Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: TTib4A/FSm5c2hQ4uwV6XWQYojrB9KLaVt9jWBLs4hk=
Subject key identifier: 5F:B1:59:62:84:D0:90:46:11:73:40:10:7E:32:E2:34:27:0E:47:33
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 019D2A3BEFB1DC36A68F29B63020A6002411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 13:01:04 +0000
Manifest this update: Thu 26 Mar 2026 13:01:04 +0000
Manifest next update: Fri 27 Mar 2026 13:01:04 +0000
Files and hashes: 1: BKEbuwMgtraLYD7tz_bOlWvPTyU.roa (hash: 4+VeGIyK69ig1zU9o8l43jPylF7T3GhRdlEeEiB531Q=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: fiah9z9TACAgIuZ3mfiepgH9l9fVoX7UCv2nSAegqZA=)
3: zr9U94ldVmEqABzp28N8U7oLDs8.roa (hash: uuO8FGDaDTUpNR5s2Koo87GcscBCUOkl1Mw1TeypQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:ef:b1:dc:36:a6:8f:29:b6:30:20:a6:00:24:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Mar 26 13:01:04 2026 GMT
Not After : Mar 27 13:01:04 2026 GMT
Subject: CN=5fb1596284d09046117340107e32e234270e4733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:34:a8:54:e1:b9:c4:7a:1a:82:4c:33:d6:52:
a4:01:d7:0f:d1:24:f9:6e:31:3e:72:97:3a:2e:8d:
e6:f7:18:45:47:66:10:43:c2:36:1f:3e:23:51:21:
5e:84:5f:b5:16:cf:7b:d0:d0:09:c2:34:fd:20:19:
25:bd:6e:8c:80:9b:6b:16:33:9d:be:8f:f2:1f:46:
f4:75:ea:51:c0:ce:17:31:e1:12:6e:dc:ec:c1:28:
dc:13:c2:6c:24:2b:20:12:fc:d9:36:66:e2:cf:3f:
db:fc:8b:d6:d9:5d:23:f3:07:fe:3c:e3:ca:8d:f3:
d7:cf:07:02:09:aa:87:46:74:19:9e:49:4f:0c:d7:
ee:c4:a8:67:62:3d:06:9e:81:6f:4d:48:66:52:bc:
f9:e2:39:37:5f:8a:78:14:3f:c9:0e:cc:8f:e8:d1:
a8:e5:5d:0a:70:7c:c6:fb:77:7e:ba:59:aa:c6:96:
69:4e:c2:f2:84:a2:fe:a5:a3:af:5d:ed:91:3e:f6:
a2:9a:68:85:22:7a:77:9b:a4:f5:6e:7c:72:94:34:
b5:46:dd:28:cb:4b:08:87:8f:14:2f:4e:07:c0:2d:
2a:f3:59:3f:42:cf:02:39:dc:3a:2e:22:9a:3a:56:
51:f4:a0:89:c1:74:a4:7a:8a:25:b7:74:0e:f3:bb:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B1:59:62:84:D0:90:46:11:73:40:10:7E:32:E2:34:27:0E:47:33
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:86:1c:fd:4f:12:4e:98:65:3b:7b:eb:40:9d:13:9a:21:a4:
88:bb:a5:42:f3:e0:c2:96:97:3f:ff:fc:27:56:8d:45:20:45:
77:e5:62:44:36:99:35:5f:8a:cc:9a:53:13:f2:b6:20:8a:21:
1f:b5:aa:4f:e3:4a:34:4e:9d:49:01:08:34:66:03:5b:1b:c4:
10:43:aa:b9:37:d1:f2:82:22:b5:53:ae:08:6a:c9:81:2a:09:
d9:c2:5d:f5:32:3d:f1:b2:4a:df:fc:56:f4:fe:6b:62:dc:9b:
a2:ab:81:12:b4:b1:35:35:0f:93:c1:15:8c:86:b3:ce:c2:74:
36:07:ef:2c:6e:5d:a7:c9:33:5d:7a:7f:4e:87:44:cb:38:a3:
2c:d0:d4:f7:b7:bf:48:53:8a:7d:ac:8c:66:ca:36:00:bf:dc:
fd:fc:eb:7f:ba:b4:e0:2d:fa:d5:c2:11:c6:dd:6d:b0:09:98:
07:8f:13:77:e6:4d:0d:af:78:a3:02:3a:f0:51:f6:61:0e:b0:
c0:83:bf:3f:83:84:39:9c:26:51:84:53:04:80:36:2a:e9:37:
2c:cd:2b:43:53:01:21:aa:b6:7b:2f:15:cf:d4:cd:3f:4e:b2:
66:02:08:4e:ad:75:47:b0:c8:67:96:0d:ac:55:47:bb:b6:eb:
dd:80:b0:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO++x3Damjym2MCCmACQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDE0Y2UxOGE4ZjFkMDVhNmEzNTM5MGFmNGFlYzhjZTZj
YzU2ZWMwHhcNMjYwMzI2MTMwMTA0WhcNMjYwMzI3MTMwMTA0WjAzMTEwLwYDVQQD
Eyg1ZmIxNTk2Mjg0ZDA5MDQ2MTE3MzQwMTA3ZTMyZTIzNDI3MGU0NzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzSoVOG5xHoagkwz1lKkAdcP0ST5
bjE+cpc6Lo3m9xhFR2YQQ8I2Hz4jUSFehF+1Fs970NAJwjT9IBklvW6MgJtrFjOd
vo/yH0b0depRwM4XMeESbtzswSjcE8JsJCsgEvzZNmbizz/b/IvW2V0j8wf+POPK
jfPXzwcCCaqHRnQZnklPDNfuxKhnYj0GnoFvTUhmUrz54jk3X4p4FD/JDsyP6NGo
5V0KcHzG+3d+ulmqxpZpTsLyhKL+paOvXe2RPvaimmiFInp3m6T1bnxylDS1Rt0o
y0sIh48UL04HwC0q81k/Qs8COdw6LiKaOlZR9KCJwXSkeoolt3QO87sreQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+xWWKE0JBGEXNAEH4y4jQnDkczMB8GA1UdIwQY
MBaAFLPRTOGKjx0FpqNTkK9K7IzmzFbsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8xMDMwM2MtNDNkNS00MDMzLTgwOGEt
NTJjNjk5ZDM4NmNkLzEvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8xMDMwM2MtNDNkNS00MDMzLTgwOGEtNTJjNjk5ZDM4NmNk
LzEvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4Yc/U8S
TphlO3vrQJ0TmiGkiLulQvPgwpaXP//8J1aNRSBFd+ViRDaZNV+KzJpTE/K2IIoh
H7WqT+NKNE6dSQEINGYDWxvEEEOquTfR8oIitVOuCGrJgSoJ2cJd9TI98bJK3/xW
9P5rYtyboquBErSxNTUPk8EVjIazzsJ0NgfvLG5dp8kzXXp/TodEyzijLNDU97e/
SFOKfayMZso2AL/c/fzrf7q04C361cIRxt1tsAmYB48Td+ZNDa94owI68FH2YQ6w
wIO/P4OEOZwmUYRTBIA2Kuk3LM0rQ1MBIaq2ey8Vz9TNP06yZgIITq11R7DIZ5YN
rFVHu7br3YCwRA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:28:34 2026 by rpki-client