Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
File: 9SMu6AX3jlku_yzKYVORCeWjRn0.mft (raw, json)
Hash identifier: /mctQ7fYxgDQZ1i0I6PRHTeAVP08cii5jasw5e+MSlM=
Subject key identifier: 50:29:C6:FF:88:AF:5E:31:03:DD:86:D7:FC:4C:F7:0E:BB:9C:2D:30
Authority key identifier: F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
Certificate issuer: /CN=f5232ee805f78e592eff2cca61539109e5a3467d
Certificate serial: 019D27046C89858841EFB0559A23A424A362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
Manifest number: 06B4
Signing time: Wed 25 Mar 2026 22:01:34 +0000
Manifest this update: Wed 25 Mar 2026 22:01:34 +0000
Manifest next update: Thu 26 Mar 2026 22:01:34 +0000
Files and hashes: 1: 9SMu6AX3jlku_yzKYVORCeWjRn0.crl (hash: i6buGfQqatreHEBry1w5UjuLHzFNfziksSegTu9aVok=)
2: IuqD_YnEK40mq9P3_VxGGLfnMtY.roa (hash: bqXRCPcw1sANvy12S42YPS3VVGlJERGIKMC/ip/iYlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:6c:89:85:88:41:ef:b0:55:9a:23:a4:24:a3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5232ee805f78e592eff2cca61539109e5a3467d
Validity
Not Before: Mar 25 22:01:34 2026 GMT
Not After : Mar 26 22:01:34 2026 GMT
Subject: CN=5029c6ff88af5e3103dd86d7fc4cf70ebb9c2d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:52:7f:4a:3a:00:2b:f9:26:94:77:25:12:
0b:24:e0:af:24:b6:98:78:7c:4a:28:c7:ab:e5:df:
2c:1e:90:d9:a5:b0:b5:ba:6b:5e:50:9d:aa:db:9b:
3d:f0:19:4c:54:b5:37:cc:fb:ce:ed:06:18:50:ac:
27:fd:68:1c:af:46:0e:6f:c2:f4:1b:6e:f8:1d:f9:
ea:78:d5:c5:0d:79:62:fe:9e:87:2d:3d:3c:70:6c:
dd:50:61:ea:4e:f6:e7:de:2b:0e:5e:9b:a0:db:29:
15:17:06:46:ed:f6:8f:a3:df:c3:56:0d:93:d4:4e:
3a:47:67:c6:f8:0a:b6:d2:98:4b:05:97:c7:d9:df:
47:54:6e:72:7b:4f:46:8f:1d:00:1d:4d:8f:68:6a:
99:3f:aa:0c:54:30:47:59:b7:f3:9c:64:5e:0d:5d:
eb:56:3f:af:b6:25:68:dd:6a:d3:3c:52:48:08:b2:
0e:dd:1f:0b:4e:a7:e9:cd:d4:c8:f3:69:a8:61:13:
09:2d:18:b5:90:ca:09:c8:a9:8a:ac:9f:33:01:14:
67:57:52:c4:9e:f4:60:41:17:b1:83:2d:e3:dc:fb:
2e:ec:b1:f3:62:a7:d2:0e:52:cd:2b:45:f6:5e:28:
64:8a:38:d3:1b:9b:79:6a:8b:ab:13:b3:7c:e9:42:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:29:C6:FF:88:AF:5E:31:03:DD:86:D7:FC:4C:F7:0E:BB:9C:2D:30
X509v3 Authority Key Identifier:
keyid:F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d8:a9:90:8c:ee:7d:dc:c6:1b:52:f3:76:3e:25:fd:33:e7:
da:3e:3a:b0:5e:77:86:0f:fd:74:b0:15:e0:d0:62:33:c9:01:
