Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
File: 9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json)
Hash identifier: Hkoo6ixxR1MESpc+YTdbmTiEeNsebZCib6ABGgst/8E=
Subject key identifier: 4F:7D:A0:ED:15:00:11:64:4A:31:09:A6:8A:0C:55:B5:9A:72:8A:CD
Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
Certificate issuer: /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Certificate serial: 019D28843871394A364257D46EF4100D4228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:00:46 +0000
Manifest this update: Thu 26 Mar 2026 05:00:46 +0000
Manifest next update: Fri 27 Mar 2026 05:00:46 +0000
Files and hashes: 1: 4ghPvO8O8ubg-UpOgj-hc0SbXTA.roa (hash: JypQzsIdWOc7a9gykbPnzDsycctJC1lDHtCOuiPvEAA=)
2: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: 74sCkGinP8TGIPb21YEPAdTAIASe4GAsabc0YrQR6uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:38:71:39:4a:36:42:57:d4:6e:f4:10:0d:42:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Validity
Not Before: Mar 26 05:00:46 2026 GMT
Not After : Mar 27 05:00:46 2026 GMT
Subject: CN=4f7da0ed150011644a3109a68a0c55b59a728acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:b0:e3:b0:b1:20:96:a9:e7:32:33:d2:2a:
a8:7d:d7:e5:fb:aa:99:0f:b0:51:6f:09:96:05:32:
b1:d6:f6:cb:54:f1:b5:d6:85:2c:f0:39:8d:82:b8:
96:5b:44:c7:77:09:98:d6:ff:f7:c8:d0:b8:95:05:
d6:30:89:07:32:09:b5:c8:aa:3b:46:d2:16:e2:11:
46:e6:3b:2b:bf:21:57:28:d9:05:4b:96:5e:a9:25:
60:a3:35:ce:fa:04:2c:49:cb:a0:81:13:f5:8c:38:
ee:be:60:3f:d3:a9:e1:05:1c:fd:c1:e4:d2:13:91:
2b:77:fd:ee:3e:3d:41:62:7e:3b:39:ab:f2:25:3e:
bd:51:66:3f:60:7f:d1:51:a9:d2:bd:0d:ce:ac:1a:
71:35:71:e6:ea:cd:f0:46:18:d6:1f:3b:ba:53:60:
7a:2c:88:4b:71:d2:4c:b9:be:f4:10:50:4a:f7:30:
8e:b9:5f:50:26:38:c9:62:3d:b5:0b:78:55:09:14:
82:34:25:4c:4e:e8:ed:f7:53:37:dc:4d:28:15:b1:
42:a2:82:c5:a8:50:11:cf:d7:a8:ac:ea:00:3c:a5:
9b:43:11:d7:53:7d:63:44:36:e2:5a:7c:a1:2a:6d:
11:16:77:87:9e:65:3d:cb:e7:9c:c1:12:ad:f2:b7:
e9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7D:A0:ED:15:00:11:64:4A:31:09:A6:8A:0C:55:B5:9A:72:8A:CD
X509v3 Authority Key Identifier:
keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f9:49:f1:47:e6:77:a8:1a:97:fa:1b:bb:f7:8c:65:7e:a4:
33:6c:fe:26:3b:e3:72:7a:96:01:06:ac:5f:3f:b4:ce:32:b3:
c1:c1:00:7a:4d:92:fe:aa:d8:75:a5:64:03:7c:54:5a:ca:a9:
73:60:b8:f2:9d:c8:d9:c7:5e:6a:fd:55:e5:39:81:02:38:04:
f9:fb:cd:47:5c:f1:8b:23:93:ee:e1:cb:3f:23:b2:09:9f:0b:
7f:0e:81:4b:c4:dd:9b:1c:88:f7:ec:a8:2f:e3:8e:8e:31:2f:
9c:94:12:73:dd:db:ed:7a:ee:a1:ee:23:d1:68:13:7b:75:d9:
7d:17:d7:f6:09:0f:8f:91:6b:c9:61:82:76:18:2e:75:82:4d:
d2:6e:a8:68:e8:e8:8f:82:21:57:9d:31:80:fc:b4:00:00:92:
2f:2d:2b:6e:8c:f0:5a:e9:fa:41:86:8b:01:9e:0a:e1:c8:e6:
97:b6:61:c5:53:d6:4d:21:a6:b0:d3:f1:c3:21:4f:19:92:e2:
2b:62:86:54:40:14:f8:6d:33:3e:06:fa:60:1a:1f:8c:57:bc:
9e:d9:61:47:05:43:aa:9a:c3:1e:ab:bd:d2:74:8d:66:77:12:
41:36:a3:da:13:97:e4:8b:00:ee:a2:31:74:9e:1c:ed:bb:f6:
b5:9c:60:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohDhxOUo2QlfUbvQQDUIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2RjNTk5NmM4MTc4YzBkZTJlYTIwNDk5ZWViZGVhZGU0
MDIzZWIwHhcNMjYwMzI2MDUwMDQ2WhcNMjYwMzI3MDUwMDQ2WjAzMTEwLwYDVQQD
Eyg0ZjdkYTBlZDE1MDAxMTY0NGEzMTA5YTY4YTBjNTViNTlhNzI4YWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYqw47CxIJap5zIz0iqofdfl+6qZ
D7BRbwmWBTKx1vbLVPG11oUs8DmNgriWW0THdwmY1v/3yNC4lQXWMIkHMgm1yKo7
RtIW4hFG5jsrvyFXKNkFS5ZeqSVgozXO+gQsScuggRP1jDjuvmA/06nhBRz9weTS
E5Erd/3uPj1BYn47OavyJT69UWY/YH/RUanSvQ3OrBpxNXHm6s3wRhjWHzu6U2B6
LIhLcdJMub70EFBK9zCOuV9QJjjJYj21C3hVCRSCNCVMTujt91M33E0oFbFCooLF
qFARz9eorOoAPKWbQxHXU31jRDbiWnyhKm0RFneHnmU9y+ecwRKt8rfpRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE99oO0VABFkSjEJpooMVbWacorNMB8GA1UdIwQY
MBaAFPV9xZlsgXjA3i6iBJnuvereQCPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82N2UzYWMtYzMzMi00ZDEzLTgzZWYt
YzdiMTBkNTA1Y2ZlLzEvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82N2UzYWMtYzMzMi00ZDEzLTgzZWYtYzdiMTBkNTA1Y2Zl
LzEvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHflJ8Ufm
d6gal/obu/eMZX6kM2z+JjvjcnqWAQasXz+0zjKzwcEAek2S/qrYdaVkA3xUWsqp
c2C48p3I2cdeav1V5TmBAjgE+fvNR1zxiyOT7uHLPyOyCZ8Lfw6BS8TdmxyI9+yo
L+OOjjEvnJQSc93b7Xruoe4j0WgTe3XZfRfX9gkPj5FryWGCdhgudYJN0m6oaOjo
j4IhV50xgPy0AACSLy0rbozwWun6QYaLAZ4K4cjml7ZhxVPWTSGmsNPxwyFPGZLi
K2KGVEAU+G0zPgb6YBofjFe8ntlhRwVDqprDHqu90nSNZncSQTaj2hOX5IsA7qIx
dJ4c7bv2tZxgTQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:31 2026 by rpki-client