Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier: v3HLn2rFBZG+8j76AvvrMSDVcPVlAzk53TykYgedfiQ=
Subject key identifier: 7B:87:80:8B:A2:90:4C:04:8A:2D:3E:D3:4C:1E:8D:14:9B:1C:DA:AA
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 019D48B529EAB8D68EF730BE8C7E446AC3E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number: 168C
Signing time: Wed 01 Apr 2026 11:02:05 +0000
Manifest this update: Wed 01 Apr 2026 11:02:05 +0000
Manifest next update: Thu 02 Apr 2026 11:02:05 +0000
Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: oQkkXnWoLgHKDDLSTk4ycvoMu2I+2WwxpalujcHUY7w=)
2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Apr 2026 11:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:b5:29:ea:b8:d6:8e:f7:30:be:8c:7e:44:6a:c3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Apr 1 11:02:05 2026 GMT
Not After : Apr 2 11:02:05 2026 GMT
Subject: CN=7b87808ba2904c048a2d3ed34c1e8d149b1cdaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bd:02:40:4f:46:6d:fd:26:1c:c6:d8:db:ea:
f2:a6:40:a1:0b:0a:e7:d4:26:41:1a:ea:96:44:9d:
0b:34:e0:2b:10:30:f6:1a:8c:0e:2d:bc:7d:a0:9f:
88:64:36:cc:d6:0a:b0:4f:3f:3e:01:90:be:88:80:
34:74:5b:3a:47:9e:3c:bc:9e:8f:e6:66:0e:25:8a:
fe:3e:2c:4f:54:75:a7:86:30:b5:82:8b:36:c2:75:
d3:70:b3:3b:90:05:43:ae:9b:0e:07:d0:67:be:39:
95:13:78:11:79:76:28:e9:b1:c8:0b:4a:62:be:a9:
2d:cf:4d:60:91:96:52:40:53:29:fd:59:53:0e:e1:
bf:e6:73:a8:88:79:bc:d4:d6:45:d5:81:b2:95:76:
88:1c:41:fd:60:49:92:26:af:97:2c:07:39:df:cd:
20:12:1c:0e:4f:58:e1:12:7a:79:1e:9b:90:94:62:
ed:32:e2:6f:12:d5:92:6e:18:2a:2b:6d:3c:4e:17:
fc:df:0d:a8:85:96:3b:ff:8d:4c:69:a0:92:e0:b7:
d2:39:9b:23:62:ff:c5:e7:56:97:ec:4a:30:b8:9d:
f2:10:08:a8:f7:85:38:09:c4:a3:34:ea:15:07:cd:
ff:20:25:b4:3f:16:69:aa:34:3a:fc:f9:ca:50:ee:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:87:80:8B:A2:90:4C:04:8A:2D:3E:D3:4C:1E:8D:14:9B:1C:DA:AA
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6e:1d:d1:f7:1f:ef:67:46:d3:fd:a5:8c:9b:6e:7d:e2:d0:
ab:af:57:b7:28:ec:ab:3f:fa:ff:2b:30:74:fc:3d:56:f1:02:
90:28:c1:45:f0:76:fe:9e:a6:46:14:34:85:e6:0b:c7:30:a1:
8d:a9:a5:57:0c:02:e9:d0:9f:f0:10:09:87:5a:70:31:8a:e2:
14:0c:28:3b:c8:9f:47:5b:86:98:4b:76:ad:29:4b:c2:fd:c2:
9f:8f:2d:c4:06:05:f1:8b:1e:18:b5:7e:d5:3b:cf:d4:20:08:
52:ae:69:c2:2f:c3:1e:e6:cc:d8:b0:8c:be:ce:53:bf:8e:09:
e4:c4:6c:9f:bd:d2:e8:24:b7:62:d7:7e:79:ce:7c:d8:46:cc:
56:e1:92:c7:17:e6:f0:f5:9b:9f:9b:43:e8:2c:e5:17:b5:25:
d9:b9:9c:5b:f7:ba:40:04:61:f5:bc:1d:72:28:43:53:82:67:
ca:3c:3f:db:dc:47:63:5a:35:e1:58:ee:cb:1f:0e:e5:11:8c:
33:89:1e:2e:9b:23:8d:ce:ec:fc:34:e6:94:af:85:32:76:fd:
e5:3d:b9:0a:30:f0:b6:05:8b:03:23:5e:21:b0:ce:df:b5:2b:
a3:65:20:c2:ab:19:c4:c9:8e:90:34:fc:73:cc:9f:7d:9d:c8:
dc:e9:cd:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1ItSnquNaO9zC+jH5EasPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk
NDE1OGEwHhcNMjYwNDAxMTEwMjA1WhcNMjYwNDAyMTEwMjA1WjAzMTEwLwYDVQQD
Eyg3Yjg3ODA4YmEyOTA0YzA0OGEyZDNlZDM0YzFlOGQxNDliMWNkYWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b0CQE9Gbf0mHMbY2+rypkChCwrn
1CZBGuqWRJ0LNOArEDD2GowOLbx9oJ+IZDbM1gqwTz8+AZC+iIA0dFs6R548vJ6P
5mYOJYr+PixPVHWnhjC1gos2wnXTcLM7kAVDrpsOB9BnvjmVE3gReXYo6bHIC0pi
vqktz01gkZZSQFMp/VlTDuG/5nOoiHm81NZF1YGylXaIHEH9YEmSJq+XLAc5380g
EhwOT1jhEnp5HpuQlGLtMuJvEtWSbhgqK208Thf83w2ohZY7/41MaaCS4LfSOZsj
Yv/F51aX7EowuJ3yEAio94U4CcSjNOoVB83/ICW0PxZpqjQ6/PnKUO6irwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuHgIuikEwEii0+00wejRSbHNqqMB8GA1UdIwQY
MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt
MDc1MTAzODE0MjBhLzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh
LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKW4d0fcf
72dG0/2ljJtufeLQq69Xtyjsqz/6/yswdPw9VvECkCjBRfB2/p6mRhQ0heYLxzCh
jamlVwwC6dCf8BAJh1pwMYriFAwoO8ifR1uGmEt2rSlLwv3Cn48txAYF8YseGLV+
1TvP1CAIUq5pwi/DHubM2LCMvs5Tv44J5MRsn73S6CS3Ytd+ec582EbMVuGSxxfm
8PWbn5tD6CzlF7Ul2bmcW/e6QARh9bwdcihDU4Jnyjw/29xHY1o14Vjuyx8O5RGM
M4keLpsjjc7s/DTmlK+FMnb95T25CjDwtgWLAyNeIbDO37Uro2UgwqsZxMmOkDT8
c8yffZ3I3OnNgA==
-----END CERTIFICATE-----
Generated at Wed Apr 1 19:46:08 2026 by rpki-client