Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft
File: 9yQQnyF3AuaYDbkFOo9HEPwKCno.mft (raw, json)
Hash identifier: fWJ0316K9VBTwqEnHIrL5N5MmaDLxtY7jxreGTsQ2xM=
Subject key identifier: D6:65:E9:93:C9:33:4B:3A:86:8F:2F:47:F7:E7:EC:20:B1:F2:85:7B
Authority key identifier: F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A
Certificate issuer: /CN=f724109f217702e6980db9053a8f4710fc0a0a7a
Certificate serial: 019D38D3BAB1090D49E4D083AB8CFDDE2CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft
Manifest number: 039F
Signing time: Sun 29 Mar 2026 09:01:33 +0000
Manifest this update: Sun 29 Mar 2026 09:01:33 +0000
Manifest next update: Mon 30 Mar 2026 09:01:33 +0000
Files and hashes: 1: 9yQQnyF3AuaYDbkFOo9HEPwKCno.crl (hash: a8cx+iSHwmYOeIJXtxr1tlja3I9FfLD1+96zkCn4ZoQ=)
2: Zx_5tP2jFEhTq6MgQIAH7OLDeG0.roa (hash: kGORWAX4JZQpp1zftluvvyW3B2PFf7CnlAdwIGmwd68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ba:b1:09:0d:49:e4:d0:83:ab:8c:fd:de:2c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724109f217702e6980db9053a8f4710fc0a0a7a
Validity
Not Before: Mar 29 09:01:33 2026 GMT
Not After : Mar 30 09:01:33 2026 GMT
Subject: CN=d665e993c9334b3a868f2f47f7e7ec20b1f2857b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:72:c8:47:a8:69:4f:7f:d3:f7:3d:d0:10:
24:4e:fb:dd:40:9c:9b:28:39:35:61:ba:f1:fb:31:
9c:e3:85:0c:da:59:32:27:72:71:98:70:17:16:a0:
e6:0a:97:38:1f:b8:65:fa:bb:4b:a5:dc:47:0a:e1:
8d:e6:b0:45:12:a2:a5:75:da:ff:92:d5:5f:2f:f6:
17:71:b3:80:bc:63:30:42:3e:42:ff:78:3c:a0:87:
8e:39:11:f1:05:1b:8c:cd:82:c5:78:67:77:a4:16:
66:f8:c2:8e:d6:2b:dc:c6:2e:f5:8b:71:6c:10:8e:
94:60:a0:94:72:9f:bb:fa:7e:f2:30:5e:f4:98:7e:
32:a4:ac:ab:3c:a3:2e:61:a1:99:70:61:f6:2d:da:
ac:f0:bd:ba:63:ff:4d:30:18:26:23:d0:a5:9d:a8:
19:fa:ad:be:57:8a:65:05:1e:1e:47:a4:27:0c:92:
2c:d7:3c:3b:bd:e8:13:8b:0f:3b:de:00:20:41:8d:
98:2a:7c:12:cf:4c:c0:21:f5:39:18:50:11:3c:56:
e4:20:d2:6c:eb:dc:84:45:2d:f5:e3:48:3c:a8:e8:
05:49:52:1c:ab:4d:f5:46:93:93:0e:2f:5b:43:83:
f9:e1:a4:d7:cb:e6:5e:2c:46:67:a0:ae:06:2c:2d:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:65:E9:93:C9:33:4B:3A:86:8F:2F:47:F7:E7:EC:20:B1:F2:85:7B
X509v3 Authority Key Identifier:
keyid:F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:58:03:f8:ad:c1:38:ae:29:ef:02:9d:98:41:39:e9:b2:14:
d4:3c:6e:de:03:94:50:9d:ca:ad:dd:49:74:79:9c:9a:9d:6a:
