Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
File: 9px-uGIkrbOECIR97kz8TEADrV0.mft (raw, json)
Hash identifier: uvidbo9PHaMYPQJSEaa6T1x42x7Mtrnj0fbU9oSTo5I=
Subject key identifier: 60:23:18:5B:84:0F:9E:77:5C:5B:34:60:17:24:D6:65:CC:99:67:72
Authority key identifier: F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
Certificate issuer: /CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Certificate serial: 019D2960A7FC939D4D7775A71BDD5FBDAE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
Manifest number: 10E6
Signing time: Thu 26 Mar 2026 09:01:33 +0000
Manifest this update: Thu 26 Mar 2026 09:01:33 +0000
Manifest next update: Fri 27 Mar 2026 09:01:33 +0000
Files and hashes: 1: 9px-uGIkrbOECIR97kz8TEADrV0.crl (hash: oC4rNGndgSj8Fd00GDpSymT5jAj1eTu2B/MD14FIYPc=)
2: Ue9DIINKYrGn1tdejFEb6gztPV4.roa (hash: c1z5wiNQ531GjFPY2V7nJM/EQVknOfa3Q0UMyTLhXdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:a7:fc:93:9d:4d:77:75:a7:1b:dd:5f:bd:ae:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Validity
Not Before: Mar 26 09:01:33 2026 GMT
Not After : Mar 27 09:01:33 2026 GMT
Subject: CN=6023185b840f9e775c5b34601724d665cc996772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:46:cf:35:8f:dc:9e:fb:5d:80:47:38:95:
7c:ba:03:9d:02:0f:e0:60:af:d2:6b:d2:88:c1:f3:
50:8e:07:8b:92:57:cc:3f:ba:43:99:90:4b:54:dc:
35:24:9e:f3:82:2d:d7:dd:08:d9:c3:cd:25:8a:cc:
e8:f0:71:c9:45:58:09:6d:f0:e5:6f:39:a6:88:c7:
30:c2:52:eb:90:ad:05:9e:67:97:11:33:5b:54:f1:
fe:2b:6f:94:5e:c1:a0:47:c7:64:40:e7:0b:e2:f8:
17:76:03:73:9e:e3:5f:f1:06:1e:ec:a8:db:e6:c9:
cc:f9:ba:14:f5:22:3f:83:08:6e:a4:2c:b5:1f:f4:
98:64:85:55:97:78:c6:86:6c:92:5f:81:41:55:c8:
e7:22:a2:07:34:80:db:da:90:15:90:5d:8d:24:28:
d5:5a:1f:c8:d2:12:2c:ef:95:f7:85:d2:cc:39:71:
9f:d5:30:53:93:bf:b6:d7:96:8b:f4:03:2c:ab:79:
ac:89:64:74:ff:4b:1a:64:71:86:b4:ad:80:b7:25:
bb:b4:4c:5c:6e:51:9e:33:13:cf:a9:41:83:22:d9:
16:40:06:01:2c:ef:bc:9c:89:3b:a1:d3:a3:15:60:
86:dc:ba:39:5d:bd:d2:ec:63:08:49:26:95:3b:d9:
be:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:23:18:5B:84:0F:9E:77:5C:5B:34:60:17:24:D6:65:CC:99:67:72
X509v3 Authority Key Identifier:
keyid:F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:64:b9:e9:0d:b7:1e:1d:fc:aa:f7:f5:1f:7e:37:36:fe:88:
de:9f:d2:89:23:1a:a7:42:e9:ea:83:bc:c1:9c:b8:5d:e7:10:
