Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: oS+iTg0ARdNyBJ5Jx8wgOhsT8Gl0tWlzcniVXFj7sV0=
Subject key identifier: D2:86:6B:71:39:69:A7:1C:92:54:40:31:A1:5C:25:CD:E1:A3:12:8E
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 019D273ADADDE8BFBFA8A0B729BE7B4BA877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 0F67
Signing time: Wed 25 Mar 2026 23:01:01 +0000
Manifest this update: Wed 25 Mar 2026 23:01:01 +0000
Manifest next update: Thu 26 Mar 2026 23:01:01 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: XlQ2/H+u38UHLiOzpjKuQntN63W3VR/vDs3uKQVICqM=)
2: h5DIp02VidThuOHraMPFCodvygs.roa (hash: xwNLtlpo98S4VMl0NrrQV2mRppmcREH8EvSc90IeL2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:da:dd:e8:bf:bf:a8:a0:b7:29:be:7b:4b:a8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Mar 25 23:01:01 2026 GMT
Not After : Mar 26 23:01:01 2026 GMT
Subject: CN=d2866b713969a71c92544031a15c25cde1a3128e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:eb:db:5b:ba:94:ca:25:08:32:b1:bf:11:
3b:59:34:70:64:ac:96:61:d4:40:73:3c:e7:fa:5b:
19:1e:8a:7b:74:51:5e:20:6e:ff:d6:3b:86:24:1a:
31:6e:b4:dc:3f:93:76:7b:39:44:25:e7:52:2d:d6:
68:a1:ca:0d:1c:e3:09:0c:ca:02:13:c3:8f:84:04:
17:b7:42:fe:fe:87:43:84:9f:a1:d3:09:2f:7e:50:
55:ad:b0:0b:d1:26:d5:fb:a2:8a:c9:f6:9a:f6:f0:
1d:74:d8:a1:a6:91:3e:00:a2:ea:3e:0c:a4:42:14:
c3:83:44:27:a5:a8:e0:99:07:2c:cb:44:67:1a:03:
a3:06:af:e1:a2:62:1a:6f:42:cb:2e:d1:5d:7c:a4:
13:89:91:d7:97:f9:cb:6a:14:cd:45:5c:0b:5d:86:
0a:11:8f:bd:ae:98:72:a5:8e:ce:be:bd:d3:80:59:
47:11:e9:6f:61:99:6f:b3:ee:25:c4:35:56:52:22:
0c:b9:3e:27:67:f7:3d:a9:1c:e7:5c:81:cb:9b:e2:
3e:92:5f:85:28:92:01:da:1a:de:88:f1:88:f3:9b:
ed:f3:47:0b:7f:4d:09:15:51:a6:05:b1:eb:15:4d:
9e:b8:03:e7:8f:cb:17:2c:b7:ca:69:da:66:07:a2:
b3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:86:6B:71:39:69:A7:1C:92:54:40:31:A1:5C:25:CD:E1:A3:12:8E
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f8:75:77:a8:38:ac:87:9b:ad:1d:55:30:67:85:73:d3:31:
b2:a8:92:b0:db:4d:f3:92:06:1f:bd:db:06:eb:95:73:e5:a8:
12:d7:1e:a4:bc:cb:f8:2e:f8:a4:c0:69:3b:5d:6a:2b:1d:2a:
5e:8a:a6:d5:1c:55:14:ed:83:ad:55:32:c3:6c:8d:81:b2:8e:
d2:44:36:c9:9e:a7:0b:51:3e:e9:a2:cb:dd:9d:ef:26:8c:67:
d2:6d:9d:35:45:fe:3f:0f:52:95:11:54:53:e3:83:38:d1:17:
c6:21:4e:ef:6d:66:33:30:e6:48:66:89:f4:7c:cb:a5:7a:1c:
e2:23:aa:f7:27:c8:63:ba:7a:7a:e7:45:46:89:45:64:1b:1b:
67:29:d3:67:dd:20:5c:8c:66:ca:92:ea:a0:7a:39:33:6a:ec:
c5:8b:52:09:2e:65:45:96:e0:f2:5c:46:ff:c6:df:0b:16:d2:
18:68:d1:2b:20:6d:ad:62:1f:8e:86:79:8f:69:1a:f3:02:c0:
37:0b:a5:88:e2:32:72:1d:43:37:1c:81:c2:61:2a:83:08:71:
ab:90:27:dd:b7:ad:75:da:21:0f:4e:aa:24:61:83:46:2a:19:
9d:57:7b:ce:e7:74:a8:16:e3:f4:df:4c:18:28:17:26:f9:76:
57:f0:ed:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOtrd6L+/qKC3Kb57S6h3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MWI5OTgzMWQ0NGIwYmY3YzAwYzUwOTc3ZjYwYjE4NDQz
NDljZjIwHhcNMjYwMzI1MjMwMTAxWhcNMjYwMzI2MjMwMTAxWjAzMTEwLwYDVQQD
EyhkMjg2NmI3MTM5NjlhNzFjOTI1NDQwMzFhMTVjMjVjZGUxYTMxMjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7fr21u6lMolCDKxvxE7WTRwZKyW
YdRAczzn+lsZHop7dFFeIG7/1juGJBoxbrTcP5N2ezlEJedSLdZoocoNHOMJDMoC
E8OPhAQXt0L+/odDhJ+h0wkvflBVrbAL0SbV+6KKyfaa9vAddNihppE+AKLqPgyk
QhTDg0QnpajgmQcsy0RnGgOjBq/homIab0LLLtFdfKQTiZHXl/nLahTNRVwLXYYK
EY+9rphypY7Ovr3TgFlHEelvYZlvs+4lxDVWUiIMuT4nZ/c9qRznXIHLm+I+kl+F
KJIB2hreiPGI85vt80cLf00JFVGmBbHrFU2euAPnj8sXLLfKadpmB6Kz4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKGa3E5aaccklRAMaFcJc3hoxKOMB8GA1UdIwQY
MBaAFPcbmYMdRLC/fADFCXf2CxhENJzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXh1Wmd4MUVzTDk4QU1VSmRfWUxHRVEwblBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82ZTYxNzUtNjM1YS00Y2M2LTk0ZWQt
MGRjZjQ1YTVhZjNkLzEvOXh1Wmd4MUVzTDk4QU1VSmRfWUxHRVEwblBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC82ZTYxNzUtNjM1YS00Y2M2LTk0ZWQtMGRjZjQ1YTVhZjNk
LzEvOXh1Wmd4MUVzTDk4QU1VSmRfWUxHRVEwblBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnPh1d6g4
rIebrR1VMGeFc9MxsqiSsNtN85IGH73bBuuVc+WoEtcepLzL+C74pMBpO11qKx0q
Xoqm1RxVFO2DrVUyw2yNgbKO0kQ2yZ6nC1E+6aLL3Z3vJoxn0m2dNUX+Pw9SlRFU
U+ODONEXxiFO721mMzDmSGaJ9HzLpXoc4iOq9yfIY7p6eudFRolFZBsbZynTZ90g
XIxmypLqoHo5M2rsxYtSCS5lRZbg8lxG/8bfCxbSGGjRKyBtrWIfjoZ5j2ka8wLA
NwuliOIych1DNxyBwmEqgwhxq5An3betddohD06qJGGDRioZnVd7zud0qBbj9N9M
GCgXJvl2V/DtEQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:16 2026 by rpki-client