Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File: 1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier: WdZdjtnNrz4qfk96MbJd5ogH55rh7Pl+Gcl7invHTMg=
Subject key identifier: 93:EE:76:67:57:48:95:6B:57:AB:02:44:B6:E8:E9:42:2D:B0:CC:0F
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer: /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial: 019D27DFE5BB7DDEB49E9C884DF0030A3A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number: 15BC
Signing time: Thu 26 Mar 2026 02:01:17 +0000
Manifest this update: Thu 26 Mar 2026 02:01:17 +0000
Manifest next update: Fri 27 Mar 2026 02:01:17 +0000
Files and hashes: 1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: sildS9vpvBF3zm98/6YhTFo2d8UCSkTPgPVAotgK7No=)
2: 1vQkcMHCkliQRKl9aZ_MI-G0oZg.roa (hash: jJ0Z9gvnHkxzvx7TbvN1q4EtCEWPz3vfe0uvFzwej1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e5:bb:7d:de:b4:9e:9c:88:4d:f0:03:0a:3a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Validity
Not Before: Mar 26 02:01:17 2026 GMT
Not After : Mar 27 02:01:17 2026 GMT
Subject: CN=93ee76675748956b57ab0244b6e8e9422db0cc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:b2:9f:a1:af:33:23:58:86:67:ae:c5:6a:
87:b1:77:5a:a5:60:95:cb:cc:74:24:e3:10:4e:a0:
3f:74:7d:1d:39:95:0b:65:17:45:0b:0a:ac:b3:55:
4d:62:d3:f9:b7:09:cb:1c:f4:a1:ef:95:6e:77:ae:
21:06:5c:44:85:fd:a9:2f:af:03:80:f8:d7:9f:40:
5a:6e:65:11:3b:c3:53:8c:5e:72:1b:2a:cb:11:b8:
f2:01:ef:9b:21:8f:e1:a2:e3:93:b3:6c:58:78:7c:
5b:04:bc:43:82:33:db:5e:2a:bf:05:0e:76:ab:45:
c2:42:0b:68:e8:ac:cd:f8:49:f1:d6:1d:3b:cb:e6:
40:69:2c:c4:6c:7a:8a:74:81:33:66:91:e9:a2:76:
53:a5:08:56:25:ca:86:50:c6:54:81:da:7b:8d:a6:
ad:f1:a7:0e:11:d8:45:7b:8e:d2:a3:d0:02:cb:67:
79:a0:fe:b0:33:09:51:32:99:92:ea:a7:35:7a:37:
9f:f5:37:3a:db:1b:65:2d:df:b6:be:3b:bb:81:d5:
2e:82:a8:db:d9:17:14:1b:39:15:af:66:43:1f:c4:
3b:59:c3:0b:ed:a1:93:16:be:ba:0b:c1:93:92:e8:
1d:a7:42:ba:6d:37:8c:ac:b9:9f:0b:8d:e9:ca:05:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EE:76:67:57:48:95:6B:57:AB:02:44:B6:E8:E9:42:2D:B0:CC:0F
X509v3 Authority Key Identifier:
keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f2:76:9c:6b:9f:07:58:e1:ad:17:10:43:16:45:7a:2f:97:
40:4b:c2:21:86:c6:f1:6f:38:8b:b6:d0:c9:d0:80:81:40:ad:
c5:fc:ed:52:c1:14:06:a6:05:c8:54:f1:b1:e5:40:50:b3:26:
63:4d:2a:ad:9a:a8:3f:b0:eb:56:ca:8c:1a:a6:65:3c:3b:79:
a3:9e:52:67:e3:e2:39:a8:da:3c:a8:43:9b:4e:ac:f8:d4:6d:
fb:64:45:07:db:79:21:96:3e:02:c5:fc:c3:93:5d:0e:14:56:
31:6c:6f:1b:73:8b:cd:02:fc:15:78:8c:25:d1:36:13:18:ae:
bd:26:ce:b1:ea:64:51:04:45:df:3e:72:e5:95:aa:87:5a:df:
5a:15:b5:ed:58:7e:d3:76:cb:36:96:d5:44:06:1b:3b:6d:ab:
9a:62:b0:54:61:12:c1:d8:11:72:19:72:5f:5f:0c:df:af:83:
13:07:c5:0d:87:74:2f:2e:5d:de:18:7c:45:af:e3:7f:de:95:
e8:2b:06:af:d1:98:79:d5:10:7f:af:3b:fb:17:19:89:9c:61:
e4:31:ad:a8:46:28:e5:b0:99:62:08:f9:82:86:e0:a2:a4:d5:
0c:2c:1f:9f:f0:fa:b4:75:59:aa:90:74:7d:13:16:2f:71:fc:
40:17:7c:b9
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0n3+W7fd60npyITfADCjqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NWY1YTM1NzM4YzMyMjllMmY0Mzk0NTAwYzMyMmM4Mjc1
YTk3YTIwHhcNMjYwMzI2MDIwMTE3WhcNMjYwMzI3MDIwMTE3WjAzMTEwLwYDVQQD
Eyg5M2VlNzY2NzU3NDg5NTZiNTdhYjAyNDRiNmU4ZTk0MjJkYjBjYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD+yn6GvMyNYhmeuxWqHsXdapWCV
y8x0JOMQTqA/dH0dOZULZRdFCwqss1VNYtP5twnLHPSh75Vud64hBlxEhf2pL68D
gPjXn0BabmURO8NTjF5yGyrLEbjyAe+bIY/houOTs2xYeHxbBLxDgjPbXiq/BQ52
q0XCQgto6KzN+Enx1h07y+ZAaSzEbHqKdIEzZpHponZTpQhWJcqGUMZUgdp7jaat
8acOEdhFe47So9ACy2d5oP6wMwlRMpmS6qc1ejef9Tc62xtlLd+2vju7gdUugqjb
2RcUGzkVr2ZDH8Q7WcML7aGTFr66C8GTkugdp0K6bTeMrLmfC43pygUN5wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJPudmdXSJVrV6sCRLbo6UItsMwPMB8GA1UdIwQY
MBaAFPlfWjVzjDIp4vQ5RQDDIsgnWpeiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1WOWFOWE9NTWluaTlEbEZBTU1peUNkYWw2SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvZDQ5YzIxLWRlYWQtNGRjNC05NDc4
LWExMGI3Y2M5OGJjOC8xLzEtVjlhTlhPTU1pbmk5RGxGQU1NaXlDZGFsNkkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2QxL2Q0OWMyMS1kZWFkLTRkYzQtOTQ3OC1hMTBiN2NjOThi
YzgvMS8xLVY5YU5YT01NaW5pOURsRkFNTWl5Q2RhbDZJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvJ2
nGufB1jhrRcQQxZFei+XQEvCIYbG8W84i7bQydCAgUCtxfztUsEUBqYFyFTxseVA
ULMmY00qrZqoP7DrVsqMGqZlPDt5o55SZ+PiOajaPKhDm06s+NRt+2RFB9t5IZY+
AsX8w5NdDhRWMWxvG3OLzQL8FXiMJdE2ExiuvSbOsepkUQRF3z5y5ZWqh1rfWhW1
7Vh+03bLNpbVRAYbO22rmmKwVGESwdgRchlyX18M36+DEwfFDYd0Ly5d3hh8Ra/j
f96V6CsGr9GYedUQf687+xcZiZxh5DGtqEYo5bCZYgj5gobgoqTVDCwfn/D6tHVZ
qpB0fRMWL3H8QBd8uQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:47:39 2026 by rpki-client