Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
File: 9BGAp8UWZ-w4dedl8kX5CThhJXE.mft (raw, json)
Hash identifier: Hd0kTXO8hEewJMU+Xj7M6tB+nKNWTkWCt+4/5TQSDAM=
Subject key identifier: 66:B1:80:44:00:3F:80:E8:98:44:7D:2F:34:10:67:39:60:70:43:49
Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Certificate issuer: /CN=f41180a7c51667ec3875e765f245f90938612571
Certificate serial: 019D28BB75F65629EF8BEF88BB8276FB8FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
Manifest number: 0957
Signing time: Thu 26 Mar 2026 06:01:07 +0000
Manifest this update: Thu 26 Mar 2026 06:01:07 +0000
Manifest next update: Fri 27 Mar 2026 06:01:07 +0000
Files and hashes: 1: 9BGAp8UWZ-w4dedl8kX5CThhJXE.crl (hash: jfppdmJSTxJiVdoixXXIh86gObi4MiuAqD+0BvNW4DE=)
2: XFAB8dGfZx_QXDK6Kld_xwViMJw.roa (hash: H6Sf/b3mZ3PIXiHfD9wOVIrsUeA+yHGGwcGYDodBCc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:75:f6:56:29:ef:8b:ef:88:bb:82:76:fb:8f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41180a7c51667ec3875e765f245f90938612571
Validity
Not Before: Mar 26 06:01:07 2026 GMT
Not After : Mar 27 06:01:07 2026 GMT
Subject: CN=66b18044003f80e898447d2f3410673960704349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:4a:af:dc:a4:e5:b4:96:86:92:fc:cd:22:
6c:79:a0:a1:42:c4:3c:56:0e:07:19:de:a6:55:9f:
50:c0:16:21:74:cd:bf:4b:2c:07:35:a7:c2:06:27:
2f:bd:b1:d0:35:43:7e:17:3a:14:64:c2:a2:17:65:
62:b4:57:40:e6:9a:0c:db:31:10:da:51:f1:60:f7:
c7:a1:49:fc:18:b4:21:5f:43:5b:e3:9a:e8:6c:f5:
b1:b5:69:45:f8:16:b2:ae:ae:1a:07:9f:24:87:ee:
15:aa:f5:be:a7:a0:f5:bd:f5:0a:7f:72:0c:73:16:
39:0e:55:a0:9c:3c:0e:e0:ae:31:e5:2c:a3:d1:66:
a1:40:23:ec:10:c2:23:58:71:8b:fc:72:1f:98:d3:
4f:35:1a:4f:71:8d:38:c5:ea:df:c0:59:37:1e:34:
9b:29:aa:24:07:3a:38:df:b4:f0:ff:04:92:81:21:
3d:b9:3a:42:16:e3:80:27:8f:46:de:54:d2:68:51:
30:32:fa:49:9f:79:0f:b9:ec:36:93:69:10:e7:86:
87:11:47:bf:c5:34:72:62:ea:81:29:96:a3:e2:e5:
75:c0:31:cf:1f:14:fd:88:54:45:a5:00:86:bf:3b:
d6:72:18:53:48:bd:22:d3:00:55:a0:f1:dd:1e:a4:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B1:80:44:00:3F:80:E8:98:44:7D:2F:34:10:67:39:60:70:43:49
X509v3 Authority Key Identifier:
keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a9:81:06:e9:3d:a4:c2:7f:29:de:fe:03:09:38:84:95:93:
4e:c3:07:30:19:6b:bf:7a:75:41:8c:10:b0:ed:c3:97:c5:5f:
6f:93:fe:cc:a2:9a:b0:79:cb:38:63:b3:a8:4d:30:56:99:af:
9e:8d:b2:f0:f2:02:a9:73:2b:1d:5c:38:c4:b0:53:e6:35:36:
40:f3:66:40:87:8e:3c:09:dd:79:b0:51:6f:16:13:47:97:f7:
62:a8:8f:04:21:a0:dd:b3:47:a7:f4:a0:56:93:9c:f0:0f:7c:
ca:92:45:01:f6:9c:d4:ff:01:06:82:d1:f3:d8:e4:9c:87:64:
8a:1b:4a:0f:c4:46:99:4c:59:2f:13:fa:da:98:ec:69:89:9f:
41:58:fa:d9:01:da:6a:72:1c:b5:ff:91:8d:24:c4:f5:f1:5d:
e1:b2:37:33:47:5a:47:90:6b:21:ed:b0:fe:f9:8a:34:f7:27:
da:da:21:ef:4e:b4:41:79:11:d7:b6:70:40:50:e8:af:ff:83:
2a:a8:d5:49:cd:4c:6d:84:88:51:68:b7:f1:be:f2:16:c8:8c:
b2:92:e4:7a:3e:0a:d0:c6:8c:3c:8f:e9:4e:8b:04:cc:83:a0:
c5:cf:0f:3f:a4:c9:e4:c3:5e:ca:9a:50:2f:86:c8:09:f3:ba:
20:21:ad:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou3X2Vinvi++Iu4J2+4/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MTE4MGE3YzUxNjY3ZWMzODc1ZTc2NWYyNDVmOTA5Mzg2
MTI1NzEwHhcNMjYwMzI2MDYwMTA3WhcNMjYwMzI3MDYwMTA3WjAzMTEwLwYDVQQD
Eyg2NmIxODA0NDAwM2Y4MGU4OTg0NDdkMmYzNDEwNjczOTYwNzA0MzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCNKr9yk5bSWhpL8zSJseaChQsQ8
Vg4HGd6mVZ9QwBYhdM2/SywHNafCBicvvbHQNUN+FzoUZMKiF2VitFdA5poM2zEQ
2lHxYPfHoUn8GLQhX0Nb45robPWxtWlF+Bayrq4aB58kh+4VqvW+p6D1vfUKf3IM
cxY5DlWgnDwO4K4x5Syj0WahQCPsEMIjWHGL/HIfmNNPNRpPcY04xerfwFk3HjSb
KaokBzo437Tw/wSSgSE9uTpCFuOAJ49G3lTSaFEwMvpJn3kPuew2k2kQ54aHEUe/
xTRyYuqBKZaj4uV1wDHPHxT9iFRFpQCGvzvWchhTSL0i0wBVoPHdHqSLBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaxgEQAP4DomER9LzQQZzlgcENJMB8GA1UdIwQY
MBaAFPQRgKfFFmfsOHXnZfJF+Qk4YSVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJHQXA4VVdaLXc0ZGVkbDhrWDVDVGhoSlhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZDZmZGQtNmQ0MS00MTI1LThiYjUt
OGYzMmQwMzE5NGIwLzEvOUJHQXA4VVdaLXc0ZGVkbDhrWDVDVGhoSlhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81ZDZmZGQtNmQ0MS00MTI1LThiYjUtOGYzMmQwMzE5NGIw
LzEvOUJHQXA4VVdaLXc0ZGVkbDhrWDVDVGhoSlhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqmBBuk9
pMJ/Kd7+Awk4hJWTTsMHMBlrv3p1QYwQsO3Dl8Vfb5P+zKKasHnLOGOzqE0wVpmv
no2y8PICqXMrHVw4xLBT5jU2QPNmQIeOPAndebBRbxYTR5f3YqiPBCGg3bNHp/Sg
VpOc8A98ypJFAfac1P8BBoLR89jknIdkihtKD8RGmUxZLxP62pjsaYmfQVj62QHa
anIctf+RjSTE9fFd4bI3M0daR5BrIe2w/vmKNPcn2toh7060QXkR17ZwQFDor/+D
KqjVSc1MbYSIUWi38b7yFsiMspLkej4K0MaMPI/pTosEzIOgxc8PP6TJ5MNeyppQ
L4bICfO6ICGtKg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:19:55 2026 by rpki-client