Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
File: 9pRmi6ds9VDEE5wXMAFgB33OoFk.mft (raw, json)
Hash identifier: ixGTsWo/uSi4C5BODm4SYmbNuXVcgxPP2X7PxDCkB5E=
Subject key identifier: 08:46:1B:F0:4F:CF:64:C6:11:26:E0:BE:4E:B7:FD:E2:82:85:53:AC
Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Certificate issuer: /CN=f694668ba76cf550c4139c17300160077dcea059
Certificate serial: 019D27DF96487BC846DFACA436B8644FE275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
Manifest number: 11FF
Signing time: Thu 26 Mar 2026 02:00:57 +0000
Manifest this update: Thu 26 Mar 2026 02:00:57 +0000
Manifest next update: Fri 27 Mar 2026 02:00:57 +0000
Files and hashes: 1: 9pRmi6ds9VDEE5wXMAFgB33OoFk.crl (hash: 22DWzqG5/GLG8YiklZSEYpeXi2k7f1SimrJIzJmJi+0=)
2: orL4sli2jaSeBff9va-I5ykDyO4.roa (hash: X71IZvpi5dNFJsBMRCrrWRzDFuE1IqQEepJ3uFR5Q4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:96:48:7b:c8:46:df:ac:a4:36:b8:64:4f:e2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f694668ba76cf550c4139c17300160077dcea059
Validity
Not Before: Mar 26 02:00:57 2026 GMT
Not After : Mar 27 02:00:57 2026 GMT
Subject: CN=08461bf04fcf64c61126e0be4eb7fde2828553ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:80:ce:77:79:03:23:de:9b:eb:10:01:77:e0:
73:34:32:fb:cf:f7:80:64:d5:da:47:83:6d:9c:fb:
7e:18:14:2a:79:57:12:ed:e3:be:26:d7:33:fa:a4:
a8:34:63:a5:5e:5c:d5:f5:29:b4:9f:58:b4:e0:64:
d3:52:fb:cd:69:44:20:ef:5e:7d:76:05:86:9f:88:
9e:0e:38:30:e4:95:5c:ba:55:55:ff:4f:1f:b7:ea:
16:97:3d:e0:af:86:f1:85:89:56:cb:ce:ec:95:a5:
dc:68:fc:54:66:3c:cc:4a:52:2f:ea:a7:3c:f7:32:
7c:b9:cd:2d:f9:f9:d8:dd:03:e6:1b:b2:01:a0:a1:
29:0a:88:27:08:3b:2d:37:5e:49:19:02:9f:d4:b8:
53:3f:a1:83:5a:ca:b4:03:bb:55:a7:f5:20:c9:02:
29:15:75:bc:7d:2a:ee:4c:83:8a:eb:5f:a3:21:bc:
e0:26:09:98:f2:33:d9:07:bb:19:c0:47:d7:c3:05:
7e:07:90:b5:61:fa:c7:78:75:95:83:b6:c2:14:e5:
5c:78:48:fb:a2:9c:cd:34:88:6b:16:d8:38:2b:76:
c2:e1:9d:a8:1d:8d:dd:b4:05:d3:5b:2a:21:36:6a:
96:0d:b0:13:af:39:b0:b6:88:fa:b1:35:44:99:bb:
c0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:46:1B:F0:4F:CF:64:C6:11:26:E0:BE:4E:B7:FD:E2:82:85:53:AC
X509v3 Authority Key Identifier:
keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:95:a2:16:90:12:f8:41:ee:ab:cf:cc:67:3b:98:aa:9b:0e:
