Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: GoMDIl28UVsXTWgSJ8j8rVohUYetTCuvrH33BWyFPnc=
Subject key identifier: A0:89:9A:CA:6E:8D:EE:6D:81:E1:1B:90:32:F7:B0:A4:38:D2:CF:F1
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 019D28BBA340471D69B39B64AD2D6EC51A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 08EE
Signing time: Thu 26 Mar 2026 06:01:18 +0000
Manifest this update: Thu 26 Mar 2026 06:01:18 +0000
Manifest next update: Fri 27 Mar 2026 06:01:18 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: 6Wk3yF9OSIy85emMOvjFxFSU3oFU+0zdkNfp90S9Pdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:a3:40:47:1d:69:b3:9b:64:ad:2d:6e:c5:1a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Mar 26 06:01:18 2026 GMT
Not After : Mar 27 06:01:18 2026 GMT
Subject: CN=a0899aca6e8dee6d81e11b9032f7b0a438d2cff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:52:a6:eb:c0:eb:ca:e9:35:b4:01:d3:cd:
c4:c1:4d:78:4b:5a:24:2d:a1:89:1d:96:34:d0:38:
69:db:b3:86:e4:23:54:3a:8b:81:cb:91:79:eb:55:
7b:f3:f9:58:60:ea:1d:8f:fe:b1:e0:35:8d:67:d3:
e6:3d:88:1e:61:26:1d:1a:10:65:22:53:b0:53:14:
e5:17:13:8c:3f:e3:25:ef:6d:42:ea:c2:ef:8b:0e:
45:96:44:48:18:34:56:87:b5:49:66:25:86:98:e0:
94:0f:c7:71:2b:7d:ff:d3:58:20:11:9f:53:8e:1f:
4e:ad:56:b1:55:e0:f6:0a:3e:15:d9:a2:b6:db:d9:
21:fe:15:84:6d:55:e3:c3:c0:cc:46:88:35:38:76:
4c:1e:f4:24:6d:ea:6b:42:56:e4:56:7b:96:9f:f5:
ee:f7:a2:56:12:d0:4d:f1:e2:af:69:54:e3:0f:d1:
34:89:56:ab:d5:f5:ef:33:04:40:d8:79:fa:f2:8f:
36:6f:5c:69:7e:25:df:45:33:84:ee:b4:68:94:4c:
b6:4f:86:98:57:41:f3:9f:50:d6:81:02:4c:76:70:
9f:e6:b3:9b:b3:8c:18:fe:82:42:8d:73:d8:df:13:
d8:25:33:5f:c8:fb:43:67:36:f3:50:3a:31:e0:69:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:89:9A:CA:6E:8D:EE:6D:81:E1:1B:90:32:F7:B0:A4:38:D2:CF:F1
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:08:56:c0:ad:01:ed:4b:20:92:cf:46:7f:5d:bc:36:67:b5:
c3:f5:d9:15:e5:30:e2:05:de:47:78:4c:b0:ff:8a:a2:4e:26:
48:02:04:1d:89:b3:32:a7:ce:03:39:a0:b9:e8:88:2b:4d:02:
24:21:88:4f:b9:b3:dd:39:9f:7c:55:96:3d:54:b7:0d:07:1a:
19:68:ad:60:93:af:b4:62:f5:7d:40:c5:59:4d:b4:24:84:69:
53:9f:78:b5:3a:61:33:7f:6f:d6:71:73:aa:33:f6:34:80:4d:
c2:0a:a8:8a:27:17:25:1d:dc:94:67:21:5b:2f:6b:36:0d:88:
e4:af:04:12:ca:01:9c:5c:88:92:16:29:ad:6a:16:ad:2e:98:
6f:b6:a4:94:f0:34:18:8f:54:3f:53:82:1e:27:63:2e:e3:18:
43:69:03:a6:25:ae:3c:f4:ca:09:62:d5:cd:2b:f6:d8:fb:b2:
af:77:f3:bc:90:29:b4:e9:52:50:74:a1:f5:57:7f:d1:51:9a:
ad:c4:ef:96:98:aa:d1:93:33:43:70:7e:c8:21:ae:8e:bd:bc:
0d:12:6b:53:dd:b2:78:8f:a0:22:9e:0d:32:e8:6a:82:37:ee:
4b:8c:bf:da:aa:be:1b:25:3b:af:01:87:c0:92:a5:01:a6:5f:
94:fd:a6:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou6NARx1ps5tkrS1uxRqLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YmY0YzE4ZjdhY2RlZTRjN2YzNThkZDRiYWU1ZTgwMDk4
NWU3MGMwHhcNMjYwMzI2MDYwMTE4WhcNMjYwMzI3MDYwMTE4WjAzMTEwLwYDVQQD
EyhhMDg5OWFjYTZlOGRlZTZkODFlMTFiOTAzMmY3YjBhNDM4ZDJjZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2xSpuvA68rpNbQB083EwU14S1ok
LaGJHZY00Dhp27OG5CNUOouBy5F561V78/lYYOodj/6x4DWNZ9PmPYgeYSYdGhBl
IlOwUxTlFxOMP+Ml721C6sLviw5FlkRIGDRWh7VJZiWGmOCUD8dxK33/01ggEZ9T
jh9OrVaxVeD2Cj4V2aK229kh/hWEbVXjw8DMRog1OHZMHvQkbeprQlbkVnuWn/Xu
96JWEtBN8eKvaVTjD9E0iVar1fXvMwRA2Hn68o82b1xpfiXfRTOE7rRolEy2T4aY
V0Hzn1DWgQJMdnCf5rObs4wY/oJCjXPY3xPYJTNfyPtDZzbzUDox4Gn1QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCJmspuje5tgeEbkDL3sKQ40s/xMB8GA1UdIwQY
MBaAFPW/TBj3rN7kx/NY3UuuXoAJhecMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMt
ZDJhYmQzYTkxYzkwLzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMtZDJhYmQzYTkxYzkw
LzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewhWwK0B
7Usgks9Gf128Nme1w/XZFeUw4gXeR3hMsP+Kok4mSAIEHYmzMqfOAzmgueiIK00C
JCGIT7mz3TmffFWWPVS3DQcaGWitYJOvtGL1fUDFWU20JIRpU594tTphM39v1nFz
qjP2NIBNwgqoiicXJR3clGchWy9rNg2I5K8EEsoBnFyIkhYprWoWrS6Yb7aklPA0
GI9UP1OCHidjLuMYQ2kDpiWuPPTKCWLVzSv22Puyr3fzvJAptOlSUHSh9Vd/0VGa
rcTvlpiq0ZMzQ3B+yCGujr28DRJrU92yeI+gIp4NMuhqgjfuS4y/2qq+GyU7rwGH
wJKlAaZflP2mmQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:23 2026 by rpki-client