Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
File: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft (raw, json)
Hash identifier: YuQ6L1sf1+7hXkt0gZ7uaLxJILnFafzXq0GHGadvsm0=
Subject key identifier: 8E:54:1D:B1:4D:E4:BE:18:C7:D5:0C:0E:C2:05:3F:9C:DF:0D:70:FA
Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
Certificate issuer: /CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Certificate serial: 019D265ED257108923412C65C8AD5EA26533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
Manifest number: 1574
Signing time: Wed 25 Mar 2026 19:00:41 +0000
Manifest this update: Wed 25 Mar 2026 19:00:41 +0000
Manifest next update: Thu 26 Mar 2026 19:00:41 +0000
Files and hashes: 1: 3I73d1fm-asEDdpF_Iaed-Rn4iU.roa (hash: JVQe5Bz0aKgNMVzD3MTnR/M1jsbAbCwUE1ywEqxkXqI=)
2: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl (hash: ECEV9aAC7LNHTSeYwrhru6wyeBZXWnV3LlkjpVnyG6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:d2:57:10:89:23:41:2c:65:c8:ad:5e:a2:65:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Validity
Not Before: Mar 25 19:00:41 2026 GMT
Not After : Mar 26 19:00:41 2026 GMT
Subject: CN=8e541db14de4be18c7d50c0ec2053f9cdf0d70fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:b8:7f:67:91:51:56:66:e7:df:c8:7a:16:
91:bd:b5:7b:35:6d:33:fc:85:30:a9:ac:11:3c:0e:
c7:a4:6a:1c:c3:d1:41:e8:cf:25:6d:86:75:c6:ed:
ba:20:15:dc:6b:50:77:52:a6:8b:a5:be:c4:12:f2:
94:10:cc:1a:d3:c9:f3:bd:04:e2:51:0b:fa:3b:15:
04:53:e9:c4:53:1c:02:98:70:0a:b8:0c:d3:e6:53:
09:5c:9b:2b:85:4f:00:47:49:7c:5d:91:b4:35:86:
c2:f2:b8:8a:28:8b:e1:dd:8a:79:dd:9b:50:64:06:
4b:be:b6:36:ff:ed:49:51:cf:02:cb:e7:0a:11:ae:
58:19:6e:8a:15:fa:e8:76:ca:b0:48:33:1e:1d:4d:
c9:3a:a6:fb:49:53:e8:5a:30:f7:9d:df:dd:20:f0:
f7:2b:99:4e:2e:79:c3:86:cb:46:b4:74:72:42:22:
da:e1:f2:c2:fc:8b:31:97:bd:93:ad:72:11:27:fb:
36:16:e5:ab:57:27:80:00:da:bb:9f:97:38:52:66:
18:e9:9d:a7:66:83:41:e8:e4:f2:af:c3:e2:e2:07:
6d:9e:f3:65:a3:47:0e:f2:be:e4:fc:1c:eb:f3:94:
a3:b2:f7:6b:75:44:64:f5:f0:03:de:f9:54:7d:75:
26:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:54:1D:B1:4D:E4:BE:18:C7:D5:0C:0E:C2:05:3F:9C:DF:0D:70:FA
X509v3 Authority Key Identifier:
keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ff:13:40:30:0d:4f:8b:43:e8:a7:af:19:a3:54:59:f8:4e:
99:30:87:61:88:80:0b:17:e0:4d:3b:a1:3b:fd:ee:cc:93:16:
95:79:27:f1:c6:70:ea:71:48:92:03:d3:1b:29:95:ca:3f:b3:
52:6f:ce:27:7a:c9:ff:40:6c:95:15:71:99:ff:5a:93:8f:da:
c4:40:4b:f0:f4:ec:65:e8:53:70:4f:b0:85:c8:9d:09:b0:7d:
08:d7:af:c2:d2:94:27:36:77:dd:14:f2:9c:ed:37:34:78:5f:
6f:cd:22:c1:97:b6:e5:f5:41:62:6d:82:5a:c5:d5:18:53:ec:
79:61:e3:04:e3:b2:8c:0e:cf:d8:15:f4:c4:9f:66:e3:12:df:
83:aa:c6:60:c8:9c:61:59:d9:c4:12:0d:ee:f1:e8:d2:23:5b:
bc:d1:43:32:12:5e:14:42:40:c4:96:82:51:e2:9e:bd:4e:d0:
03:3c:bc:5d:73:28:b3:07:9d:6d:d8:c9:18:b8:d2:ae:b6:fb:
95:11:c2:b0:c1:6b:6b:9f:3c:1d:51:1f:24:57:1a:47:2b:e5:
76:c0:ca:26:da:b1:f2:6f:2b:ba:99:b8:7a:ba:4f:0c:aa:f7:
f4:a3:53:98:53:87:8c:99:5f:0b:a7:1e:b3:85:c7:19:d6:4b:
59:be:24:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXtJXEIkjQSxlyK1eomUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YzliYWE0NDI5ZGE3ODY1OTFiNzI1MjU4NTJlNmQ5N2Iz
MmMxZTgwHhcNMjYwMzI1MTkwMDQxWhcNMjYwMzI2MTkwMDQxWjAzMTEwLwYDVQQD
Eyg4ZTU0MWRiMTRkZTRiZTE4YzdkNTBjMGVjMjA1M2Y5Y2RmMGQ3MGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwe4f2eRUVZm59/IehaRvbV7NW0z
/IUwqawRPA7HpGocw9FB6M8lbYZ1xu26IBXca1B3UqaLpb7EEvKUEMwa08nzvQTi
UQv6OxUEU+nEUxwCmHAKuAzT5lMJXJsrhU8AR0l8XZG0NYbC8riKKIvh3Yp53ZtQ
ZAZLvrY2/+1JUc8Cy+cKEa5YGW6KFfrodsqwSDMeHU3JOqb7SVPoWjD3nd/dIPD3
K5lOLnnDhstGtHRyQiLa4fLC/Isxl72TrXIRJ/s2FuWrVyeAANq7n5c4UmYY6Z2n
ZoNB6OTyr8Pi4gdtnvNlo0cO8r7k/Bzr85SjsvdrdURk9fAD3vlUfXUmlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5UHbFN5L4Yx9UMDsIFP5zfDXD6MB8GA1UdIwQY
MBaAFPTJuqRCnaeGWRtyUlhS5tl7MsHoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82ODc3YmEtNGU2Yy00ZjVhLTljYzIt
YWY3ZGEyYjZlZGM1LzEvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82ODc3YmEtNGU2Yy00ZjVhLTljYzItYWY3ZGEyYjZlZGM1
LzEvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARP8TQDAN
T4tD6KevGaNUWfhOmTCHYYiACxfgTTuhO/3uzJMWlXkn8cZw6nFIkgPTGymVyj+z
Um/OJ3rJ/0BslRVxmf9ak4/axEBL8PTsZehTcE+whcidCbB9CNevwtKUJzZ33RTy
nO03NHhfb80iwZe25fVBYm2CWsXVGFPseWHjBOOyjA7P2BX0xJ9m4xLfg6rGYMic
YVnZxBIN7vHo0iNbvNFDMhJeFEJAxJaCUeKevU7QAzy8XXMoswedbdjJGLjSrrb7
lRHCsMFra588HVEfJFcaRyvldsDKJtqx8m8rupm4erpPDKr39KNTmFOHjJlfC6ce
s4XHGdZLWb4kvw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:33 2026 by rpki-client