYbYnd65U+SZ65rWOHtt1FHeUeyguouTz1b0FA7aLAcT87t6z1hGcOWAGQI0mRXX
Qwh2d3BjE/OWkN8KBpOkLkyWI4V8ReNEkajb6pN9cObqJamjqQnjj85R0vh+Qasu
0FG4uk+23P1VLYBD/FU6zg+wfXGlw0+k765XtX64jP/thg4yM/TUHUzl2HtTcH8b
zzPuECbuRps+mA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:52 2026 by rpki-client