f3:83:9e:17:64:ba:22:5c:2a:53:c2:21:d5:11:50:28:28:ea:
63:13:3b:d3:54:cc:f4:a2:c1:27:d4:71:9a:28:cc:f4:1b:f8:
49:0a:69:c7:f6:80:b8:bf:ef:9f:c7:18:e2:9f:c8:bd:4b:30:
5e:8b:08:d0:d4:57:a0:f7:09:5d:72:b5:d7:65:f6:52:a7:8c:
da:a8:d3:48:c5:ae:fc:4a:3c:bf:b3:d5:9f:9c:9e:90:27:13:
8a:fe:cd:60:94:bd:55:2b:f2:68:52:84:f8:6f:d9:6e:d2:75:
a7:af:d4:f9:ee:82:78:e1:ac:f2:ea:8a:37:be:57:77:43:6d:
aa:e5:58:c2:f9:3a:8b:3f:ff:ef:89:a8:6d:e9:03:ef:ce:be:
68:bb:55:83:2f:66:a0:7f:2a:f5:9c:d4:f4:f8:97:02:79:c8:
e2:35:c7:59:f6:30:95:27:57:ad:56:8d:74:25:72:b4:0a:6d:
58:73:53:ca:d6:af:08:8f:df:c0:ba:dc:f7:96:ef:27:dd:0f:
ca:26:10:70:2a:ac:57:ec:52:b3:6b:f4:f2:ce:d3:b9:ff:ce:
6e:36:7f:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBGyJhYhB77BVmiOkJKNiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MjMyZWU4MDVmNzhlNTkyZWZmMmNjYTYxNTM5MTA5ZTVh
MzQ2N2QwHhcNMjYwMzI1MjIwMTM0WhcNMjYwMzI2MjIwMTM0WjAzMTEwLwYDVQQD
Eyg1MDI5YzZmZjg4YWY1ZTMxMDNkZDg2ZDdmYzRjZjcwZWJiOWMyZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPJSf0o6ACv5JpR3JRILJOCvJLaY
eHxKKMer5d8sHpDZpbC1umteUJ2q25s98BlMVLU3zPvO7QYYUKwn/Wgcr0YOb8L0
G274HfnqeNXFDXli/p6HLT08cGzdUGHqTvbn3isOXpug2ykVFwZG7faPo9/DVg2T
1E46R2fG+Aq20phLBZfH2d9HVG5ye09Gjx0AHU2PaGqZP6oMVDBHWbfznGReDV3r
Vj+vtiVo3WrTPFJICLIO3R8LTqfpzdTI82moYRMJLRi1kMoJyKmKrJ8zARRnV1LE
nvRgQRexgy3j3Psu7LHzYqfSDlLNK0X2XihkijjTG5t5aourE7N86ULpCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFApxv+Ir14xA92G1/xM9w67nC0wMB8GA1UdIwQY
MBaAFPUjLugF945ZLv8symFTkQnlo0Z9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVNNdTZBWDNqbGt1X3l6S1lWT1JDZVdqUm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mMGZkM2QtYzBmZS00YzVkLWI0ZDEt
N2RiNTNjNjU3YzI5LzEvOVNNdTZBWDNqbGt1X3l6S1lWT1JDZVdqUm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mMGZkM2QtYzBmZS00YzVkLWI0ZDEtN2RiNTNjNjU3YzI5
LzEvOVNNdTZBWDNqbGt1X3l6S1lWT1JDZVdqUm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNipkIzu
fdzGG1Lzdj4l/TPn2j46sF53hg/9dLAV4NBiM8kB84OeF2S6IlwqU8Ih1RFQKCjq
YxM701TM9KLBJ9RxmijM9Bv4SQppx/aAuL/vn8cY4p/IvUswXosI0NRXoPcJXXK1
12X2UqeM2qjTSMWu/Eo8v7PVn5yekCcTiv7NYJS9VSvyaFKE+G/ZbtJ1p6/U+e6C
eOGs8uqKN75Xd0NtquVYwvk6iz//74mobekD786+aLtVgy9moH8q9ZzU9PiXAnnI
4jXHWfYwlSdXrVaNdCVytAptWHNTytavCI/fwLrc95bvJ90PyiYQcCqsV+xSs2v0
8s7Tuf/ObjZ/0Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:06 2026 by rpki-client