Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: 0V08MB9Sqnw2gefe3CIsawXA5oEE5sPsNTzdodsg06c=
Subject key identifier: EF:8C:04:7F:87:7A:8D:64:26:36:AE:09:FD:9B:14:CB:44:14:2F:31
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 019D25F19C8D108F90ABA27E91DA21B92812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 08EA
Signing time: Wed 25 Mar 2026 17:01:24 +0000
Manifest this update: Wed 25 Mar 2026 17:01:24 +0000
Manifest next update: Thu 26 Mar 2026 17:01:24 +0000
Files and hashes: 1: 0DAQlpT9x-QaKyJ8cOE4xeRFybQ.roa (hash: cLzURrgNbzm6pPzLt8hQc5OKqgGCPtGdJQ9/RRN5LZU=)
2: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: C9Rtlja2kOLd3nelCGOoukr6uvJNb8W52cu3cUN/5hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:9c:8d:10:8f:90:ab:a2:7e:91:da:21:b9:28:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Mar 25 17:01:24 2026 GMT
Not After : Mar 26 17:01:24 2026 GMT
Subject: CN=ef8c047f877a8d642636ae09fd9b14cb44142f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:98:e0:b0:e0:fd:cd:ed:79:61:32:13:0a:
c2:c1:86:f7:0b:df:37:5c:13:d3:1a:1b:3b:69:15:
06:2a:24:8f:4b:ec:56:4c:0d:e3:81:7a:06:15:50:
e9:c0:1e:a5:fb:bc:89:85:7f:9d:fd:62:fa:86:07:
c2:54:9b:9c:32:7b:e3:54:45:2f:63:f8:35:c2:e5:
fe:75:4e:39:57:25:19:47:a0:6a:0f:34:08:b2:8c:
24:de:d6:67:d0:4c:3c:65:a3:f9:3e:4f:82:cd:f9:
db:02:73:59:2f:d1:a0:fd:c4:74:0f:3b:d4:2b:57:
00:d0:42:75:ca:4d:b4:7d:e5:b2:f0:be:3f:2d:83:
a3:5d:db:14:e2:c6:5f:d5:18:95:72:97:81:ea:59:
e4:e3:0d:7a:78:3e:f7:97:93:d9:58:f5:3c:10:31:
64:e9:06:40:c4:5a:94:f6:3a:65:e9:0e:e6:29:0d:
d5:66:45:22:ed:2f:c9:18:27:90:d2:1e:9a:fd:23:
76:db:1f:f6:c4:64:8d:8b:e5:b4:58:b2:46:2c:66:
bf:4b:81:13:59:5e:9c:7c:fb:39:ee:2b:90:d7:0f:
75:c0:f9:eb:40:4e:d8:c7:a4:aa:95:86:06:30:d3:
e3:18:76:6e:c4:ff:cb:7c:3e:7f:8b:1c:a0:65:3c:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8C:04:7F:87:7A:8D:64:26:36:AE:09:FD:9B:14:CB:44:14:2F:31
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e3:77:bc:8a:cf:c7:84:5b:24:94:24:75:37:ff:8a:dd:86:
e8:53:68:b9:a0:a3:a6:b8:8c:bf:86:f8:93:5a:8a:f2:e5:cf:
46:5f:e6:57:4d:12:08:f0:63:8e:09:4e:ff:94:3c:fd:2b:65:
a6:df:24:24:3e:ab:01:f2:20:3b:8d:f8:af:70:16:b1:3c:5a:
b0:0b:e2:12:c2:5b:56:55:a7:0d:a4:99:0a:de:87:03:c5:d4:
50:87:db:cb:a4:df:ad:58:90:87:70:7c:03:c6:f2:a7:10:82:
b5:d5:88:05:e0:c6:18:4b:33:29:bf:b9:0f:47:28:a8:81:03:
64:f0:a6:47:73:de:d1:00:b3:2c:e1:b9:70:b8:e0:83:0b:08:
1b:57:a6:c3:1b:89:b9:18:0f:3b:a8:1e:15:27:d1:92:6c:c9:
9c:72:dd:98:57:17:66:ee:e2:7b:22:01:9c:32:dd:d5:6e:5c:
96:bb:10:15:07:dd:46:95:b9:e4:bd:4c:11:27:ac:d5:1f:9f:
7e:1e:34:69:9f:7e:a7:48:47:d9:39:05:16:0b:3a:8e:0e:df:
4c:d2:68:27:06:c8:70:f2:ac:b0:a3:2c:51:95:50:49:a4:0d:
ee:9f:98:32:b5:ec:54:6e:71:99:55:2b:b5:0a:81:64:9f:a2:
33:c7:95:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8ZyNEI+Qq6J+kdohuSgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MmU5YTA0M2YzMTI4MzM2ZTNjOTdjMjU0MjU3NGM4YWQ5
MjlhYzkwHhcNMjYwMzI1MTcwMTI0WhcNMjYwMzI2MTcwMTI0WjAzMTEwLwYDVQQD
EyhlZjhjMDQ3Zjg3N2E4ZDY0MjYzNmFlMDlmZDliMTRjYjQ0MTQyZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c+Y4LDg/c3teWEyEwrCwYb3C983
XBPTGhs7aRUGKiSPS+xWTA3jgXoGFVDpwB6l+7yJhX+d/WL6hgfCVJucMnvjVEUv
Y/g1wuX+dU45VyUZR6BqDzQIsowk3tZn0Ew8ZaP5Pk+CzfnbAnNZL9Gg/cR0DzvU
K1cA0EJ1yk20feWy8L4/LYOjXdsU4sZf1RiVcpeB6lnk4w16eD73l5PZWPU8EDFk
6QZAxFqU9jpl6Q7mKQ3VZkUi7S/JGCeQ0h6a/SN22x/2xGSNi+W0WLJGLGa/S4ET
WV6cfPs57iuQ1w91wPnrQE7Yx6SqlYYGMNPjGHZuxP/LfD5/ixygZTxFuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+MBH+Heo1kJjauCf2bFMtEFC8xMB8GA1UdIwQY
MBaAFPUumgQ/MSgzbjyXwlQldMitkprJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTkt
ZWZmOGI5NWQyMGM1LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTktZWZmOGI5NWQyMGM1
LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAION3vIrP
x4RbJJQkdTf/it2G6FNouaCjpriMv4b4k1qK8uXPRl/mV00SCPBjjglO/5Q8/Stl
pt8kJD6rAfIgO434r3AWsTxasAviEsJbVlWnDaSZCt6HA8XUUIfby6TfrViQh3B8
A8bypxCCtdWIBeDGGEszKb+5D0coqIEDZPCmR3Pe0QCzLOG5cLjggwsIG1emwxuJ
uRgPO6geFSfRkmzJnHLdmFcXZu7ieyIBnDLd1W5clrsQFQfdRpW55L1MESes1R+f
fh40aZ9+p0hH2TkFFgs6jg7fTNJoJwbIcPKssKMsUZVQSaQN7p+YMrXsVG5xmVUr
tQqBZJ+iM8eVEA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:10 2026 by rpki-client