Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
File: 9keQtSf6QLqj8ts_oqFL-UzSgv8.mft (raw, json)
Hash identifier: olSUOuXMAT1NCmmhXSEjBcbUR9OO5oIKWS6N75Txh+Q=
Subject key identifier: 44:02:AD:98:CD:02:66:FB:6D:6B:5A:67:66:3E:C6:D7:EA:11:79:95
Authority key identifier: F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
Certificate issuer: /CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Certificate serial: 019D3941575AEAB162FE46AAA13C4BC16ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
Manifest number: 05B8
Signing time: Sun 29 Mar 2026 11:01:16 +0000
Manifest this update: Sun 29 Mar 2026 11:01:16 +0000
Manifest next update: Mon 30 Mar 2026 11:01:16 +0000
Files and hashes: 1: 9keQtSf6QLqj8ts_oqFL-UzSgv8.crl (hash: 7Oy++X7NzeHqqkFyEdl3WA4qaEpoKK6c7I4XAMMUHEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:57:5a:ea:b1:62:fe:46:aa:a1:3c:4b:c1:6e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Validity
Not Before: Mar 29 11:01:16 2026 GMT
Not After : Mar 30 11:01:16 2026 GMT
Subject: CN=4402ad98cd0266fb6d6b5a67663ec6d7ea117995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:7d:d5:9c:6a:27:03:99:57:79:e4:59:a8:
50:d7:05:4f:29:38:27:80:18:c8:5e:6e:09:ac:fb:
be:52:3d:17:9c:73:7c:31:5a:07:20:db:b0:27:b5:
9c:8e:59:8c:2e:b1:73:8d:9c:30:49:be:bd:2c:b8:
01:54:cc:03:ce:27:1e:63:3f:95:16:0f:6d:21:23:
17:f1:a7:99:b2:22:9a:1d:fd:9b:39:b8:d0:a3:d8:
a3:62:79:de:32:28:11:65:0c:c5:32:8a:38:70:ab:
cc:a2:96:19:5b:1b:5d:f4:08:df:20:8b:91:8a:c0:
04:cb:dc:b1:9a:cb:d3:fa:a3:7a:4f:f6:f0:ad:f4:
9c:04:ae:ed:5d:7d:03:26:2f:ce:6b:96:5b:6e:c3:
a7:7e:c0:d9:8b:59:42:14:ab:54:89:df:b9:80:40:
b3:47:bd:45:da:53:b8:fa:70:bd:8c:2b:1f:8f:ea:
ad:3f:02:2d:cf:a4:2c:67:69:c8:4e:56:a5:14:9a:
74:9a:b5:37:a6:6d:e9:9c:d2:de:5c:b3:d7:9b:6d:
00:f6:e5:a5:3b:be:74:23:38:94:4f:84:fb:94:66:
fc:53:ca:c9:21:9b:40:6b:d0:60:70:76:cf:e6:ae:
9d:1d:21:2c:f4:d2:84:c0:96:db:88:d2:a2:c2:f5:
f5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:02:AD:98:CD:02:66:FB:6D:6B:5A:67:66:3E:C6:D7:EA:11:79:95
X509v3 Authority Key Identifier:
keyid:F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:11:b8:3a:55:1c:e9:fe:d1:96:5f:12:06:a1:0e:52:63:f7:
bc:e2:c8:1c:6f:fa:ad:e0:a8:4a:8a:d2:d2:06:f2:6a:14:86:
fd:75:d5:22:fc:23:56:a7:98:91:2d:d6:46:1b:5c:6e:9a:10:
