Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File: 9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier: XljgxI/CCw33sDXEWrJeY7kQsgqRxHuYiW/DSmgkVSY=
Subject key identifier: 9A:A2:0B:A9:79:14:C6:8D:12:63:57:3F:4E:E3:E2:49:8C:FA:DF:E9
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer: /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial: 019D38D31A6FAE168DA57A17285F3C52D460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:00:51 +0000
Manifest this update: Sun 29 Mar 2026 09:00:51 +0000
Manifest next update: Mon 30 Mar 2026 09:00:51 +0000
Files and hashes: 1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: F+wcJhveApMFksIBw6w2RPzyzeCSLYsv/R5XBX2MusI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:1a:6f:ae:16:8d:a5:7a:17:28:5f:3c:52:d4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
Validity
Not Before: Mar 29 09:00:51 2026 GMT
Not After : Mar 30 09:00:51 2026 GMT
Subject: CN=9aa20ba97914c68d1263573f4ee3e2498cfadfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:21:fc:54:a3:db:09:88:fa:6f:ce:35:60:
24:f2:50:07:29:74:35:86:13:7d:49:54:f4:4d:6a:
ef:cb:b7:7f:78:20:cf:60:a2:af:dc:d2:84:69:84:
67:bd:f7:e4:46:30:9b:97:da:3d:43:fb:7d:04:f1:
6a:8e:ff:06:0a:4a:31:6f:df:4f:84:06:8d:6a:e8:
a7:83:8f:74:ed:d1:20:70:1b:a3:d0:92:f6:74:13:
4c:0a:45:77:c0:0e:be:d3:47:d4:bd:94:df:95:48:
60:01:ca:bd:07:0a:d0:c7:f1:ef:43:68:3d:8e:07:
8f:6c:b6:04:9c:9b:f3:c5:56:31:87:45:6f:6a:6e:
00:fa:8d:e0:8e:f1:58:98:8c:9f:0d:97:88:94:eb:
ba:9d:6c:66:de:cf:cc:6e:5d:da:60:bf:a4:ea:15:
df:a5:da:52:05:3a:32:ee:3a:a0:e8:2e:bd:00:d2:
06:da:30:f5:8f:f6:d2:5a:0a:a5:ea:e1:a1:56:b4:
b3:e9:26:53:b4:9b:1c:49:f3:ab:fa:c3:f8:36:e3:
27:77:4e:2f:69:26:ba:b5:a7:a9:a0:59:d7:00:e0:
6b:fe:de:01:08:81:4f:28:2e:11:b9:56:05:4a:b8:
33:96:ca:d3:85:e5:12:2f:2a:5a:0e:8b:ec:55:23:
1b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A2:0B:A9:79:14:C6:8D:12:63:57:3F:4E:E3:E2:49:8C:FA:DF:E9
X509v3 Authority Key Identifier:
keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:74:75:f1:cd:af:29:d4:62:9f:3e:1c:a9:64:55:69:fb:47:
55:18:bf:be:11:27:55:f2:c8:e7:20:fa:5c:a9:30:8c:a5:b0:
b9:18:80:cc:83:63:fd:2c:d3:f3:5f:34:97:ce:c1:b7:23:fc:
bb:54:b7:24:ec:e6:a3:4c:66:75:c0:bd:70:64:62:ac:07:00:
10:6d:95:28:5a:57:b9:6c:02:89:ed:aa:4d:68:ee:09:f0:4d:
6b:fe:b1:bc:52:ad:74:3d:ca:cf:52:c7:50:11:16:b2:b9:85:
2c:39:35:34:7a:0d:89:02:f3:91:04:17:f0:b7:c8:15:6f:8a:
32:9d:16:9f:3a:17:d1:ac:fc:73:07:cf:22:ab:6b:e0:61:73:
f3:70:50:39:be:af:d0:a1:71:af:28:42:c1:bd:17:7b:d8:60:
ca:59:6d:b5:40:05:05:6a:46:d0:8f:0f:a6:78:17:7b:f1:d3:
26:77:b5:f7:7f:fd:35:c0:ae:86:65:c7:65:f6:53:cf:2c:d0:
5b:ba:9a:6d:cb:26:41:95:2e:c4:ed:53:1b:a8:10:9c:d0:e3:
36:01:ac:dd:a5:4d:4a:6e:60:09:8f:12:4c:4f:48:66:50:47:
69:55:93:cc:4f:1b:79:41:41:6a:92:0f:66:a2:f9:9a:8c:6c:
68:f8:74:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040xpvrhaNpXoXKF88UtRgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTNiNGMzMTUxMWI1NDgyZWI4NDI1YTM5MTM3OWQ0M2Zk
NmQ0NTUwHhcNMjYwMzI5MDkwMDUxWhcNMjYwMzMwMDkwMDUxWjAzMTEwLwYDVQQD
Eyg5YWEyMGJhOTc5MTRjNjhkMTI2MzU3M2Y0ZWUzZTI0OThjZmFkZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrQh/FSj2wmI+m/ONWAk8lAHKXQ1
hhN9SVT0TWrvy7d/eCDPYKKv3NKEaYRnvffkRjCbl9o9Q/t9BPFqjv8GCkoxb99P
hAaNauing4907dEgcBuj0JL2dBNMCkV3wA6+00fUvZTflUhgAcq9BwrQx/HvQ2g9
jgePbLYEnJvzxVYxh0Vvam4A+o3gjvFYmIyfDZeIlOu6nWxm3s/Mbl3aYL+k6hXf
pdpSBToy7jqg6C69ANIG2jD1j/bSWgql6uGhVrSz6SZTtJscSfOr+sP4NuMnd04v
aSa6taepoFnXAOBr/t4BCIFPKC4RuVYFSrgzlsrTheUSLypaDovsVSMbMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqiC6l5FMaNEmNXP07j4kmM+t/pMB8GA1UdIwQY
MBaAFPZTtMMVEbVILrhCWjkTedQ/1tRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZjYyODUtMTI5ZC00MWY2LWI4MzAt
MzE5MzY4ZDkxZmMzLzEvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82ZjYyODUtMTI5ZC00MWY2LWI4MzAtMzE5MzY4ZDkxZmMz
LzEvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnR18c2v
KdRinz4cqWRVaftHVRi/vhEnVfLI5yD6XKkwjKWwuRiAzINj/SzT8180l87BtyP8
u1S3JOzmo0xmdcC9cGRirAcAEG2VKFpXuWwCie2qTWjuCfBNa/6xvFKtdD3Kz1LH
UBEWsrmFLDk1NHoNiQLzkQQX8LfIFW+KMp0WnzoX0az8cwfPIqtr4GFz83BQOb6v
0KFxryhCwb0Xe9hgyllttUAFBWpG0I8PpngXe/HTJne193/9NcCuhmXHZfZTzyzQ
W7qabcsmQZUuxO1TG6gQnNDjNgGs3aVNSm5gCY8STE9IZlBHaVWTzE8beUFBapIP
ZqL5moxsaPh0SQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:16 2026 by rpki-client