f3:2c:29:ce:eb:75:5d:3d:59:6a:5a:25:71:2d:d0:18:ea:03:
c2:6b:8b:8a:9e:73:39:bf:49:e6:98:4f:41:e3:64:f6:81:1c:
87:c4:c2:6d:2b:50:7d:82:ec:41:c8:57:46:df:d6:5c:54:25:
c5:f3:42:c3:8a:71:24:88:ab:a8:f0:79:d9:27:5d:b6:cd:2c:
89:88:5a:de:f4:29:ff:83:28:d6:ee:47:e3:e3:28:63:29:5e:
b7:1d:dd:11:36:1d:b6:41:14:1e:fd:3f:f9:27:e4:9e:a8:2a:
ac:3b:71:20:e7:66:fd:39:1f:48:c3:b5:65:87:b5:01:2c:f9:
a5:4c:d3:85:98:0f:2e:d2:e6:54:28:c1:e5:95:8e:11:70:b9:
5f:ba:4e:5a:69:6c:79:b4:74:94:6d:c7:0a:fa:ef:9f:5e:0d:
92:d5:b5:59:24:7c:f0:4d:c8:c9:7a:c4:a5:30:9f:82:0e:46:
a4:cf:fe:a6:9a:47:46:3d:1a:5e:2c:6e:f9:5e:67:7f:45:fd:
d8:9f:d3:20:dc:1d:fd:30:46:44:f5:2f:b7:32:83:ac:2a:5b:
f5:34:7e:83:d5:12:cf:07:cd:30:15:fa:39:19:a2:1d:52:eb:
20:c3:f0:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n35ZIe8hG36ykNrhkT+J1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTQ2NjhiYTc2Y2Y1NTBjNDEzOWMxNzMwMDE2MDA3N2Rj
ZWEwNTkwHhcNMjYwMzI2MDIwMDU3WhcNMjYwMzI3MDIwMDU3WjAzMTEwLwYDVQQD
EygwODQ2MWJmMDRmY2Y2NGM2MTEyNmUwYmU0ZWI3ZmRlMjgyODU1M2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloDOd3kDI96b6xABd+BzNDL7z/eA
ZNXaR4NtnPt+GBQqeVcS7eO+Jtcz+qSoNGOlXlzV9Sm0n1i04GTTUvvNaUQg7159
dgWGn4ieDjgw5JVculVV/08ft+oWlz3gr4bxhYlWy87slaXcaPxUZjzMSlIv6qc8
9zJ8uc0t+fnY3QPmG7IBoKEpCognCDstN15JGQKf1LhTP6GDWsq0A7tVp/UgyQIp
FXW8fSruTIOK61+jIbzgJgmY8jPZB7sZwEfXwwV+B5C1YfrHeHWVg7bCFOVceEj7
opzNNIhrFtg4K3bC4Z2oHY3dtAXTWyohNmqWDbATrzmwtoj6sTVEmbvASQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhGG/BPz2TGESbgvk63/eKChVOsMB8GA1UdIwQY
MBaAFPaUZounbPVQxBOcFzABYAd9zqBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ZTAzMTYtZjRiOS00Zjg5LWE4YTEt
N2U1MDkxM2FjMDFkLzEvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82ZTAzMTYtZjRiOS00Zjg5LWE4YTEtN2U1MDkxM2FjMDFk
LzEvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJWiFpAS
+EHuq8/MZzuYqpsO8ywpzut1XT1ZalolcS3QGOoDwmuLip5zOb9J5phPQeNk9oEc
h8TCbStQfYLsQchXRt/WXFQlxfNCw4pxJIirqPB52Sddts0siYha3vQp/4Mo1u5H
4+MoYyletx3dETYdtkEUHv0/+SfknqgqrDtxIOdm/TkfSMO1ZYe1ASz5pUzThZgP
LtLmVCjB5ZWOEXC5X7pOWmlsebR0lG3HCvrvn14NktW1WSR88E3IyXrEpTCfgg5G
pM/+pppHRj0aXixu+V5nf0X92J/TINwd/TBGRPUvtzKDrCpb9TR+g9USzwfNMBX6
ORmiHVLrIMPwXA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:28:22 2026 by rpki-client