Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
File: T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft (raw, json)
Hash identifier: ef8Ay33rMjeReDNBEcet1OKmMcZbsLIm5Fips4XzNag=
Subject key identifier: 9D:5E:9E:B1:C9:C8:B9:78:81:98:A2:EF:31:0D:C9:F0:CB:08:63:39
Authority key identifier: 4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
Certificate issuer: /CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Certificate serial: 019D27A9132C55C0FD02CCFEAFF0F9DBAB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
Manifest number: 0532
Signing time: Thu 26 Mar 2026 01:01:24 +0000
Manifest this update: Thu 26 Mar 2026 01:01:24 +0000
Manifest next update: Fri 27 Mar 2026 01:01:24 +0000
Files and hashes: 1: Dpnv4EUcYX-n8qPbHdIk5R_FJW4.roa (hash: 358iegoNsmqH7oFOcFPF51BllDNQ4FiGmVnnkcdD73M=)
2: T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl (hash: 2vw/aGUMP/cGIxP/luVzlSGLFziBDfhBI3v0q54+Nl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:13:2c:55:c0:fd:02:cc:fe:af:f0:f9:db:ab:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Validity
Not Before: Mar 26 01:01:24 2026 GMT
Not After : Mar 27 01:01:24 2026 GMT
Subject: CN=9d5e9eb1c9c8b9788198a2ef310dc9f0cb086339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:30:b7:f5:e1:34:c9:db:e7:24:6b:86:a7:70:
07:7c:07:d4:d8:47:8c:4f:28:94:7e:ca:f5:1a:2c:
6a:9b:19:88:e1:10:32:f7:b7:93:b3:f5:36:10:e1:
b7:d4:11:fc:21:4b:76:54:d9:c4:8c:78:bc:2d:da:
c1:36:9c:eb:65:2f:8b:a5:59:cf:d4:ec:a4:63:76:
3a:c3:29:fd:0d:3f:36:9c:c8:6b:90:57:7a:6b:f3:
ca:8e:8a:c8:f8:11:c0:b9:3c:77:fa:cf:91:1a:7a:
2b:be:11:be:ba:75:1b:6e:bf:d8:d9:61:07:20:af:
32:62:ac:f9:44:e7:5f:31:d8:ba:9b:dc:6a:d6:76:
58:b5:3b:5e:17:dd:0b:17:30:64:bb:b4:dd:2c:fd:
aa:c9:4b:11:0e:60:bb:5a:56:56:47:ee:1d:66:e2:
20:b8:1f:b6:c4:a0:94:26:1c:0d:63:50:fb:0d:a1:
fb:91:c1:f4:99:6a:cd:f6:26:d7:9f:00:d7:14:e5:
e8:09:ef:26:67:0c:f0:43:68:b3:03:a1:14:23:90:
b4:34:04:bd:d1:a3:3c:a5:57:88:ba:dd:f9:a1:1d:
c5:25:d9:31:a9:22:d9:e5:c1:c4:dc:19:47:91:56:
e9:1f:65:3d:a2:73:62:bb:1f:74:b6:99:ce:33:ae:
dc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5E:9E:B1:C9:C8:B9:78:81:98:A2:EF:31:0D:C9:F0:CB:08:63:39
X509v3 Authority Key Identifier:
keyid:4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a8:3f:ab:9f:89:44:c8:38:07:b1:1f:99:f6:11:2b:a8:91:
64:b5:00:13:f0:88:9e:49:cf:b5:99:ca:33:0d:12:1c:6f:b6:
f0:2e:50:0c:24:67:28:87:66:04:f4:e5:d6:cf:e2:2a:47:56:
4b:22:da:e7:ba:c0:cb:75:9c:cf:39:18:56:2c:0f:64:9d:39:
57:cd:80:c7:0a:9b:30:d3:1b:65:c6:93:4f:e8:16:0c:53:8e:
8c:4a:75:c9:50:41:5c:58:40:d0:b1:b8:5f:f2:e4:d8:07:1f:
74:62:24:9a:3d:5e:a3:1a:53:0f:0f:e4:f0:eb:a4:e7:e1:47:
e1:b0:f7:df:e0:86:58:d4:e1:64:e7:b1:72:ad:f2:eb:59:11:
cf:2a:7e:94:42:3d:3c:45:eb:58:5f:76:f1:d8:30:16:b5:ed:
29:15:70:98:45:bb:89:da:02:d6:1e:22:0c:af:14:f3:c2:45:
f0:77:f6:df:ff:ba:ed:88:e5:84:e2:66:37:26:a1:f8:db:54:
4a:fa:8f:92:0f:6f:d3:76:b4:d9:b3:71:a1:5e:c5:33:59:8f:
26:d6:34:4e:3d:6a:d6:c4:39:55:28:35:49:c6:88:63:8b:de:
c2:36:07:ac:3c:88:ed:d0:b2:92:88:22:d0:ef:26:9a:9c:25:
9d:cb:e9:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqRMsVcD9Asz+r/D526szMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZDIwN2ZjNWFkMDc3M2MzZDhlOTNlNGIzMDYxOWMxM2Jh
ODFjYjQwHhcNMjYwMzI2MDEwMTI0WhcNMjYwMzI3MDEwMTI0WjAzMTEwLwYDVQQD
Eyg5ZDVlOWViMWM5YzhiOTc4ODE5OGEyZWYzMTBkYzlmMGNiMDg2MzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zC39eE0ydvnJGuGp3AHfAfU2EeM
TyiUfsr1GixqmxmI4RAy97eTs/U2EOG31BH8IUt2VNnEjHi8LdrBNpzrZS+LpVnP
1OykY3Y6wyn9DT82nMhrkFd6a/PKjorI+BHAuTx3+s+RGnorvhG+unUbbr/Y2WEH
IK8yYqz5ROdfMdi6m9xq1nZYtTteF90LFzBku7TdLP2qyUsRDmC7WlZWR+4dZuIg
uB+2xKCUJhwNY1D7DaH7kcH0mWrN9ibXnwDXFOXoCe8mZwzwQ2izA6EUI5C0NAS9
0aM8pVeIut35oR3FJdkxqSLZ5cHE3BlHkVbpH2U9onNiux90tpnOM67cswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1enrHJyLl4gZii7zENyfDLCGM5MB8GA1UdIwQY
MBaAFE/SB/xa0Hc8PY6T5LMGGcE7qBy0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iZmY0NjUtYjU0Ny00MTUyLWE3NjUt
NDdkZmRmMmIwZmQ2LzEvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iZmY0NjUtYjU0Ny00MTUyLWE3NjUtNDdkZmRmMmIwZmQ2
LzEvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMag/q5+J
RMg4B7EfmfYRK6iRZLUAE/CInknPtZnKMw0SHG+28C5QDCRnKIdmBPTl1s/iKkdW
SyLa57rAy3WczzkYViwPZJ05V82AxwqbMNMbZcaTT+gWDFOOjEp1yVBBXFhA0LG4
X/Lk2AcfdGIkmj1eoxpTDw/k8Ouk5+FH4bD33+CGWNThZOexcq3y61kRzyp+lEI9
PEXrWF928dgwFrXtKRVwmEW7idoC1h4iDK8U88JF8Hf23/+67YjlhOJmNyah+NtU
SvqPkg9v03a02bNxoV7FM1mPJtY0Tj1q1sQ5VSg1ScaIY4vewjYHrDyI7dCykogi
0O8mmpwlncvpGQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:59 2026 by rpki-client