Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
File: 9E8rYv2EXJFI4OImQldIw8bpdTk.mft (raw, json)
Hash identifier: TbI0Dp7tFLSzTcpEfNJIc0Yn9eSMBNTOB7L3k91BPzw=
Subject key identifier: F6:1E:DE:BF:95:6E:57:CF:4C:1C:70:FA:7D:25:72:70:CF:45:4F:FA
Authority key identifier: F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
Certificate issuer: /CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Certificate serial: 019D262883BBE9CD5C62AAE6A945529BD1AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
Manifest number: 0807
Signing time: Wed 25 Mar 2026 18:01:22 +0000
Manifest this update: Wed 25 Mar 2026 18:01:22 +0000
Manifest next update: Thu 26 Mar 2026 18:01:22 +0000
Files and hashes: 1: 9E8rYv2EXJFI4OImQldIw8bpdTk.crl (hash: Nnn4JVft1/RXQld3R0PqzKeEP+ybBx7BF+ZErkbHcjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:83:bb:e9:cd:5c:62:aa:e6:a9:45:52:9b:d1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Validity
Not Before: Mar 25 18:01:22 2026 GMT
Not After : Mar 26 18:01:22 2026 GMT
Subject: CN=f61edebf956e57cf4c1c70fa7d257270cf454ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7b:e8:1e:05:c4:fe:9a:fb:02:a6:be:c4:fd:
dd:81:48:3b:3e:7d:46:13:d7:07:b7:8a:ee:f6:93:
a4:24:cc:0a:58:64:00:8d:6a:9a:c1:4b:80:4c:e3:
f2:bb:f8:aa:3a:9e:d9:27:4f:4b:db:fb:81:5a:c7:
24:c6:eb:b3:2b:7f:4e:2c:bb:67:12:0a:77:3b:1c:
1a:cd:8f:c2:a6:f8:57:df:b0:f3:7d:92:f6:6e:55:
c8:90:1e:47:24:8d:4c:d5:24:66:4e:14:b7:06:93:
b8:28:85:93:97:cb:94:93:9e:5c:8e:2a:58:22:fe:
55:cf:3e:5c:96:9b:72:83:d9:2f:30:8f:a6:02:10:
b4:59:41:13:6a:ed:2a:af:0c:b2:d3:26:7d:59:b1:
c4:c0:f0:f6:ce:a5:41:ff:9c:f1:b6:86:8c:31:db:
03:14:ab:f4:27:d3:93:48:24:77:00:87:3f:2f:b9:
f0:ec:9b:ee:90:a6:2d:32:da:16:26:9c:58:0d:e5:
e6:d7:2a:42:85:f0:a9:01:80:29:34:f9:9e:b5:39:
25:32:ed:3c:5d:a2:50:00:87:71:b7:20:57:52:e2:
6c:b0:d5:bb:6b:79:4b:46:91:e6:03:be:90:fa:a5:
e0:a8:a2:ec:e5:ef:da:1c:5a:f7:f3:e0:54:3d:f6:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1E:DE:BF:95:6E:57:CF:4C:1C:70:FA:7D:25:72:70:CF:45:4F:FA
X509v3 Authority Key Identifier:
keyid:F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:17:ed:4c:10:68:ea:40:83:03:21:2c:be:de:56:9d:6a:72:
0f:65:9e:ef:3b:0f:11:90:73:df:76:2c:2c:a5:af:92:ce:b1:
f6:57:63:f0:83:bd:ef:14:7a:14:d3:96:bb:bd:47:04:b3:48:
6b:68:b8:72:68:1b:4d:c2:36:02:ba:0f:bc:98:3e:c6:25:3e:
fb:4e:f9:12:f1:52:fa:43:11:3c:40:cb:96:5d:3b:c2:6f:a9:
77:c9:08:4c:37:01:b4:9d:7b:57:0a:53:38:f1:d0:77:24:dd:
f6:21:2a:e0:60:f1:69:cd:58:2b:eb:d4:9f:6d:8b:90:e9:64:
bc:62:ad:0a:bc:8f:dd:e9:c4:32:e7:f9:6c:46:5b:0e:c4:85:
71:49:02:d9:da:09:36:8d:95:4f:40:10:af:11:8d:fa:81:23:
bf:d8:67:8c:66:c7:8a:ea:54:c3:3c:a9:9e:d9:7b:0f:cc:80:
cf:81:7c:da:6c:ea:e6:c3:4a:0d:bc:62:3b:9f:c9:1c:6c:69:
8e:16:8a:01:55:1c:c1:5a:ea:a2:ff:0d:23:e0:59:89:11:59:
bd:0d:9d:9d:8f:b0:f9:b4:cf:e5:ca:6d:2a:32:79:3f:7b:31:
78:08:f4:e5:3c:f3:27:4a:f7:5b:e3:6d:64:89:a2:d5:3b:75:
64:6d:fd:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKIO76c1cYqrmqUVSm9GrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NGYyYjYyZmQ4NDVjOTE0OGUwZTIyNjQyNTc0OGMzYzZl
OTc1MzkwHhcNMjYwMzI1MTgwMTIyWhcNMjYwMzI2MTgwMTIyWjAzMTEwLwYDVQQD
EyhmNjFlZGViZjk1NmU1N2NmNGMxYzcwZmE3ZDI1NzI3MGNmNDU0ZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3voHgXE/pr7Aqa+xP3dgUg7Pn1G
E9cHt4ru9pOkJMwKWGQAjWqawUuATOPyu/iqOp7ZJ09L2/uBWsckxuuzK39OLLtn
Egp3OxwazY/CpvhX37DzfZL2blXIkB5HJI1M1SRmThS3BpO4KIWTl8uUk55cjipY
Iv5Vzz5clptyg9kvMI+mAhC0WUETau0qrwyy0yZ9WbHEwPD2zqVB/5zxtoaMMdsD
FKv0J9OTSCR3AIc/L7nw7JvukKYtMtoWJpxYDeXm1ypChfCpAYApNPmetTklMu08
XaJQAIdxtyBXUuJssNW7a3lLRpHmA76Q+qXgqKLs5e/aHFr38+BUPfZPPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYe3r+VblfPTBxw+n0lcnDPRU/6MB8GA1UdIwQY
MBaAFPRPK2L9hFyRSODiJkJXSMPG6XU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUU4cll2MkVYSkZJNE9JbVFsZEl3OGJwZFRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8xNDlhZDQtZTRhNi00YmRjLWE0ZDAt
NzdhNTQ3N2ZiYWJmLzEvOUU4cll2MkVYSkZJNE9JbVFsZEl3OGJwZFRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8xNDlhZDQtZTRhNi00YmRjLWE0ZDAtNzdhNTQ3N2ZiYWJm
LzEvOUU4cll2MkVYSkZJNE9JbVFsZEl3OGJwZFRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRftTBBo
6kCDAyEsvt5WnWpyD2We7zsPEZBz33YsLKWvks6x9ldj8IO97xR6FNOWu71HBLNI
a2i4cmgbTcI2AroPvJg+xiU++075EvFS+kMRPEDLll07wm+pd8kITDcBtJ17VwpT
OPHQdyTd9iEq4GDxac1YK+vUn22LkOlkvGKtCryP3enEMuf5bEZbDsSFcUkC2doJ
No2VT0AQrxGN+oEjv9hnjGbHiupUwzypntl7D8yAz4F82mzq5sNKDbxiO5/JHGxp
jhaKAVUcwVrqov8NI+BZiRFZvQ2dnY+w+bTP5cptKjJ5P3sxeAj05TzzJ0r3W+Nt
ZImi1Tt1ZG39lA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:59 2026 by rpki-client