Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
File: 9zHDObGGFyK__oZyGDFM4SlcPIU.mft (raw, json)
Hash identifier: Up/CTYHLUIi+aZHNOTcmNqHaq0byGuqZFoEivERHe3k=
Subject key identifier: E8:C7:9F:1C:8B:FE:89:87:EA:5A:3D:87:D5:A5:39:91:34:FE:FA:31
Authority key identifier: F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
Certificate issuer: /CN=f731c339b1861722bffe867218314ce1295c3c85
Certificate serial: 019D27043ECB62E442EEDDF6FB9BB2BEFCB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:01:22 +0000
Manifest this update: Wed 25 Mar 2026 22:01:22 +0000
Manifest next update: Thu 26 Mar 2026 22:01:22 +0000
Files and hashes: 1: 9zHDObGGFyK__oZyGDFM4SlcPIU.crl (hash: Uj3Ia8jI/Cpnw56G2jdACPSlBJN+nRptHtfhOSSz2fw=)
2: DM0EXQBkZr0e7E2rftq5-TtNVUc.roa (hash: 4qPVGZtejJWXy8T9lJtHmIGF6CkNf88ym74PPqmxTh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:3e:cb:62:e4:42:ee:dd:f6:fb:9b:b2:be:fc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f731c339b1861722bffe867218314ce1295c3c85
Validity
Not Before: Mar 25 22:01:22 2026 GMT
Not After : Mar 26 22:01:22 2026 GMT
Subject: CN=e8c79f1c8bfe8987ea5a3d87d5a5399134fefa31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4a:e2:cf:46:19:97:a7:a1:50:d3:df:10:b7:
ce:1f:4e:9e:ad:4d:d3:9c:d0:ae:b6:82:14:50:00:
44:c3:c5:db:dd:31:de:41:73:15:85:ff:f3:f5:86:
60:26:97:e5:ef:a6:f7:4e:97:b0:5c:08:6a:41:55:
a3:88:93:dc:48:9c:37:3b:bd:b4:d3:25:a8:69:cc:
20:9b:d0:ba:9c:c3:49:9a:62:ef:e6:ef:ce:bf:3d:
40:e9:9a:15:c9:05:ab:8f:d8:e9:76:d2:d9:57:2f:
ae:b1:b6:67:a4:ba:65:e9:11:e9:ec:48:93:a5:f6:
42:35:1e:51:75:29:02:60:a8:8d:c6:f0:4b:79:36:
5b:43:7e:89:f7:84:f7:fa:f9:d6:c6:9b:43:a7:0d:
e5:e5:82:68:3f:29:5b:e5:70:27:7e:f7:a3:d1:3a:
51:17:cf:1a:9d:4a:20:59:ff:ee:73:7b:b0:ed:66:
1a:8e:72:36:d3:29:97:72:f6:08:b4:5e:62:23:54:
a8:8a:5b:e2:02:00:7f:8d:6c:4b:bd:e4:27:dd:8f:
3c:07:4b:8e:c3:cf:01:48:1f:df:27:52:dd:2f:ea:
e8:df:af:6a:49:52:25:e3:10:87:fa:f9:f5:d8:4b:
34:ac:91:0c:cf:2c:ca:96:3b:e5:9f:5e:7e:03:e2:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C7:9F:1C:8B:FE:89:87:EA:5A:3D:87:D5:A5:39:91:34:FE:FA:31
X509v3 Authority Key Identifier:
keyid:F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:00:e7:d0:e9:b5:97:83:f6:75:47:06:5b:cf:55:cb:d6:9b:
17:85:4e:de:c3:17:73:2c:e8:40:f4:fe:72:c9:20:4f:ef:2d:
04:e6:9a:38:5a:54:da:41:6c:b3:1e:68:ca:f1:3a:59:a5:d0:
45:af:e2:72:4a:47:68:49:93:13:a8:57:63:d2:41:3b:c1:87:
de:23:48:67:6d:ce:e1:92:f1:b6:20:fd:51:26:9d:50:35:58:
13:a9:dc:d2:f4:45:9e:99:8e:f6:b2:86:ec:cc:17:3c:fd:93:
4d:77:c7:4d:7f:0c:62:4b:ae:aa:9d:e6:d6:32:97:ba:85:5d:
9d:e6:02:1c:a6:1e:10:71:be:cc:78:43:17:9f:20:fb:2f:43:
f3:c9:1f:db:79:e2:81:62:4e:fd:3e:ee:4b:35:1b:1f:44:74:
d7:b0:79:8d:cd:e2:dc:8f:02:d4:bc:71:d7:5b:c6:29:77:c6:
bb:a8:2e:39:c0:52:4d:da:8a:88:7b:f4:1e:6a:2c:57:96:93:
03:a2:57:07:11:14:23:30:d4:bc:1a:57:2e:a2:22:90:61:5a:
c9:4b:30:7f:80:d4:b2:7d:6d:54:73:4f:11:9b:3b:3a:65:9f:
ad:cf:e3:4c:f6:c0:6b:61:37:ee:66:d4:ec:55:fe:7c:d8:bb:
d4:e3:ca:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBD7LYuRC7t32+5uyvvy0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MzFjMzM5YjE4NjE3MjJiZmZlODY3MjE4MzE0Y2UxMjk1
YzNjODUwHhcNMjYwMzI1MjIwMTIyWhcNMjYwMzI2MjIwMTIyWjAzMTEwLwYDVQQD
EyhlOGM3OWYxYzhiZmU4OTg3ZWE1YTNkODdkNWE1Mzk5MTM0ZmVmYTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kriz0YZl6ehUNPfELfOH06erU3T
nNCutoIUUABEw8Xb3THeQXMVhf/z9YZgJpfl76b3TpewXAhqQVWjiJPcSJw3O720
0yWoacwgm9C6nMNJmmLv5u/Ovz1A6ZoVyQWrj9jpdtLZVy+usbZnpLpl6RHp7EiT
pfZCNR5RdSkCYKiNxvBLeTZbQ36J94T3+vnWxptDpw3l5YJoPylb5XAnfvej0TpR
F88anUogWf/uc3uw7WYajnI20ymXcvYItF5iI1SoilviAgB/jWxLveQn3Y88B0uO
w88BSB/fJ1LdL+ro369qSVIl4xCH+vn12Es0rJEMzyzKljvln15+A+KLqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjHnxyL/omH6lo9h9WlOZE0/voxMB8GA1UdIwQY
MBaAFPcxwzmxhhciv/6GchgxTOEpXDyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xNmM2NGItYjk2NS00OWNjLWFhNDAt
MGRjMjBhN2Q4MmI5LzEvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8xNmM2NGItYjk2NS00OWNjLWFhNDAtMGRjMjBhN2Q4MmI5
LzEvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegDn0Om1
l4P2dUcGW89Vy9abF4VO3sMXcyzoQPT+cskgT+8tBOaaOFpU2kFssx5oyvE6WaXQ
Ra/ickpHaEmTE6hXY9JBO8GH3iNIZ23O4ZLxtiD9USadUDVYE6nc0vRFnpmO9rKG
7MwXPP2TTXfHTX8MYkuuqp3m1jKXuoVdneYCHKYeEHG+zHhDF58g+y9D88kf23ni
gWJO/T7uSzUbH0R017B5jc3i3I8C1Lxx11vGKXfGu6guOcBSTdqKiHv0HmosV5aT
A6JXBxEUIzDUvBpXLqIikGFayUswf4DUsn1tVHNPEZs7OmWfrc/jTPbAa2E37mbU
7FX+fNi71OPKFw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:58 2026 by rpki-client