6a:94:25:58:02:ba:2e:98:a9:c0:d2:08:7e:12:35:b0:7d:21:
79:9c:49:33:d5:83:1c:21:19:8a:d9:ce:2e:a0:12:99:5d:15:
4d:5f:d8:f7:4b:31:00:6a:68:83:c5:8b:67:82:9e:28:20:e9:
9b:bf:50:bd:4b:88:fc:3c:80:f1:97:2a:b5:cd:a9:bf:af:94:
04:40:6c:80:23:25:44:6d:92:42:a7:a7:ec:e9:90:e7:a8:f7:
7f:a3:03:92:e3:1c:af:83:74:ee:91:e4:26:15:c5:be:74:54:
34:8f:ab:22:a5:65:8c:3b:b4:ed:69:ef:da:a5:a7:fd:06:54:
03:73:b9:d3:79:94:35:0a:f4:d2:98:dd:5e:68:e2:7b:0d:fc:
29:4d:a6:45:c8:5f:f3:6e:f5:ac:ed:62:2f:a8:c5:21:a7:63:
41:34:a9:db:cf:e2:ff:73:87:2d:56:e0:05:4f:8c:7e:d2:4f:
42:64:1a:f2:ed:ef:11:aa:d2:e9:44:3d:18:e1:18:b9:ae:5a:
d4:a3:d7:12:e7:6d:ae:bd:98:cf:36:32:1b:f8:de:26:47:62:
9f:65:e9:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYKf8k51Nd3WnG91fva40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWM3ZWI4NjIyNGFkYjM4NDA4ODQ3ZGVlNGNmYzRjNDAw
M2FkNWQwHhcNMjYwMzI2MDkwMTMzWhcNMjYwMzI3MDkwMTMzWjAzMTEwLwYDVQQD
Eyg2MDIzMTg1Yjg0MGY5ZTc3NWM1YjM0NjAxNzI0ZDY2NWNjOTk2NzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu31GzzWP3J77XYBHOJV8ugOdAg/g
YK/Sa9KIwfNQjgeLklfMP7pDmZBLVNw1JJ7zgi3X3QjZw80liszo8HHJRVgJbfDl
bzmmiMcwwlLrkK0FnmeXETNbVPH+K2+UXsGgR8dkQOcL4vgXdgNznuNf8QYe7Kjb
5snM+boU9SI/gwhupCy1H/SYZIVVl3jGhmySX4FBVcjnIqIHNIDb2pAVkF2NJCjV
Wh/I0hIs75X3hdLMOXGf1TBTk7+215aL9AMsq3msiWR0/0saZHGGtK2AtyW7tExc
blGeMxPPqUGDItkWQAYBLO+8nIk7odOjFWCG3Lo5Xb3S7GMISSaVO9m+fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAjGFuED553XFs0YBck1mXMmWdyMB8GA1UdIwQY
MBaAFPacfrhiJK2zhAiEfe5M/ExAA61dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXB4LXVHSWtyYk9FQ0lSOTdrejhURUFEclYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84MzRlODItZjg2My00Y2E4LTgwNjEt
ZjYxNmQ5MzE4MDg3LzEvOXB4LXVHSWtyYk9FQ0lSOTdrejhURUFEclYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84MzRlODItZjg2My00Y2E4LTgwNjEtZjYxNmQ5MzE4MDg3
LzEvOXB4LXVHSWtyYk9FQ0lSOTdrejhURUFEclYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWS56Q23
Hh38qvf1H343Nv6I3p/SiSMap0Lp6oO8wZy4XecQapQlWAK6LpipwNIIfhI1sH0h
eZxJM9WDHCEZitnOLqASmV0VTV/Y90sxAGpog8WLZ4KeKCDpm79QvUuI/DyA8Zcq
tc2pv6+UBEBsgCMlRG2SQqen7OmQ56j3f6MDkuMcr4N07pHkJhXFvnRUNI+rIqVl
jDu07Wnv2qWn/QZUA3O503mUNQr00pjdXmjiew38KU2mRchf8271rO1iL6jFIadj
QTSp28/i/3OHLVbgBU+MftJPQmQa8u3vEarS6UQ9GOEYua5a1KPXEudtrr2YzzYy
G/jeJkdin2XpAg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:50:47 2026 by rpki-client