Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier: Ofi8Fw6M7engZsUnOGu4jA4vgillW2aeJRfWhEGSEVc=
Subject key identifier: E1:A6:03:3E:DD:EB:02:76:F2:EA:C9:31:07:B2:A8:D7:9A:1A:46:98
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 019D27DF68B56D5AFD16191BA2189143DB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number: 0997
Signing time: Thu 26 Mar 2026 02:00:45 +0000
Manifest this update: Thu 26 Mar 2026 02:00:45 +0000
Manifest next update: Fri 27 Mar 2026 02:00:45 +0000
Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: 35rtF4OMjgYvOHQBiosqA9/clVWEWiNL3t46huAeQFQ=)
2: 66weAc2jQR4cpqZJijFd1sf301w.roa (hash: QzlH+p0PV5zvwqJmhfFaYurkNZtY37Urkhr+A3Txvmc=)
3: FOIGx5-VXjOve-N7mfII03ytFD0.roa (hash: e4g2C3HACEw66dXSjAJV8WZd57r1VCKWLBncQ7FYwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:68:b5:6d:5a:fd:16:19:1b:a2:18:91:43:db:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Mar 26 02:00:45 2026 GMT
Not After : Mar 27 02:00:45 2026 GMT
Subject: CN=e1a6033eddeb0276f2eac93107b2a8d79a1a4698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:e4:7d:30:8c:d0:d1:44:d6:26:04:8a:e6:
d3:9e:55:e3:63:0d:de:0c:55:08:e0:f2:e7:2f:6f:
42:b0:2f:22:c7:bc:29:bf:a7:61:89:b1:bf:c6:87:
80:cf:83:7f:59:fb:e9:61:9d:59:d5:6b:98:42:25:
18:78:dd:23:54:2a:7c:db:bb:27:d5:51:54:9f:f5:
ac:10:4a:2c:60:0f:39:d4:32:62:fa:fc:b0:00:27:
64:48:ae:14:80:e4:21:09:e8:d5:7e:43:60:6c:ff:
9f:24:ca:a7:59:f7:66:10:e5:7e:34:eb:c7:76:d6:
2e:71:a9:77:14:cb:e1:b2:2a:f7:e8:0d:09:3c:43:
e0:c6:73:04:42:89:56:ba:0e:47:5d:4e:07:37:1a:
99:31:12:b6:4f:77:ad:92:98:61:43:2a:68:d8:e8:
6c:33:2f:37:d5:3d:16:ca:1d:30:04:7d:93:0b:b1:
f0:f8:7f:31:4e:de:ea:59:f9:62:dc:25:73:a3:c5:
d6:9b:eb:cc:06:31:9a:48:79:cd:5a:a8:46:73:70:
0b:70:9d:b4:17:20:ae:44:a1:2b:e9:6f:87:b1:7a:
a1:97:29:cf:a4:d4:7f:7c:17:c8:02:c5:b7:12:8b:
ef:bc:b7:d7:11:ad:13:2e:f9:65:09:6e:a9:b8:30:
b1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A6:03:3E:DD:EB:02:76:F2:EA:C9:31:07:B2:A8:D7:9A:1A:46:98
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:84:98:51:f2:75:32:20:1c:a6:6a:21:ad:76:81:13:01:00:
62:9b:fb:bc:2b:85:9f:e4:c1:9a:cd:be:45:e6:3e:0d:d9:9a:
25:3e:03:9a:bd:d2:0c:99:15:1a:b8:59:1c:c4:b7:b4:bd:65:
41:5c:ed:40:cc:b0:fb:7a:0e:9d:c1:86:32:27:cd:68:c1:83:
14:ac:34:f2:f4:f4:b8:c3:49:16:70:80:0a:6e:3e:33:1f:85:
c0:de:99:87:7f:c1:06:9b:5e:0c:9a:c5:77:25:30:73:0e:e7:
5f:c4:b7:26:7c:74:d5:14:8e:73:59:ce:02:61:14:02:ef:62:
69:3f:28:c7:61:a6:48:44:66:6f:8f:f1:84:66:27:1e:5d:9c:
09:1e:7b:35:77:e0:8a:c6:d1:6f:8a:32:08:b7:bd:7c:28:da:
c5:7b:b1:35:55:fc:53:f9:2f:06:81:41:d5:00:3e:49:7e:13:
58:df:46:c1:3f:84:53:61:6c:29:a5:f1:e5:79:e9:7b:ee:ed:
a6:9b:54:39:2d:38:90:b6:0e:57:35:4e:37:28:63:56:a5:b0:
64:94:71:d3:0d:d5:e2:73:47:d6:2e:83:82:48:3e:74:d6:04:
cd:5d:19:79:f5:9d:12:c1:62:2d:da:00:6a:7e:cc:4b:fa:4b:
59:f7:48:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n32i1bVr9FhkbohiRQ9tSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZDRlMGRhNjhjMTQ0NjY4OTQxOWQxMDM3MTFiMTkxZGVk
NTY3ZjQwHhcNMjYwMzI2MDIwMDQ1WhcNMjYwMzI3MDIwMDQ1WjAzMTEwLwYDVQQD
EyhlMWE2MDMzZWRkZWIwMjc2ZjJlYWM5MzEwN2IyYThkNzlhMWE0Njk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjPkfTCM0NFE1iYEiubTnlXjYw3e
DFUI4PLnL29CsC8ix7wpv6dhibG/xoeAz4N/WfvpYZ1Z1WuYQiUYeN0jVCp827sn
1VFUn/WsEEosYA851DJi+vywACdkSK4UgOQhCejVfkNgbP+fJMqnWfdmEOV+NOvH
dtYucal3FMvhsir36A0JPEPgxnMEQolWug5HXU4HNxqZMRK2T3etkphhQypo2Ohs
My831T0Wyh0wBH2TC7Hw+H8xTt7qWfli3CVzo8XWm+vMBjGaSHnNWqhGc3ALcJ20
FyCuRKEr6W+HsXqhlynPpNR/fBfIAsW3EovvvLfXEa0TLvllCW6puDCxAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGmAz7d6wJ28urJMQeyqNeaGkaYMB8GA1UdIwQY
MBaAFNPU4NpowURmiUGdEDcRsZHe1Wf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zODE1ZTMtZDNhOC00YjNjLWE0YjIt
Y2IzNDRmMTgwMGVkLzEvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8zODE1ZTMtZDNhOC00YjNjLWE0YjItY2IzNDRmMTgwMGVk
LzEvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFISYUfJ1
MiAcpmohrXaBEwEAYpv7vCuFn+TBms2+ReY+DdmaJT4Dmr3SDJkVGrhZHMS3tL1l
QVztQMyw+3oOncGGMifNaMGDFKw08vT0uMNJFnCACm4+Mx+FwN6Zh3/BBpteDJrF
dyUwcw7nX8S3Jnx01RSOc1nOAmEUAu9iaT8ox2GmSERmb4/xhGYnHl2cCR57NXfg
isbRb4oyCLe9fCjaxXuxNVX8U/kvBoFB1QA+SX4TWN9GwT+EU2FsKaXx5Xnpe+7t
pptUOS04kLYOVzVONyhjVqWwZJRx0w3V4nNH1i6Dgkg+dNYEzV0ZefWdEsFiLdoA
an7MS/pLWfdIJw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:13 2026 by rpki-client