Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier: gSWuneoNDOrxQpEjtNcU2CSTsVhqbbStGPsxVm+ACIw=
Subject key identifier: 36:02:0D:D4:0C:29:6E:44:95:0A:EA:42:EC:6C:2F:56:F7:DB:32:2C
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 019D27E01E82F8BC6A3C43BDAA5D92FFDEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number: 167B
Signing time: Thu 26 Mar 2026 02:01:32 +0000
Manifest this update: Thu 26 Mar 2026 02:01:32 +0000
Manifest next update: Fri 27 Mar 2026 02:01:32 +0000
Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: dc9yVmrfOwRk867l4637YhZW2qYXwfHf0l4TGWIVfaM=)
2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:1e:82:f8:bc:6a:3c:43:bd:aa:5d:92:ff:de:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Mar 26 02:01:32 2026 GMT
Not After : Mar 27 02:01:32 2026 GMT
Subject: CN=36020dd40c296e44950aea42ec6c2f56f7db322c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:a1:6f:90:8a:72:89:24:ab:b2:1e:cc:12:
3c:23:43:a2:4a:a9:aa:68:68:a1:f3:bb:7e:0f:c1:
78:f1:db:7c:8d:4a:d4:5d:0a:2d:cc:e2:49:36:06:
a9:14:24:c3:e2:75:da:bf:19:8f:e3:16:ac:a4:cd:
dc:86:4e:27:c5:9a:66:f0:c0:bf:88:3f:71:c8:5e:
69:2e:5a:9e:73:b8:dc:65:62:27:6a:ef:8d:75:07:
5a:b4:0b:c6:ce:0f:54:5d:df:32:1b:14:ac:8f:29:
74:3a:e1:49:e3:b3:e6:23:cd:d5:07:68:f6:bb:95:
50:1e:c1:c1:f1:d0:29:ae:0b:55:4a:73:e7:54:ae:
1a:2b:24:83:d5:24:b8:b6:f4:96:05:35:7a:aa:e9:
75:95:63:2b:c9:48:b9:a9:81:b4:b3:7e:1b:de:63:
f9:72:81:04:8b:ad:ac:25:4d:2a:a0:48:bb:bf:ec:
f1:31:b5:5d:aa:60:4d:c3:92:8a:1a:46:c5:da:4c:
bc:b4:29:ee:ca:7e:c6:af:2b:e3:ff:1b:44:f0:da:
c3:d7:3e:a5:bd:e1:4d:b3:bb:5f:40:0f:31:35:84:
a1:da:ba:1b:f5:26:9c:6c:86:b7:a8:56:98:b0:7c:
95:90:18:f4:09:c0:07:62:d6:9a:c1:de:ec:9c:1f:
2f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:02:0D:D4:0C:29:6E:44:95:0A:EA:42:EC:6C:2F:56:F7:DB:32:2C
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:25:a6:c5:ff:e3:05:c9:42:fa:f4:8d:3e:30:95:71:81:7e:
1c:d2:9b:de:f5:f5:4d:cd:a5:89:b5:90:59:fb:d5:b7:aa:da:
41:5e:ac:a9:05:45:73:90:03:89:e6:51:66:b4:8b:3e:4e:d7:
4a:45:49:4b:e5:e8:ff:ca:10:ca:a2:a7:f2:e2:73:0e:71:ac:
dd:ca:52:8c:6c:9a:a2:0a:d3:fd:4b:65:66:04:43:e6:e8:43:
33:63:56:99:a0:25:2b:de:9f:29:e4:b7:25:22:63:b7:9c:10:
0c:3f:26:bf:d3:97:b0:a9:9b:18:ae:51:67:79:60:89:b4:d4:
d3:ca:77:ea:3d:c5:ac:7f:0c:02:d4:b9:f9:a9:82:39:5f:e8:
67:9b:09:78:d0:79:31:ea:99:61:8b:ac:20:e6:67:bf:10:d2:
8f:ef:70:8d:9f:6e:5b:6b:0d:78:f7:76:d9:2e:ab:d0:13:30:
b8:39:e2:26:3a:6b:5f:99:71:9c:e0:39:1f:12:66:15:62:ef:
12:55:9c:7f:a3:1e:e1:97:c6:58:9a:1c:99:7a:24:5f:a5:37:
d8:50:40:de:d5:ed:c7:be:18:b0:3e:76:74:43:20:51:4b:b8:
82:a6:39:49:83:95:ed:d6:f7:00:72:df:65:aa:10:0d:8a:62:
03:f6:9d:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4B6C+LxqPEO9ql2S/97jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk
NDE1OGEwHhcNMjYwMzI2MDIwMTMyWhcNMjYwMzI3MDIwMTMyWjAzMTEwLwYDVQQD
EygzNjAyMGRkNDBjMjk2ZTQ0OTUwYWVhNDJlYzZjMmY1NmY3ZGIzMjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb2hb5CKcokkq7IezBI8I0OiSqmq
aGih87t+D8F48dt8jUrUXQotzOJJNgapFCTD4nXavxmP4xaspM3chk4nxZpm8MC/
iD9xyF5pLlqec7jcZWInau+NdQdatAvGzg9UXd8yGxSsjyl0OuFJ47PmI83VB2j2
u5VQHsHB8dAprgtVSnPnVK4aKySD1SS4tvSWBTV6qul1lWMryUi5qYG0s34b3mP5
coEEi62sJU0qoEi7v+zxMbVdqmBNw5KKGkbF2ky8tCnuyn7Gryvj/xtE8NrD1z6l
veFNs7tfQA8xNYSh2rob9SacbIa3qFaYsHyVkBj0CcAHYtaawd7snB8vOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYCDdQMKW5ElQrqQuxsL1b32zIsMB8GA1UdIwQY
MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt
MDc1MTAzODE0MjBhLzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh
LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSWmxf/j
BclC+vSNPjCVcYF+HNKb3vX1Tc2libWQWfvVt6raQV6sqQVFc5ADieZRZrSLPk7X
SkVJS+Xo/8oQyqKn8uJzDnGs3cpSjGyaogrT/UtlZgRD5uhDM2NWmaAlK96fKeS3
JSJjt5wQDD8mv9OXsKmbGK5RZ3lgibTU08p36j3FrH8MAtS5+amCOV/oZ5sJeNB5
MeqZYYusIOZnvxDSj+9wjZ9uW2sNePd22S6r0BMwuDniJjprX5lxnOA5HxJmFWLv
ElWcf6Me4ZfGWJocmXokX6U32FBA3tXtx74YsD52dEMgUUu4gqY5SYOV7db3AHLf
ZaoQDYpiA/ad8g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:27 2026 by rpki-client