Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
File: _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json)
Hash identifier: 8eFIm6b+B/Rgep+hamQ0PJlS9bjHH35RgikqUMETfUI=
Subject key identifier: 8F:80:0D:96:6C:CC:C5:EF:B1:BA:F3:44:78:FF:49:57:0D:0A:2E:0F
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Certificate issuer: /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial: 019D269677AD0EDA028E1F90FD9CF27F2AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
Manifest number: 09F9
Signing time: Wed 25 Mar 2026 20:01:28 +0000
Manifest this update: Wed 25 Mar 2026 20:01:28 +0000
Manifest next update: Thu 26 Mar 2026 20:01:28 +0000
Files and hashes: 1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: pLTYImsPS8fMO2Wo1DxgwhsQdJN96zgBoeq5AVOgm9Q=)
2: jON8jV9Q2GLdoq1oYbTtzWvSeAw.roa (hash: CpfaNm7QCE9dRH1Z5uGSs1NzanRsXUOVz00UoK4+1jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:77:ad:0e:da:02:8e:1f:90:fd:9c:f2:7f:2a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Validity
Not Before: Mar 25 20:01:28 2026 GMT
Not After : Mar 26 20:01:28 2026 GMT
Subject: CN=8f800d966cccc5efb1baf34478ff49570d0a2e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:43:da:eb:2d:bd:81:fb:ea:7a:ec:97:33:
e2:d7:0f:c9:97:ad:a4:5a:cd:05:02:54:b8:a5:2a:
93:51:b8:25:dc:f0:13:88:d9:6e:19:da:b9:89:02:
65:40:9e:ee:b6:38:88:38:44:cb:ba:20:07:46:69:
34:b0:7b:14:84:a6:da:f2:9a:5a:48:ce:c6:86:04:
5b:2c:29:c7:23:c8:dc:4e:c9:a1:75:26:8f:c0:b0:
64:3e:5d:30:4d:fd:23:ee:3a:3e:1b:4a:09:ce:f6:
a6:ea:04:e3:b5:20:69:74:f1:ac:0a:9c:a5:40:fe:
da:2d:cc:5e:a1:1c:d5:d6:72:1b:44:f7:a7:ba:7c:
0f:84:d0:51:be:cb:e9:ed:37:0a:24:87:93:a3:a0:
26:08:e2:93:e4:b8:64:11:bd:f9:82:0d:da:0b:2a:
60:a6:76:78:f7:17:dc:ed:c7:ff:13:b3:a6:79:f2:
87:f9:8c:c0:b1:14:50:8d:29:27:44:35:a3:fe:5a:
81:a8:be:e4:b6:5f:1c:6f:2c:6b:10:aa:57:d7:0c:
30:c8:3d:a9:21:88:05:6a:ed:da:34:db:10:e3:d5:
9e:5a:b8:8e:1b:a7:20:0c:5b:59:a7:40:94:1e:b4:
ce:79:04:b7:2c:26:c5:39:0a:88:ef:0a:c5:a4:c6:
c6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:80:0D:96:6C:CC:C5:EF:B1:BA:F3:44:78:FF:49:57:0D:0A:2E:0F
X509v3 Authority Key Identifier:
keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c3:d8:c0:bb:7e:89:89:92:33:69:16:39:d6:89:2d:75:ab:
af:5d:40:b2:83:bf:6c:66:94:60:2f:e6:4c:84:da:f3:c8:9c:
a1:0e:84:6f:12:70:90:14:7e:49:77:0d:79:3b:06:31:d7:ac:
67:46:f7:b4:be:db:13:85:84:9e:4b:52:25:1a:29:c7:76:a7:
66:a4:82:91:d4:5f:11:e1:68:45:6c:3c:32:d7:3d:77:97:eb:
ed:27:c1:aa:a4:0f:82:bc:69:c6:a8:8f:17:8c:f9:03:f7:39:
6c:c6:6c:2c:2e:f3:2a:e6:12:64:d1:e2:a3:38:e7:d6:ef:3d:
5c:d7:4c:ba:9a:28:df:b5:3f:7c:f0:b4:03:78:f0:cb:de:a9:
09:be:62:f7:93:e2:51:e2:44:c1:08:c8:39:96:69:d0:88:93:
c2:14:cd:1d:20:6a:0a:6a:5f:07:50:2c:29:a6:c0:a7:d9:c6:
63:b7:38:fc:d5:08:72:e8:9d:b5:cf:d7:4b:7d:07:c7:37:00:
38:22:e1:85:ea:27:4b:06:e5:81:71:15:fe:4f:e9:de:97:77:
da:11:06:ae:ce:67:ea:e7:68:d3:b6:0a:ec:9e:26:52:ae:f9:
53:b1:15:62:28:df:af:0e:aa:61:11:2d:a3:77:31:87:61:31:
9e:42:53:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlnetDtoCjh+Q/Zzyfyr2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZmM5NWYxYjg4MDExZTZkYzMzZDA0MWI5OGIzMTMwNzc2
YzQyOGYwHhcNMjYwMzI1MjAwMTI4WhcNMjYwMzI2MjAwMTI4WjAzMTEwLwYDVQQD
Eyg4ZjgwMGQ5NjZjY2NjNWVmYjFiYWYzNDQ3OGZmNDk1NzBkMGEyZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VlD2ustvYH76nrslzPi1w/Jl62k
Ws0FAlS4pSqTUbgl3PATiNluGdq5iQJlQJ7utjiIOETLuiAHRmk0sHsUhKba8ppa
SM7GhgRbLCnHI8jcTsmhdSaPwLBkPl0wTf0j7jo+G0oJzvam6gTjtSBpdPGsCpyl
QP7aLcxeoRzV1nIbRPenunwPhNBRvsvp7TcKJIeTo6AmCOKT5LhkEb35gg3aCypg
pnZ49xfc7cf/E7OmefKH+YzAsRRQjSknRDWj/lqBqL7ktl8cbyxrEKpX1wwwyD2p
IYgFau3aNNsQ49WeWriOG6cgDFtZp0CUHrTOeQS3LCbFOQqI7wrFpMbGFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+ADZZszMXvsbrzRHj/SVcNCi4PMB8GA1UdIwQY
MBaAFPz8lfG4gBHm3DPQQbmLMTB3bEKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1B5VjhiaUFFZWJjTTlCQnVZc3hNSGRzUW84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zNzJkMjktMDc1ZS00N2ZhLTljOGYt
OGY0YjA2NDVkNjA0LzEvX1B5VjhiaUFFZWJjTTlCQnVZc3hNSGRzUW84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zNzJkMjktMDc1ZS00N2ZhLTljOGYtOGY0YjA2NDVkNjA0
LzEvX1B5VjhiaUFFZWJjTTlCQnVZc3hNSGRzUW84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMPYwLt+
iYmSM2kWOdaJLXWrr11AsoO/bGaUYC/mTITa88icoQ6EbxJwkBR+SXcNeTsGMdes
Z0b3tL7bE4WEnktSJRopx3anZqSCkdRfEeFoRWw8Mtc9d5fr7SfBqqQPgrxpxqiP
F4z5A/c5bMZsLC7zKuYSZNHiozjn1u89XNdMupoo37U/fPC0A3jwy96pCb5i95Pi
UeJEwQjIOZZp0IiTwhTNHSBqCmpfB1AsKabAp9nGY7c4/NUIcuidtc/XS30HxzcA
OCLhheonSwblgXEV/k/p3pd32hEGrs5n6udo07YK7J4mUq75U7EVYijfrw6qYREt
o3cxh2ExnkJTDg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:00 2026 by rpki-client