dc:b4:dd:43:89:3b:c1:c1:2d:cf:97:05:4b:0a:30:e8:d3:6c:
1c:70:24:1e:d0:e3:45:8e:0a:9e:03:77:eb:62:26:6d:90:c2:
19:8b:4d:14:e1:de:d2:43:0d:ec:ab:0e:f7:01:17:89:10:6f:
d2:ed:8b:78:07:d0:af:3b:48:94:db:8f:9e:f4:21:b5:b6:81:
44:67:2b:6c:f4:17:90:e2:c1:2d:ff:6b:be:d3:e5:93:c9:df:
46:0a:b7:77:de:7d:79:d4:5a:18:d1:1b:4f:cf:28:4f:db:e3:
c5:7a:e8:48:3b:92:18:4e:2b:22:d3:0b:4e:8b:cb:14:9e:59:
82:be:68:f3:97:05:5b:14:49:bb:80:6c:2c:11:d6:7b:a5:33:
db:f0:33:e6:73:35:37:db:40:ed:cd:49:d8:5a:8c:0e:4b:8a:
e6:9d:fa:a2:24:43:1e:74:fd:a6:85:d9:17:8d:a1:47:c8:ac:
44:d2:8e:98:df:03:46:d5:98:02:64:08:ac:84:c8:7d:ea:e3:
85:2c:d3:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QVda6rFi/kaqoTxLwW7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NDc5MGI1MjdmYTQwYmFhM2YyZGIzZmEyYTE0YmY5NGNk
MjgyZmYwHhcNMjYwMzI5MTEwMTE2WhcNMjYwMzMwMTEwMTE2WjAzMTEwLwYDVQQD
Eyg0NDAyYWQ5OGNkMDI2NmZiNmQ2YjVhNjc2NjNlYzZkN2VhMTE3OTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyh91ZxqJwOZV3nkWahQ1wVPKTgn
gBjIXm4JrPu+Uj0XnHN8MVoHINuwJ7WcjlmMLrFzjZwwSb69LLgBVMwDziceYz+V
Fg9tISMX8aeZsiKaHf2bObjQo9ijYnneMigRZQzFMoo4cKvMopYZWxtd9AjfIIuR
isAEy9yxmsvT+qN6T/bwrfScBK7tXX0DJi/Oa5ZbbsOnfsDZi1lCFKtUid+5gECz
R71F2lO4+nC9jCsfj+qtPwItz6QsZ2nITlalFJp0mrU3pm3pnNLeXLPXm20A9uWl
O750IziUT4T7lGb8U8rJIZtAa9BgcHbP5q6dHSEs9NKEwJbbiNKiwvX19QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQCrZjNAmb7bWtaZ2Y+xtfqEXmVMB8GA1UdIwQY
MBaAFPZHkLUn+kC6o/LbP6KhS/lM0oL/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWtlUXRTZjZRTHFqOHRzX29xRkwtVXpTZ3Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85OWRiNTEtNjhiZC00YjViLWEyZTIt
MjhkNzMzN2MwNjk0LzEvOWtlUXRTZjZRTHFqOHRzX29xRkwtVXpTZ3Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85OWRiNTEtNjhiZC00YjViLWEyZTItMjhkNzMzN2MwNjk0
LzEvOWtlUXRTZjZRTHFqOHRzX29xRkwtVXpTZ3Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxG4OlUc
6f7Rll8SBqEOUmP3vOLIHG/6reCoSorS0gbyahSG/XXVIvwjVqeYkS3WRhtcbpoQ
3LTdQ4k7wcEtz5cFSwow6NNsHHAkHtDjRY4KngN362ImbZDCGYtNFOHe0kMN7KsO
9wEXiRBv0u2LeAfQrztIlNuPnvQhtbaBRGcrbPQXkOLBLf9rvtPlk8nfRgq3d959
edRaGNEbT88oT9vjxXroSDuSGE4rItMLTovLFJ5Zgr5o85cFWxRJu4BsLBHWe6Uz
2/Az5nM1N9tA7c1J2FqMDkuK5p36oiRDHnT9poXZF42hR8isRNKOmN8DRtWYAmQI
rITIferjhSzTrA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:10 2026 by rpki-client