Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
File: 9rLInTH2F1Fqhgp4IrumgkinaaA.mft (raw, json)
Hash identifier: 5KhOFHTAe0m+o1JCHJG5yzhi3etI/IhFxnNGb9wcrIM=
Subject key identifier: 39:DA:CF:45:FC:56:49:AB:51:15:5F:D2:47:A6:D8:B9:9C:E1:A8:63
Authority key identifier: F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
Certificate issuer: /CN=f6b2c89d31f617516a860a7822bba68248a769a0
Certificate serial: 019D28BB4D68593A335B4624BCCFBC6C73D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
Manifest number: 0A75
Signing time: Thu 26 Mar 2026 06:00:56 +0000
Manifest this update: Thu 26 Mar 2026 06:00:56 +0000
Manifest next update: Fri 27 Mar 2026 06:00:56 +0000
Files and hashes: 1: 5VaEr_9CgIk0hDvBuz897kphjAA.roa (hash: O8HVzXpA3yJisGesiXqBb6I5Gg2zmpPDn2gcT3B2Ub8=)
2: 9rLInTH2F1Fqhgp4IrumgkinaaA.crl (hash: OQm7kPpokCXw90TDncX1kxJuxV2F/ZjaoU+N2gd6sno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:4d:68:59:3a:33:5b:46:24:bc:cf:bc:6c:73:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b2c89d31f617516a860a7822bba68248a769a0
Validity
Not Before: Mar 26 06:00:56 2026 GMT
Not After : Mar 27 06:00:56 2026 GMT
Subject: CN=39dacf45fc5649ab51155fd247a6d8b99ce1a863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:97:f2:e9:cc:66:fe:57:c4:3f:31:ef:dc:47:
e7:c4:ac:59:79:04:e0:5b:1a:b2:32:98:a4:23:54:
5e:ca:05:b0:57:36:fd:58:5d:e6:22:98:79:d3:a0:
b6:c4:be:45:f8:7c:b5:de:e7:13:98:80:b0:94:29:
19:3f:9a:4a:f4:b9:e2:59:11:d0:ef:be:fa:85:7b:
4a:21:50:27:36:9a:e8:8b:d3:f1:26:a4:3c:05:05:
6f:0a:0b:75:74:cf:15:2c:29:45:9d:8d:c6:bb:fc:
cb:ec:ed:4e:5f:e6:2a:af:94:6d:b1:4e:26:60:f1:
3a:46:ed:8e:88:08:c7:9c:a8:f6:8a:33:02:69:4c:
59:04:f2:49:90:8a:56:a9:ac:ac:b4:d4:3c:ab:f2:
57:c6:bb:61:8b:52:45:78:c9:0a:45:c6:45:7b:e8:
ce:72:a0:b8:f3:72:73:89:fa:a9:c7:45:dc:21:00:
50:00:9a:20:80:5e:16:45:c3:c0:e1:2d:8c:b4:b2:
d9:4c:8c:dd:7b:3c:a4:bd:69:ad:e8:3e:4d:cf:ac:
b6:30:ed:69:ac:3c:b6:60:2c:63:a0:a7:6d:0a:f7:
88:c8:5c:60:2a:c1:f6:d8:02:4c:7e:9a:f6:94:f6:
34:bc:1d:db:3b:79:d3:f7:d5:71:b3:c9:cf:15:ca:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DA:CF:45:FC:56:49:AB:51:15:5F:D2:47:A6:D8:B9:9C:E1:A8:63
X509v3 Authority Key Identifier:
keyid:F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f5:c7:c7:50:38:dd:5a:f5:2c:eb:bf:39:fb:4c:e8:82:41:
62:b9:7f:a5:e1:06:4a:2f:8b:b3:f5:4c:96:7b:56:3d:34:21:
e7:56:40:4d:1b:56:f7:f0:a5:65:51:7a:21:45:e4:d5:e7:30:
ca:55:51:b0:1d:5d:60:36:ff:dc:c0:ca:43:c4:44:d9:de:4c:
40:cc:ed:ab:06:fa:3a:c4:2d:0e:68:d0:b2:ea:aa:56:fa:01:
21:8b:23:9e:15:de:5f:bb:66:c4:9f:65:d4:af:c8:76:53:40:
d4:d8:a7:94:b2:ff:3f:13:45:89:f5:cd:be:9d:20:d0:2b:49:
3f:30:79:36:85:84:3f:47:df:09:05:a7:bd:c7:5a:37:8a:40:
3a:35:7b:fb:42:53:de:2d:7c:18:66:ea:b4:ff:7c:0a:35:fd:
22:e4:e0:7e:40:4c:09:e7:ed:c4:9e:19:9b:2a:4e:c8:c8:bb:
6f:54:b5:c4:d0:93:51:f7:f5:ef:72:82:43:ee:75:13:e5:c6:
9a:2c:70:36:dd:c6:1b:c8:de:ea:cb:f1:0e:1b:ca:02:00:7b:
b6:60:8a:d1:5e:37:5b:61:dd:5b:cb:c2:78:5d:e5:e7:55:4f:
23:e5:1c:61:f2:ef:65:56:a7:0f:2a:00:c5:3d:ad:c7:93:dc:
ec:d7:42:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou01oWTozW0YkvM+8bHPTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YjJjODlkMzFmNjE3NTE2YTg2MGE3ODIyYmJhNjgyNDhh
NzY5YTAwHhcNMjYwMzI2MDYwMDU2WhcNMjYwMzI3MDYwMDU2WjAzMTEwLwYDVQQD
EygzOWRhY2Y0NWZjNTY0OWFiNTExNTVmZDI0N2E2ZDhiOTljZTFhODYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJfy6cxm/lfEPzHv3EfnxKxZeQTg
WxqyMpikI1ReygWwVzb9WF3mIph506C2xL5F+Hy13ucTmICwlCkZP5pK9LniWRHQ
7776hXtKIVAnNproi9PxJqQ8BQVvCgt1dM8VLClFnY3Gu/zL7O1OX+Yqr5RtsU4m
YPE6Ru2OiAjHnKj2ijMCaUxZBPJJkIpWqaystNQ8q/JXxrthi1JFeMkKRcZFe+jO
cqC483Jzifqpx0XcIQBQAJoggF4WRcPA4S2MtLLZTIzdezykvWmt6D5Nz6y2MO1p
rDy2YCxjoKdtCveIyFxgKsH22AJMfpr2lPY0vB3bO3nT99Vxs8nPFcrTfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnaz0X8VkmrURVf0kem2Lmc4ahjMB8GA1UdIwQY
MBaAFPayyJ0x9hdRaoYKeCK7poJIp2mgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJMSW5USDJGMUZxaGdwNElydW1na2luYWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MTdiZDYtOGJkMy00YzI4LTgyNWYt
MTQ3NWQyMmRjMTYyLzEvOXJMSW5USDJGMUZxaGdwNElydW1na2luYWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85MTdiZDYtOGJkMy00YzI4LTgyNWYtMTQ3NWQyMmRjMTYy
LzEvOXJMSW5USDJGMUZxaGdwNElydW1na2luYWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPXHx1A4
3Vr1LOu/OftM6IJBYrl/peEGSi+Ls/VMlntWPTQh51ZATRtW9/ClZVF6IUXk1ecw
ylVRsB1dYDb/3MDKQ8RE2d5MQMztqwb6OsQtDmjQsuqqVvoBIYsjnhXeX7tmxJ9l
1K/IdlNA1NinlLL/PxNFifXNvp0g0CtJPzB5NoWEP0ffCQWnvcdaN4pAOjV7+0JT
3i18GGbqtP98CjX9IuTgfkBMCeftxJ4ZmypOyMi7b1S1xNCTUff173KCQ+51E+XG
mixwNt3GG8je6svxDhvKAgB7tmCK0V43W2HdW8vCeF3l51VPI+UcYfLvZVanDyoA
xT2tx5Pc7NdCoA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:11 2026 by rpki-client