
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
File: 9-CSr_r5tUhOAJmap_HO8ax7QJM.mft (raw, json)
Hash identifier: X3U3LHA5nFlbIVYXE9yz5J9ybBJfR/JoFEyeeadbrQw=
Subject key identifier: 38:5F:D1:EC:35:1C:D2:FF:1E:25:C3:FE:7C:A2:AB:6A:32:D3:24:45
Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
Certificate issuer: /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Certificate serial: 019D265F747060575917BE585D453A90880B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 19:01:23 +0000
Manifest this update: Wed 25 Mar 2026 19:01:23 +0000
Manifest next update: Thu 26 Mar 2026 19:01:23 +0000
Files and hashes: 1: 9-CSr_r5tUhOAJmap_HO8ax7QJM.crl (hash: F4HRmFxJXbWjrM5/C01ZA/U7eiDbbXfYu7nbspp0cV4=)
2: F_LtpihnOZSFHJv85nIVJ4V102M.roa (hash: 8yvnxuLRYXxGLDUJznrlW7WBOZGiJ5tUpgMx642UXWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:74:70:60:57:59:17:be:58:5d:45:3a:90:88:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Validity
Not Before: Mar 25 19:01:23 2026 GMT
Not After : Mar 26 19:01:23 2026 GMT
Subject: CN=385fd1ec351cd2ff1e25c3fe7ca2ab6a32d32445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:2b:44:be:06:29:13:23:cb:4b:ea:ed:e8:
c6:a9:22:4b:8a:a6:d1:03:e1:48:b0:c7:2f:c3:3a:
c7:c4:45:17:00:5c:ab:6c:d7:6f:ff:4a:9f:04:d4:
7e:91:35:5c:9d:6a:5c:3c:dc:22:95:eb:f5:a5:5b:
68:c3:b8:ed:b7:16:8b:7b:13:6c:3a:46:1e:41:43:
37:84:17:7e:0f:17:77:7e:9b:74:cd:75:b8:28:02:
2f:4b:52:70:96:e1:8d:47:dc:b4:08:dc:7f:33:73:
2a:50:bc:f1:36:0b:78:79:ff:6a:cb:a7:c4:60:51:
78:52:8f:f2:f0:fa:60:cb:0a:79:24:f0:5b:81:01:
81:0b:61:e5:fd:09:45:b1:fa:01:53:33:8e:a9:64:
75:1c:21:f3:a4:c4:54:eb:57:1f:da:d7:89:14:38:
1d:d8:8b:02:e3:99:15:48:98:f5:d3:ac:49:be:b4:
bd:08:4f:ce:9a:30:4b:cb:35:53:6b:b4:d5:88:7f:
2e:3d:9e:db:71:6f:b2:12:41:77:f9:03:10:1e:be:
f5:2c:ac:67:2d:5e:6c:f2:e0:3d:e0:97:19:03:25:
be:0a:6a:e9:b4:a3:9d:e8:bc:09:06:b4:53:7e:fd:
7c:7a:25:9c:54:ee:31:2d:ed:33:08:b0:2c:e3:6f:
2f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5F:D1:EC:35:1C:D2:FF:1E:25:C3:FE:7C:A2:AB:6A:32:D3:24:45
X509v3 Authority Key Identifier:
keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6d:3b:d5:84:d3:15:fd:d7:68:33:f6:99:eb:6a:78:d5:88:
7a:63:5d:16:36:a5:13:03:d4:ed:23:c2:36:b8:df:34:0a:49:
eb:e6:2a:52:c8:70:36:9b:48:e1:5e:eb:60:f1:65:5c:31:fd:
