Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier: tDBZBkC8XQbwbCc7EwPowb/PlGQAkyMA8pXbPUm/2Sw=
Subject key identifier: 89:41:67:6C:FA:41:FE:63:32:DC:C1:F4:2A:4E:7C:03:87:79:54:8F
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 019D2960E957DEF1FDBAEDCF52796ACFB08D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number: 0DBA
Signing time: Thu 26 Mar 2026 09:01:50 +0000
Manifest this update: Thu 26 Mar 2026 09:01:50 +0000
Manifest next update: Fri 27 Mar 2026 09:01:50 +0000
Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: oc+X48ZvKyyVqLkE2ISXuI/ijz1aEomgHFkf6E2EGfo=)
2: yCy_86dbJqoexnTrD2dlicXc2yE.roa (hash: JBNXmhezJRCIp5u3OP1UX59OO3DddhKcgHEEF7XBd38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:e9:57:de:f1:fd:ba:ed:cf:52:79:6a:cf:b0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: Mar 26 09:01:50 2026 GMT
Not After : Mar 27 09:01:50 2026 GMT
Subject: CN=8941676cfa41fe6332dcc1f42a4e7c038779548f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:74:ab:4f:e3:c2:bb:40:06:ee:19:a3:a8:59:
55:2d:5a:ba:32:1f:5b:ac:ad:24:67:f7:be:36:1c:
c0:a9:77:d6:02:7f:ef:56:81:f1:13:05:15:76:fc:
d8:ba:27:c1:47:92:ed:0c:9d:97:61:76:79:8e:bc:
53:19:b9:80:dd:02:8d:73:19:b4:2c:98:60:61:13:
39:6d:31:76:e2:19:b4:8c:ef:33:03:ab:ac:bd:ff:
9a:fe:88:8f:06:5b:c1:80:60:cf:60:31:42:10:64:
ca:cf:92:e3:bb:8c:3b:9a:e2:b7:81:94:57:65:66:
03:6c:c0:f4:27:19:03:d6:e8:a2:bc:ae:8c:2a:41:
47:95:f2:af:f9:fa:27:69:83:53:36:5b:b0:f1:21:
43:b7:87:34:fb:97:91:60:86:38:71:1f:0d:af:58:
b3:e5:62:9b:43:1e:a4:75:16:0e:54:3f:d6:fa:90:
c0:79:e9:bb:57:04:04:12:29:c7:fa:3e:99:f2:dc:
bf:1a:89:f9:8b:af:2b:99:8d:7a:7d:3b:a6:a6:b6:
0b:87:a0:fc:df:b2:1e:44:93:a9:eb:ee:a5:8c:bb:
cb:b5:e7:e7:f8:79:82:af:3e:2c:98:0f:4e:3c:99:
59:f4:bf:3d:4b:8d:2a:3f:5d:c7:38:3b:12:c5:1b:
13:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:41:67:6C:FA:41:FE:63:32:DC:C1:F4:2A:4E:7C:03:87:79:54:8F
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:85:6d:36:fc:2a:66:a0:36:ba:c5:eb:5d:d7:85:b1:76:72:
d3:3b:e2:21:5f:7d:3b:06:d2:2b:ed:7e:85:bc:ab:63:e1:b8:
56:6c:d6:8c:8c:33:bc:d1:bc:20:d0:73:55:63:72:71:a0:57:
b9:15:bb:5e:4e:6f:53:ca:ab:0a:ff:a9:a9:00:fc:da:d9:57:
f6:32:2b:0a:4c:b6:ab:3a:1b:f7:17:88:2e:23:a2:51:88:89:
16:bc:d2:88:83:c0:90:0c:52:93:2f:34:87:ef:61:b3:ef:fe:
0a:3d:d7:18:ac:5e:71:0f:31:8e:6e:4a:09:d5:89:d9:52:81:
dd:42:f1:bc:06:2e:ce:12:c4:02:11:f4:a0:2f:a7:d0:a9:19:
b8:60:e2:89:57:15:c0:19:df:bb:17:8d:f4:e8:06:5f:8c:ba:
d9:b8:16:0d:d7:04:de:ca:88:4f:70:78:0c:ef:7c:15:ee:47:
0b:c0:ad:35:60:46:46:ca:c4:42:f1:79:80:df:9e:60:8d:2f:
2e:1c:78:70:ee:83:15:da:9a:b5:9f:11:c2:eb:82:14:58:39:
35:00:18:cc:d7:58:65:c6:40:df:90:ee:b2:fb:7f:43:81:04:
0a:f9:f1:19:ed:13:00:f7:d7:e7:0d:a1:5f:78:f5:51:88:b9:
d5:90:53:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYOlX3vH9uu3PUnlqz7CNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODk3ZmRiZGM3ZDI1MDhkZmNkMTRjZmY2MDBhZDQzYjky
NzkyNGIwHhcNMjYwMzI2MDkwMTUwWhcNMjYwMzI3MDkwMTUwWjAzMTEwLwYDVQQD
Eyg4OTQxNjc2Y2ZhNDFmZTYzMzJkY2MxZjQyYTRlN2MwMzg3Nzk1NDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63SrT+PCu0AG7hmjqFlVLVq6Mh9b
rK0kZ/e+NhzAqXfWAn/vVoHxEwUVdvzYuifBR5LtDJ2XYXZ5jrxTGbmA3QKNcxm0
LJhgYRM5bTF24hm0jO8zA6usvf+a/oiPBlvBgGDPYDFCEGTKz5Lju4w7muK3gZRX
ZWYDbMD0JxkD1uiivK6MKkFHlfKv+fonaYNTNluw8SFDt4c0+5eRYIY4cR8Nr1iz
5WKbQx6kdRYOVD/W+pDAeem7VwQEEinH+j6Z8ty/Gon5i68rmY16fTumprYLh6D8
37IeRJOp6+6ljLvLtefn+HmCrz4smA9OPJlZ9L89S40qP13HODsSxRsTXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlBZ2z6Qf5jMtzB9CpOfAOHeVSPMB8GA1UdIwQY
MBaAFPSJf9vcfSUI380Uz/YArUO5J5JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEt
OTRjNmY3NDRkZTQ2LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEtOTRjNmY3NDRkZTQ2
LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoVtNvwq
ZqA2usXrXdeFsXZy0zviIV99OwbSK+1+hbyrY+G4VmzWjIwzvNG8INBzVWNycaBX
uRW7Xk5vU8qrCv+pqQD82tlX9jIrCky2qzob9xeILiOiUYiJFrzSiIPAkAxSky80
h+9hs+/+Cj3XGKxecQ8xjm5KCdWJ2VKB3ULxvAYuzhLEAhH0oC+n0KkZuGDiiVcV
wBnfuxeN9OgGX4y62bgWDdcE3sqIT3B4DO98Fe5HC8CtNWBGRsrEQvF5gN+eYI0v
Lhx4cO6DFdqatZ8RwuuCFFg5NQAYzNdYZcZA35Dusvt/Q4EECvnxGe0TAPfX5w2h
X3j1UYi51ZBTOA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:19:07 2026 by rpki-client