Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier: maormFcgBl7QTzEb60NcMQ+Uf4qQe7Ejrct9YLJcWHY=
Subject key identifier: 42:1A:94:56:E6:3B:C9:5B:A9:F5:74:0B:DF:01:98:F7:11:57:B1:4F
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer: /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial: 019D25F136BB579883FA9564D97181D456CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:00:57 +0000
Manifest this update: Wed 25 Mar 2026 17:00:57 +0000
Manifest next update: Thu 26 Mar 2026 17:00:57 +0000
Files and hashes: 1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: 1UW54bl3iyxgaEHKAsP7f4SHzQGLmsdl11f9WdYsB+g=)
2: mqnfQZBp8h7WvOAdc-8gqdHYqtw.roa (hash: ewJdIlVBdFix7giIGBtZRJXpQjmTUTAe4SWLnLx8JZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:36:bb:57:98:83:fa:95:64:d9:71:81:d4:56:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Validity
Not Before: Mar 25 17:00:57 2026 GMT
Not After : Mar 26 17:00:57 2026 GMT
Subject: CN=421a9456e63bc95ba9f5740bdf0198f71157b14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:ca:4d:6a:30:ab:e0:17:e4:87:9e:27:23:
3a:67:87:77:33:11:ad:c0:60:a2:ef:c7:d7:39:c2:
e9:09:cd:af:8f:51:fa:28:f0:c4:22:87:01:35:bb:
17:ad:f7:57:ca:0d:c2:2b:ce:95:29:c9:6a:57:51:
b9:76:bf:68:1d:f4:b9:df:40:27:e3:b9:8b:6f:69:
ad:91:06:40:30:c8:2e:eb:f6:de:94:79:67:40:65:
7e:4a:7c:a7:dc:ee:78:9a:aa:82:bd:23:bb:a0:97:
a0:fe:72:74:a8:ec:47:57:cf:69:fc:77:18:25:89:
e4:f2:79:90:82:77:c1:03:a7:fc:81:6a:f9:48:88:
96:4e:86:e9:d9:e1:ca:ad:9e:e5:44:27:7f:38:e7:
0b:7c:52:df:3f:d8:e2:f6:b5:28:3a:e1:76:97:2c:
8a:83:eb:11:99:e4:ee:66:62:53:ce:99:da:38:49:
58:eb:4c:30:c0:f3:c4:c3:86:d2:1d:84:07:3b:ea:
b8:ff:eb:0f:fc:05:09:c4:9f:5f:be:c7:3b:c3:06:
e0:aa:ca:2d:c6:dd:1a:6b:c5:ee:e1:a1:05:55:1b:
4b:8b:5e:f2:8e:6c:12:11:5b:5b:83:85:25:0a:49:
22:2b:7a:32:4b:fa:58:4c:a6:2d:20:a4:8e:fe:60:
90:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1A:94:56:E6:3B:C9:5B:A9:F5:74:0B:DF:01:98:F7:11:57:B1:4F
X509v3 Authority Key Identifier:
keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:92:d8:29:05:3b:f6:85:cf:e3:59:ef:19:ef:3c:8d:a0:eb:
25:b4:79:d5:3b:c0:e9:11:24:27:7f:07:9b:78:fb:ee:15:66:
f2:d1:a8:13:03:a7:6d:5c:df:be:af:2e:13:bc:b6:fc:4b:57:
2b:f6:32:f1:f2:c8:ae:86:fd:af:57:d4:03:d2:18:97:2c:26:
d3:7b:6d:49:86:6d:b9:5b:f3:31:b3:26:eb:ef:72:13:f1:b2:
12:27:3e:4f:7e:ed:da:ec:9d:8b:db:4f:72:dc:f0:12:83:18:
7f:0e:61:08:fa:29:53:37:7f:14:77:12:2e:15:2e:ea:93:ae:
55:37:5e:75:1e:3a:95:1b:f0:46:fb:59:8a:dd:43:35:e6:d7:
41:8c:95:19:a2:dc:e9:74:f4:02:9b:0d:9c:6b:90:00:65:42:
cf:5c:58:27:d6:2c:23:3b:05:96:c1:fb:a4:b6:93:af:7c:98:
df:5e:d7:07:a7:cf:67:aa:9f:9a:ec:bf:e1:22:4f:82:97:89:
d8:5f:05:b8:4c:64:39:44:b6:76:e9:b2:56:4d:05:c2:39:cb:
f4:40:e3:a3:81:00:bb:78:e3:04:1d:f0:1c:94:95:01:3e:a6:
9f:11:5c:0f:df:0c:7d:98:a5:26:7f:93:d1:d5:88:13:34:87:
22:ca:14:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8Ta7V5iD+pVk2XGB1FbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTU0ZDAxMDNhN2EzZTY1MjM1NGE3NDQ4OWY4NmRhZjlh
MWE1OWQwHhcNMjYwMzI1MTcwMDU3WhcNMjYwMzI2MTcwMDU3WjAzMTEwLwYDVQQD
Eyg0MjFhOTQ1NmU2M2JjOTViYTlmNTc0MGJkZjAxOThmNzExNTdiMTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwenKTWowq+AX5IeeJyM6Z4d3MxGt
wGCi78fXOcLpCc2vj1H6KPDEIocBNbsXrfdXyg3CK86VKclqV1G5dr9oHfS530An
47mLb2mtkQZAMMgu6/belHlnQGV+Snyn3O54mqqCvSO7oJeg/nJ0qOxHV89p/HcY
JYnk8nmQgnfBA6f8gWr5SIiWTobp2eHKrZ7lRCd/OOcLfFLfP9ji9rUoOuF2lyyK
g+sRmeTuZmJTzpnaOElY60wwwPPEw4bSHYQHO+q4/+sP/AUJxJ9fvsc7wwbgqsot
xt0aa8Xu4aEFVRtLi17yjmwSEVtbg4UlCkkiK3oyS/pYTKYtIKSO/mCQMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIalFbmO8lbqfV0C98BmPcRV7FPMB8GA1UdIwQY
MBaAFPaVTQEDp6PmUjVKdEifhtr5oaWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NDA1NTAtZGFhYi00YzlkLTg0NDAt
ZjhjOWUwOTYyMzU0LzEvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85NDA1NTAtZGFhYi00YzlkLTg0NDAtZjhjOWUwOTYyMzU0
LzEvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJLYKQU7
9oXP41nvGe88jaDrJbR51TvA6REkJ38Hm3j77hVm8tGoEwOnbVzfvq8uE7y2/EtX
K/Yy8fLIrob9r1fUA9IYlywm03ttSYZtuVvzMbMm6+9yE/GyEic+T37t2uydi9tP
ctzwEoMYfw5hCPopUzd/FHcSLhUu6pOuVTdedR46lRvwRvtZit1DNebXQYyVGaLc
6XT0ApsNnGuQAGVCz1xYJ9YsIzsFlsH7pLaTr3yY317XB6fPZ6qfmuy/4SJPgpeJ
2F8FuExkOUS2dumyVk0FwjnL9EDjo4EAu3jjBB3wHJSVAT6mnxFcD98MfZilJn+T
0dWIEzSHIsoUWg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:46 2026 by rpki-client