f7:9a:fd:3f:ef:2d:28:94:8a:ab:51:ea:4d:20:46:6e:30:38:
08:38:a6:d4:7e:bb:8d:77:6e:36:28:69:65:6e:2b:2e:3b:f6:
c7:49:d2:ce:9c:b2:e6:41:6b:5e:cb:70:73:d0:db:18:3a:8b:
3e:a2:49:05:88:e4:f8:e3:9f:f7:44:8a:0a:77:2e:72:b7:1b:
54:ed:a8:e8:11:a4:c5:b1:d6:e2:17:db:f2:d1:bc:24:c8:2f:
91:f1:83:21:c6:4a:c9:4e:66:2e:9c:80:34:83:da:6f:a3:77:
a5:8d:73:b7:02:75:f0:1a:04:1d:37:cc:f0:88:1f:6c:3a:86:
f0:f8:7d:da:4c:cb:dd:cf:a6:23:49:04:79:0f:93:e0:c8:c3:
3c:1f:ee:0f:11:c8:d7:cd:39:b6:c9:18:e7:ef:f0:90:05:ee:
f0:fe:8e:90:9f:5d:50:7e:d3:94:95:ca:89:ad:5c:c7:db:50:
e3:93:03:35:71:10:5b:ea:1a:72:33:9c:f1:f3:47:13:1d:fc:
a9:34:99:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX3RwYFdZF75YXUU6kIgLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZTA5MmFmZmFmOWI1NDg0ZTAwOTk5YWE3ZjFjZWYxYWM3
YjQwOTMwHhcNMjYwMzI1MTkwMTIzWhcNMjYwMzI2MTkwMTIzWjAzMTEwLwYDVQQD
EygzODVmZDFlYzM1MWNkMmZmMWUyNWMzZmU3Y2EyYWI2YTMyZDMyNDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSUrRL4GKRMjy0vq7ejGqSJLiqbR
A+FIsMcvwzrHxEUXAFyrbNdv/0qfBNR+kTVcnWpcPNwilev1pVtow7jttxaLexNs
OkYeQUM3hBd+Dxd3fpt0zXW4KAIvS1JwluGNR9y0CNx/M3MqULzxNgt4ef9qy6fE
YFF4Uo/y8Ppgywp5JPBbgQGBC2Hl/QlFsfoBUzOOqWR1HCHzpMRU61cf2teJFDgd
2IsC45kVSJj106xJvrS9CE/OmjBLyzVTa7TViH8uPZ7bcW+yEkF3+QMQHr71LKxn
LV5s8uA94JcZAyW+CmrptKOd6LwJBrRTfv18eiWcVO4xLe0zCLAs428vuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhf0ew1HNL/HiXD/nyiq2oy0yRFMB8GA1UdIwQY
MBaAFPfgkq/6+bVITgCZmqfxzvGse0CTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS1DU3JfcjV0VWhPQUptYXBfSE84YXg3UUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lYzkwOTItMWJjMi00YWFkLWFkM2Et
MTBmZjllZTJhOGMyLzEvOS1DU3JfcjV0VWhPQUptYXBfSE84YXg3UUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lYzkwOTItMWJjMi00YWFkLWFkM2EtMTBmZjllZTJhOGMy
LzEvOS1DU3JfcjV0VWhPQUptYXBfSE84YXg3UUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKW071YTT
Ff3XaDP2metqeNWIemNdFjalEwPU7SPCNrjfNApJ6+YqUshwNptI4V7rYPFlXDH9
95r9P+8tKJSKq1HqTSBGbjA4CDim1H67jXduNihpZW4rLjv2x0nSzpyy5kFrXstw
c9DbGDqLPqJJBYjk+OOf90SKCncucrcbVO2o6BGkxbHW4hfb8tG8JMgvkfGDIcZK
yU5mLpyANIPab6N3pY1ztwJ18BoEHTfM8IgfbDqG8Ph92kzL3c+mI0kEeQ+T4MjD
PB/uDxHI1805tskY5+/wkAXu8P6OkJ9dUH7TlJXKia1cx9tQ45MDNXEQW+oacjOc
8fNHEx38qTSZxg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:25:57 2026 by rpki-client