Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
File: 9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json)
Hash identifier: DEhRmO4v26Q7La7IzM2YNvm/i4i0jtKI2wevSVYyBB4=
Subject key identifier: 52:9D:89:F3:98:BF:DA:A2:F2:CF:F2:EA:AB:BC:E7:F5:54:76:23:A6
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial: 019D28845B4E29A8880461D0F7CDFFBC4064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 05:00:55 +0000
Manifest this update: Thu 26 Mar 2026 05:00:55 +0000
Manifest next update: Fri 27 Mar 2026 05:00:55 +0000
Files and hashes: 1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: uGQm+8I6Qv0Yv7GhOAvkh2AXSFkWITNcdIIHA7Qf8y8=)
2: CvAwcxB4NQhTMik421cY6D4GJSQ.roa (hash: bDEysHdEoYRzyx+ZtQs8J1SFqsQ1uvog9sHvqZgzUSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:5b:4e:29:a8:88:04:61:d0:f7:cd:ff:bc:40:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Validity
Not Before: Mar 26 05:00:55 2026 GMT
Not After : Mar 27 05:00:55 2026 GMT
Subject: CN=529d89f398bfdaa2f2cff2eaabbce7f5547623a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b8:dd:b1:31:4e:cd:7f:c8:c0:23:62:42:93:
62:d3:40:c4:07:41:31:e6:a2:4c:a2:05:35:db:30:
bd:5e:c4:4d:4d:fe:16:9c:31:c5:3b:a9:3e:73:80:
8e:0c:26:87:00:36:97:20:f9:21:1d:0f:01:22:ea:
bd:a9:40:94:c3:e2:43:65:f7:2c:dd:d0:5b:43:2c:
ee:32:b1:02:63:90:d9:45:23:3c:1e:42:b1:af:9b:
09:56:46:7d:48:16:94:95:db:17:96:b3:54:a5:e5:
e2:8f:d1:07:78:a2:a8:64:cd:c7:d1:f1:00:29:56:
eb:6c:8c:59:60:a1:18:56:c4:a7:43:0e:03:ca:10:
91:35:ec:34:06:3e:b1:64:16:f1:e1:c0:fa:4b:dc:
e0:4e:59:dd:9a:e5:b6:90:be:3f:7c:84:a6:f7:cc:
3e:89:2b:bd:5d:cc:4a:29:bd:3f:f3:20:8c:48:f3:
03:de:9e:91:0c:aa:7d:8e:f0:16:30:da:e0:cc:d3:
9a:d1:d8:37:96:61:8c:7a:a8:ee:11:3a:e1:93:3d:
e2:81:9c:aa:e9:0d:26:21:fb:d0:e4:b7:a6:cc:f0:
df:c7:f8:5f:17:69:60:65:2a:e2:51:cc:2d:0c:9d:
2b:e2:ac:95:e0:12:30:4f:c6:64:97:6e:03:bf:1b:
c6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9D:89:F3:98:BF:DA:A2:F2:CF:F2:EA:AB:BC:E7:F5:54:76:23:A6
X509v3 Authority Key Identifier:
keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:68:df:25:13:67:6a:be:f8:7e:76:8e:3c:42:43:a0:b9:fd:
a3:c8:44:a8:43:5e:d1:ab:9e:6e:d8:95:4e:18:a1:2b:0c:ea:
c4:58:b6:3f:e6:27:cb:24:7f:62:11:5f:70:1f:96:10:5a:f7:
60:ad:4b:be:fe:50:b2:f7:f0:d2:81:0c:0b:3c:57:37:85:46:
fb:77:d2:82:a6:51:34:32:30:e4:cc:36:31:cd:e7:a4:8e:b2:
b1:00:51:10:24:87:03:f6:98:59:06:c5:3a:dd:eb:80:bd:86:
58:e2:8d:28:98:c4:5e:e9:f2:a7:5b:f7:8a:bc:e6:06:50:af:
e7:fd:00:98:ee:89:b1:15:95:5a:0f:fb:ff:ce:a8:f1:f0:7b:
8e:80:ef:a4:80:d1:8b:05:54:50:82:74:ec:cd:14:15:e0:6e:
38:7a:b3:1d:fb:f9:bf:ba:ec:79:cb:44:34:e9:0f:3b:e3:4d:
43:ac:0e:7a:72:ad:c2:23:94:46:9b:34:e5:eb:1c:90:6b:c0:
48:b4:1c:87:31:e0:2d:5d:90:1d:db:e0:73:08:97:ee:ac:29:
09:9e:3f:52:ef:0c:e1:81:39:13:55:12:d0:1a:dc:a2:aa:41:
72:21:5d:98:22:c0:40:27:3d:af:22:13:6c:04:05:f4:e0:ac:
73:31:3d:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohFtOKaiIBGHQ983/vEBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MmMyYjczMDAwNDA2ODI0ZGZiYzdhZTM4ODZlYjc4Njdm
OGVjNmUwHhcNMjYwMzI2MDUwMDU1WhcNMjYwMzI3MDUwMDU1WjAzMTEwLwYDVQQD
Eyg1MjlkODlmMzk4YmZkYWEyZjJjZmYyZWFhYmJjZTdmNTU0NzYyM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17jdsTFOzX/IwCNiQpNi00DEB0Ex
5qJMogU12zC9XsRNTf4WnDHFO6k+c4CODCaHADaXIPkhHQ8BIuq9qUCUw+JDZfcs
3dBbQyzuMrECY5DZRSM8HkKxr5sJVkZ9SBaUldsXlrNUpeXij9EHeKKoZM3H0fEA
KVbrbIxZYKEYVsSnQw4DyhCRNew0Bj6xZBbx4cD6S9zgTlndmuW2kL4/fISm98w+
iSu9XcxKKb0/8yCMSPMD3p6RDKp9jvAWMNrgzNOa0dg3lmGMeqjuETrhkz3igZyq
6Q0mIfvQ5LemzPDfx/hfF2lgZSriUcwtDJ0r4qyV4BIwT8Zkl24DvxvG0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKdifOYv9qi8s/y6qu85/VUdiOmMB8GA1UdIwQY
MBaAFPYsK3MABAaCTfvHrjiG63hn+OxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82ODI5YWEtMTFhNS00MmU3LTlmOTYt
NTZlYmY4MjlkNmIyLzEvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82ODI5YWEtMTFhNS00MmU3LTlmOTYtNTZlYmY4MjlkNmIy
LzEvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2jfJRNn
ar74fnaOPEJDoLn9o8hEqENe0auebtiVThihKwzqxFi2P+YnyyR/YhFfcB+WEFr3
YK1Lvv5Qsvfw0oEMCzxXN4VG+3fSgqZRNDIw5Mw2Mc3npI6ysQBRECSHA/aYWQbF
Ot3rgL2GWOKNKJjEXunyp1v3irzmBlCv5/0AmO6JsRWVWg/7/86o8fB7joDvpIDR
iwVUUIJ07M0UFeBuOHqzHfv5v7rsectENOkPO+NNQ6wOenKtwiOURps05esckGvA
SLQchzHgLV2QHdvgcwiX7qwpCZ4/Uu8M4YE5E1US0BrcoqpBciFdmCLAQCc9ryIT
bAQF9OCsczE9Aw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:39:04 2026 by rpki-client