9f:53:81:0d:59:68:12:a3:8e:96:e5:1e:f8:f9:c4:7a:e9:ab:
63:57:99:fe:06:f6:cf:33:66:e1:f1:7c:9d:2d:5e:4d:ae:c0:
5a:ad:f4:bd:81:28:51:68:24:c3:61:8a:25:c0:b0:db:63:b8:
cd:94:da:85:4c:6e:dc:b6:f5:ab:b2:99:a0:e2:45:ba:8f:8f:
1f:7b:1a:dc:68:bd:d1:96:50:ff:6f:76:cb:21:c1:8b:ce:73:
d6:29:f8:2e:a5:4f:75:b1:01:d4:f4:23:bd:9d:de:11:7d:a1:
eb:e4:12:17:23:54:5c:9d:0e:5f:93:53:90:8e:b1:38:21:11:
9b:53:3e:af:9d:92:27:c0:df:18:2c:0a:f7:a8:b5:06:37:83:
cf:84:3d:e0:cc:3a:dd:d1:0f:52:0e:9d:1a:98:73:17:57:c9:
08:95:de:32:1e:f3:2d:85:21:5f:85:e9:68:1d:b2:a3:38:0b:
98:87:ec:8b:f6:6b:62:22:fe:7c:f3:77:9a:02:fd:08:ea:0a:
33:58:f0:ae:63:d2:89:fb:a2:0e:2a:45:7d:e8:6c:ea:ab:d1:
a3:28:4c:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0407qxCQ1J5NCDq4z93izIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MjQxMDlmMjE3NzAyZTY5ODBkYjkwNTNhOGY0NzEwZmMw
YTBhN2EwHhcNMjYwMzI5MDkwMTMzWhcNMjYwMzMwMDkwMTMzWjAzMTEwLwYDVQQD
EyhkNjY1ZTk5M2M5MzM0YjNhODY4ZjJmNDdmN2U3ZWMyMGIxZjI4NTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb1yyEeoaU9/0/c90BAkTvvdQJyb
KDk1Ybrx+zGc44UM2lkyJ3JxmHAXFqDmCpc4H7hl+rtLpdxHCuGN5rBFEqKlddr/
ktVfL/YXcbOAvGMwQj5C/3g8oIeOORHxBRuMzYLFeGd3pBZm+MKO1ivcxi71i3Fs
EI6UYKCUcp+7+n7yMF70mH4ypKyrPKMuYaGZcGH2Ldqs8L26Y/9NMBgmI9ClnagZ
+q2+V4plBR4eR6QnDJIs1zw7vegTiw873gAgQY2YKnwSz0zAIfU5GFARPFbkINJs
69yERS3140g8qOgFSVIcq031RpOTDi9bQ4P54aTXy+ZeLEZnoK4GLC2eewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZl6ZPJM0s6ho8vR/fn7CCx8oV7MB8GA1UdIwQY
MBaAFPckEJ8hdwLmmA25BTqPRxD8Cgp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXlRUW55RjNBdWFZRGJrRk9vOUhFUHdLQ25vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZDY3NjgtMDJlOS00M2RjLTgyZDgt
YjJmNmJjM2UwYjM1LzEvOXlRUW55RjNBdWFZRGJrRk9vOUhFUHdLQ25vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8wZDY3NjgtMDJlOS00M2RjLTgyZDgtYjJmNmJjM2UwYjM1
LzEvOXlRUW55RjNBdWFZRGJrRk9vOUhFUHdLQ25vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1gD+K3B
OK4p7wKdmEE56bIU1Dxu3gOUUJ3Krd1JdHmcmp1qn1OBDVloEqOOluUe+PnEeumr
Y1eZ/gb2zzNm4fF8nS1eTa7AWq30vYEoUWgkw2GKJcCw22O4zZTahUxu3Lb1q7KZ
oOJFuo+PH3sa3Gi90ZZQ/292yyHBi85z1in4LqVPdbEB1PQjvZ3eEX2h6+QSFyNU
XJ0OX5NTkI6xOCERm1M+r52SJ8DfGCwK96i1BjeDz4Q94Mw63dEPUg6dGphzF1fJ
CJXeMh7zLYUhX4XpaB2yozgLmIfsi/ZrYiL+fPN3mgL9COoKM1jwrmPSifuiDipF
fehs6qvRoyhMAA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:58 2026 by rpki-client