Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
File: 9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json)
Hash identifier: eZypvBlK2Xh3hbAnN7cWlicT1rnEQ+eAEalcarI7G8g=
Subject key identifier: 61:43:D3:32:1B:58:CA:5B:A6:E3:8D:1F:19:32:50:F9:8E:BA:2A:50
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial: 019D273AAF4A99238FD917FD5B3D78C893EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:00:50 +0000
Manifest this update: Wed 25 Mar 2026 23:00:50 +0000
Manifest next update: Thu 26 Mar 2026 23:00:50 +0000
Files and hashes: 1: 6WW-5nEcLXyYysohxbswx53KUC4.roa (hash: YGye3VGtaY9dIe257yt+Ywof1sTn+vKBOCXTqKl9UZo=)
2: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: v3MOQ+ueVYT8imIx3SGUJPthDLRprumQDNcd1zemaBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:af:4a:99:23:8f:d9:17:fd:5b:3d:78:c8:93:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Validity
Not Before: Mar 25 23:00:50 2026 GMT
Not After : Mar 26 23:00:50 2026 GMT
Subject: CN=6143d3321b58ca5ba6e38d1f193250f98eba2a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d7:5f:cb:af:f2:61:79:00:65:60:99:21:49:
45:86:ee:85:0a:9f:99:6c:f0:4b:74:05:da:7a:1c:
70:a1:13:d5:47:6d:81:0c:7f:af:56:ef:ee:91:db:
e8:5c:35:5d:2b:88:31:e4:83:b2:83:dc:14:1e:02:
70:4a:bf:18:06:f1:df:80:8b:52:8c:c8:df:75:c8:
de:9c:46:92:2e:2e:74:d8:44:65:c7:8e:0f:31:d2:
49:13:4b:b2:67:4f:8f:e9:44:88:48:ab:62:b3:74:
30:ef:91:50:84:22:81:4a:db:9c:19:f3:a4:7a:36:
8f:c3:20:0b:5e:e3:3b:0e:0f:e2:49:00:49:9b:12:
c0:d4:36:b1:48:ab:02:2a:19:f8:10:75:43:7c:11:
b6:a0:31:c9:e0:bb:21:f0:43:aa:d7:53:2b:59:1a:
84:9e:e6:cd:d6:32:dc:ff:ef:81:c2:c3:2a:6e:7d:
a1:cb:0d:0e:29:d9:b4:1e:90:f8:b3:4a:fb:20:c9:
ad:cf:34:7d:ae:db:d7:ab:fd:45:c3:f4:7c:f2:bd:
9a:f6:f8:22:96:de:f2:47:76:f8:32:cc:b9:4c:2c:
ad:1b:d4:73:79:7e:5c:ed:be:02:cd:3e:00:79:e4:
e5:a8:36:3f:85:53:bd:2e:f2:6f:e3:e8:a7:4d:21:
4b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:43:D3:32:1B:58:CA:5B:A6:E3:8D:1F:19:32:50:F9:8E:BA:2A:50
X509v3 Authority Key Identifier:
keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b9:27:c5:f7:ec:de:c0:35:73:6c:d9:0f:43:80:18:67:7f:
4e:9a:bd:da:3f:94:9b:d7:81:5d:69:47:86:26:18:67:25:a1:
ae:14:f0:be:9a:73:62:5b:dd:cb:29:51:eb:08:f8:6d:24:2e:
cc:8e:74:38:54:5e:dc:f5:0a:d7:09:b0:ca:af:5c:9b:87:99:
03:6c:d6:4e:a7:fa:78:19:ad:ec:bc:d9:8a:7d:b6:0e:7c:4f:
87:1f:29:73:e1:f4:78:18:b2:2c:23:59:3d:a6:57:31:78:e0:
94:8b:60:1c:82:22:8a:9e:1b:a5:97:99:81:1a:ec:a7:93:2a:
5e:c7:15:28:f4:f7:dc:7c:14:5e:d6:08:5d:bb:0f:b2:3b:43:
44:82:32:ed:59:3c:30:35:a7:f7:fb:ae:37:1e:9b:9f:c1:4e:
4a:e5:8f:0e:33:6f:0e:f9:ea:cb:b5:68:df:7a:98:62:a2:e9:
77:6f:13:c4:05:d7:3a:2a:8e:40:2b:f9:19:3d:25:7f:ba:eb:
d2:93:57:2d:cb:bf:3e:d3:6a:ed:a5:3e:3b:22:7a:a7:fa:bc:
9a:e0:00:e0:6f:89:a5:91:b5:4e:3d:ba:0b:cb:95:1b:2d:46:
16:ab:52:5a:93:60:91:82:1a:e6:d9:5c:52:98:95:54:4a:f0:
64:14:89:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOq9KmSOP2Rf9Wz14yJPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MmIyZWIyMWY2YjA2NzIxNGRjZmFkYjI5MDI1M2RhNzE3
ZDYyZTMwHhcNMjYwMzI1MjMwMDUwWhcNMjYwMzI2MjMwMDUwWjAzMTEwLwYDVQQD
Eyg2MTQzZDMzMjFiNThjYTViYTZlMzhkMWYxOTMyNTBmOThlYmEyYTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tdfy6/yYXkAZWCZIUlFhu6FCp+Z
bPBLdAXaehxwoRPVR22BDH+vVu/ukdvoXDVdK4gx5IOyg9wUHgJwSr8YBvHfgItS
jMjfdcjenEaSLi502ERlx44PMdJJE0uyZ0+P6USISKtis3Qw75FQhCKBStucGfOk
ejaPwyALXuM7Dg/iSQBJmxLA1DaxSKsCKhn4EHVDfBG2oDHJ4Lsh8EOq11MrWRqE
nubN1jLc/++BwsMqbn2hyw0OKdm0HpD4s0r7IMmtzzR9rtvXq/1Fw/R88r2a9vgi
lt7yR3b4Msy5TCytG9RzeX5c7b4CzT4AeeTlqDY/hVO9LvJv4+inTSFL9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFD0zIbWMpbpuONHxkyUPmOuipQMB8GA1UdIwQY
MBaAFPQrLrIfawZyFNz62ykCU9pxfWLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUNzdXNoOXJCbklVM1ByYktRSlQybkY5WXVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80NzI4ODgtZjE3MC00NjY2LTg1YmQt
MTgzMzU2NTMwMTc3LzEvOUNzdXNoOXJCbklVM1ByYktRSlQybkY5WXVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80NzI4ODgtZjE3MC00NjY2LTg1YmQtMTgzMzU2NTMwMTc3
LzEvOUNzdXNoOXJCbklVM1ByYktRSlQybkY5WXVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrknxffs
3sA1c2zZD0OAGGd/Tpq92j+Um9eBXWlHhiYYZyWhrhTwvppzYlvdyylR6wj4bSQu
zI50OFRe3PUK1wmwyq9cm4eZA2zWTqf6eBmt7LzZin22DnxPhx8pc+H0eBiyLCNZ
PaZXMXjglItgHIIiip4bpZeZgRrsp5MqXscVKPT33HwUXtYIXbsPsjtDRIIy7Vk8
MDWn9/uuNx6bn8FOSuWPDjNvDvnqy7Vo33qYYqLpd28TxAXXOiqOQCv5GT0lf7rr
0pNXLcu/PtNq7aU+OyJ6p/q8muAA4G+JpZG1Tj26C8uVGy1GFqtSWpNgkYIa5tlc
UpiVVErwZBSJ0g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:19 2026 by rpki-client