Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: 9KA//4X9ajDVnpHmpiXUG1xTz0Uubhj1wUeqARivPAU=
Subject key identifier: AD:23:8B:EE:FA:A6:88:69:08:E9:18:63:CC:9E:BA:E1:36:9B:D1:39
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 019D27DF4FA4A58EEA62C45D531614E48212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 1817
Signing time: Thu 26 Mar 2026 02:00:39 +0000
Manifest this update: Thu 26 Mar 2026 02:00:39 +0000
Manifest next update: Fri 27 Mar 2026 02:00:39 +0000
Files and hashes: 1: 7kGNbroThpMnN96LqRGM-Y-5t9Y.roa (hash: lxPWqX0/OpM/p7/y+8GA/oyT71oB2fzc6nqiYIWie7o=)
2: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: 7f9nm6qVR6GSGR3N8ouX3irIc9REtodHzjvqmfPq3gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:4f:a4:a5:8e:ea:62:c4:5d:53:16:14:e4:82:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Mar 26 02:00:39 2026 GMT
Not After : Mar 27 02:00:39 2026 GMT
Subject: CN=ad238beefaa6886908e91863cc9ebae1369bd139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:0b:86:ea:c4:44:57:f6:6a:c7:33:13:a9:
5e:5a:bd:aa:e6:5e:1e:40:61:57:96:24:66:b9:80:
f8:d3:c3:ff:f3:67:04:40:3c:03:66:8b:11:58:49:
28:e5:21:9a:3c:94:70:fb:10:d8:09:c0:f2:c9:9a:
dd:a9:2e:01:7d:69:e2:07:70:2f:f0:bd:6d:58:21:
0e:c1:fe:50:63:c6:a3:47:53:8e:7c:15:2a:a0:8e:
23:9c:f5:e4:34:c3:c4:ed:06:e1:9b:7e:27:99:e1:
0d:16:be:da:7d:4b:ee:73:b1:b9:7c:8f:f8:85:25:
75:2c:39:62:e4:ab:c4:44:a1:64:cb:a3:df:c7:1b:
1c:70:78:c8:5e:1b:ce:c1:62:ed:63:ae:c2:88:fe:
dd:b0:f2:1b:1a:bd:d6:3a:2c:6a:c1:81:74:02:0e:
f7:1f:69:85:03:54:6d:19:dc:e7:77:e8:0b:85:22:
00:6e:df:0e:1f:88:53:bd:9c:dc:6d:ec:27:92:38:
78:f4:ae:ea:22:42:ae:17:05:0c:a6:4c:11:97:ab:
6d:0a:05:af:68:eb:cb:a8:03:e0:7d:3d:9e:67:62:
dc:ed:8f:08:75:24:47:23:f1:a4:7b:e2:51:42:ca:
a3:4b:75:68:2b:06:fc:15:08:fc:11:b9:38:b5:cd:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:23:8B:EE:FA:A6:88:69:08:E9:18:63:CC:9E:BA:E1:36:9B:D1:39
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fd:cd:2c:14:19:cd:52:1e:09:dd:40:21:cc:7c:d2:9d:fd:
1d:11:8b:ef:5f:95:6c:2b:b3:b4:ed:62:61:9f:0f:bb:7a:cb:
a2:c3:68:e8:e2:8d:92:e1:bb:b5:91:4b:ad:8c:c1:be:2a:ff:
24:4e:71:f9:a1:b9:a3:9b:e7:e6:85:6a:e4:98:ad:ff:a9:6e:
f4:f4:e4:80:7e:a5:a9:3d:f5:56:f9:fc:75:26:96:8e:6e:17:
7f:a7:c9:5f:fd:2a:c1:43:37:dc:e3:e8:d0:3a:a1:3a:09:0d:
e4:58:6d:58:d0:e0:77:c8:3c:65:ac:c6:93:be:64:1f:4a:67:
ac:f5:2c:a0:e5:e5:b2:f5:15:29:7c:bb:57:14:0e:5b:df:1f:
9c:d8:45:17:25:d1:14:01:f1:33:a2:71:af:48:c8:82:03:85:
60:f6:c2:d8:5b:71:47:87:f4:b4:12:18:82:e5:48:7e:76:22:
48:a3:0a:b4:07:70:b9:d8:da:8a:6d:00:56:45:1e:19:13:85:
da:b3:ef:31:5c:71:16:ae:b0:9b:1f:f2:ae:7a:88:8f:ae:80:
b0:a2:cc:ca:e6:1b:cb:66:0c:01:e4:5f:df:01:0f:6b:7b:6f:
91:7d:9a:6d:11:c0:c0:f9:87:87:6d:0f:7d:f5:1f:e5:6f:11:
a3:ea:d9:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n30+kpY7qYsRdUxYU5IISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjQzMGQwODA1ZjQyZmZhM2JjZDBjMGI3YzU1MDgwNTEx
NzkyM2EwHhcNMjYwMzI2MDIwMDM5WhcNMjYwMzI3MDIwMDM5WjAzMTEwLwYDVQQD
EyhhZDIzOGJlZWZhYTY4ODY5MDhlOTE4NjNjYzllYmFlMTM2OWJkMTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNELhurERFf2asczE6leWr2q5l4e
QGFXliRmuYD408P/82cEQDwDZosRWEko5SGaPJRw+xDYCcDyyZrdqS4BfWniB3Av
8L1tWCEOwf5QY8ajR1OOfBUqoI4jnPXkNMPE7Qbhm34nmeENFr7afUvuc7G5fI/4
hSV1LDli5KvERKFky6PfxxsccHjIXhvOwWLtY67CiP7dsPIbGr3WOixqwYF0Ag73
H2mFA1RtGdznd+gLhSIAbt8OH4hTvZzcbewnkjh49K7qIkKuFwUMpkwRl6ttCgWv
aOvLqAPgfT2eZ2Lc7Y8IdSRHI/Gke+JRQsqjS3VoKwb8FQj8Ebk4tc3j3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0ji+76pohpCOkYY8yeuuE2m9E5MB8GA1UdIwQY
MBaAFPT0MNCAX0L/o7zQwLfFUIBRF5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAt
ZjBmOTNjY2EyNDc5LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAtZjBmOTNjY2EyNDc5
LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASv3NLBQZ
zVIeCd1AIcx80p39HRGL71+VbCuztO1iYZ8Pu3rLosNo6OKNkuG7tZFLrYzBvir/
JE5x+aG5o5vn5oVq5Jit/6lu9PTkgH6lqT31Vvn8dSaWjm4Xf6fJX/0qwUM33OPo
0DqhOgkN5FhtWNDgd8g8ZazGk75kH0pnrPUsoOXlsvUVKXy7VxQOW98fnNhFFyXR
FAHxM6Jxr0jIggOFYPbC2FtxR4f0tBIYguVIfnYiSKMKtAdwudjaim0AVkUeGROF
2rPvMVxxFq6wmx/yrnqIj66AsKLMyuYby2YMAeRf3wEPa3tvkX2abRHAwPmHh20P
ffUf5W8Ro+rZ/g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:24:41 2026 by rpki-client