Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
File: 9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json)
Hash identifier: wLD8b3zEKKnfBuDvAydbqRd2eD37YuBaD4pRGiQy7Nc=
Subject key identifier: 97:7C:67:CB:D0:78:2E:3E:AD:6E:34:76:6D:1D:75:40:04:44:10:76
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Certificate issuer: /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial: 019D38D37A7A231A5AB344EF8342CEDBB3B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
Manifest number: 1204
Signing time: Sun 29 Mar 2026 09:01:16 +0000
Manifest this update: Sun 29 Mar 2026 09:01:16 +0000
Manifest next update: Mon 30 Mar 2026 09:01:16 +0000
Files and hashes: 1: 1BAPBEHZ2kSoCDAM5eDbrIA1dgo.roa (hash: 1vCNqRI8XEb7PjtGyd1pWNMKL00lL0ojPCYN9P6eYI4=)
2: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: kC1ny1nGjW94fiHSI7BuKhrgron9gDmgHV2HBcxubN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7a:7a:23:1a:5a:b3:44:ef:83:42:ce:db:b3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Validity
Not Before: Mar 29 09:01:16 2026 GMT
Not After : Mar 30 09:01:16 2026 GMT
Subject: CN=977c67cbd0782e3ead6e34766d1d754004441076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0a:2b:1b:46:14:62:46:9f:4c:53:99:6c:26:
45:3a:5d:a5:ca:0e:80:db:ea:33:bc:d8:59:e9:3d:
6b:b0:09:c1:e9:4f:91:eb:8b:41:51:1c:66:0d:fa:
1d:2a:a5:aa:e5:76:34:b3:b3:90:9a:72:9b:02:28:
e3:33:38:15:bf:76:e5:5c:92:65:06:fa:80:1d:f2:
1f:93:0f:4d:a2:74:c7:d8:b4:f8:ba:88:cb:73:11:
e2:a0:ed:a6:e0:8f:d6:3e:0b:1a:61:c0:ed:5f:b2:
19:89:6c:69:4e:dc:1c:05:46:d3:a2:37:bf:a2:63:
f6:99:c0:17:2e:a4:28:43:3e:53:05:55:89:a3:cf:
ab:58:fa:79:cd:cb:13:dc:ed:8e:d0:f1:ec:53:52:
74:a1:9a:e7:f9:42:d5:80:de:cb:f1:fd:e0:9f:8f:
e5:3b:1f:11:65:78:8a:44:aa:1d:bc:db:96:34:a0:
1c:f5:0e:c7:08:42:68:f6:31:66:24:b2:cb:3a:4c:
44:66:e2:ed:ad:df:b8:fa:8a:82:19:d1:fd:e4:c9:
bf:b5:7f:fc:a6:78:60:89:7a:3d:69:3a:c9:4a:53:
92:15:96:25:58:19:c5:b5:b9:20:4a:5c:0f:ca:d0:
28:1f:ad:e3:ec:90:c0:c4:c1:65:f3:b8:fa:9c:61:
e8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7C:67:CB:D0:78:2E:3E:AD:6E:34:76:6D:1D:75:40:04:44:10:76
X509v3 Authority Key Identifier:
keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3c:ff:41:18:8f:a7:56:80:29:65:59:d1:14:cc:bf:c1:e3:
d2:3d:ef:c2:b7:1e:18:0d:38:1b:33:3f:ee:61:fc:89:15:59:
0c:21:50:20:fc:37:05:22:ba:4f:c0:95:d2:8a:2f:95:02:f2:
d1:7e:03:03:58:21:41:f1:db:39:c0:f9:6b:7f:a8:38:84:14:
73:cb:0a:84:1c:c5:d0:3f:59:74:6e:59:6d:c3:d5:2e:33:9e:
95:72:bd:39:9c:58:b9:9b:81:d6:d2:7d:e6:3b:41:18:22:96:
a1:fa:5c:bb:17:26:ee:38:b7:06:60:c1:63:69:07:04:fe:3c:
46:23:7c:4e:28:13:c5:90:b7:75:8f:b9:d2:eb:72:0d:8a:70:
51:6c:77:17:ca:d1:a6:66:6a:1b:fa:44:1b:41:75:14:ea:23:
f6:0f:9e:10:06:a7:a1:e8:89:c5:36:60:b1:de:ed:8c:bc:e3:
71:c2:f5:10:c3:8e:96:76:a0:8d:e9:9d:0b:b8:9a:d5:ff:3b:
41:c1:3c:ea:b4:96:9e:74:04:09:cf:c1:0a:f0:57:16:1a:07:
4c:a8:6b:52:10:c6:a4:3a:40:91:83:cb:ab:3c:5e:eb:c6:9f:
d9:9b:7c:9e:e6:f5:2e:7f:67:91:f6:30:8f:5e:6e:f6:d4:4d:
db:4e:2c:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0403p6Ixpas0Tvg0LO27OzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NjQwM2JjMWM4NzRlZWYwOWI4YTEzNDQxNTVhYmMzZjA1
NzViMTUwHhcNMjYwMzI5MDkwMTE2WhcNMjYwMzMwMDkwMTE2WjAzMTEwLwYDVQQD
Eyg5NzdjNjdjYmQwNzgyZTNlYWQ2ZTM0NzY2ZDFkNzU0MDA0NDQxMDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0worG0YUYkafTFOZbCZFOl2lyg6A
2+ozvNhZ6T1rsAnB6U+R64tBURxmDfodKqWq5XY0s7OQmnKbAijjMzgVv3blXJJl
BvqAHfIfkw9NonTH2LT4uojLcxHioO2m4I/WPgsaYcDtX7IZiWxpTtwcBUbToje/
omP2mcAXLqQoQz5TBVWJo8+rWPp5zcsT3O2O0PHsU1J0oZrn+ULVgN7L8f3gn4/l
Ox8RZXiKRKodvNuWNKAc9Q7HCEJo9jFmJLLLOkxEZuLtrd+4+oqCGdH95Mm/tX/8
pnhgiXo9aTrJSlOSFZYlWBnFtbkgSlwPytAoH63j7JDAxMFl87j6nGHoSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJd8Z8vQeC4+rW40dm0ddUAERBB2MB8GA1UdIwQY
MBaAFPVkA7wch07vCbihNEFVq8PwV1sVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xNzQ4NjAtMGM1YS00NGYwLTk3ZTct
ZmFiODVlZTU3MDJhLzEvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xNzQ4NjAtMGM1YS00NGYwLTk3ZTctZmFiODVlZTU3MDJh
LzEvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDz/QRiP
p1aAKWVZ0RTMv8Hj0j3vwrceGA04GzM/7mH8iRVZDCFQIPw3BSK6T8CV0oovlQLy
0X4DA1ghQfHbOcD5a3+oOIQUc8sKhBzF0D9ZdG5ZbcPVLjOelXK9OZxYuZuB1tJ9
5jtBGCKWofpcuxcm7ji3BmDBY2kHBP48RiN8TigTxZC3dY+50utyDYpwUWx3F8rR
pmZqG/pEG0F1FOoj9g+eEAanoeiJxTZgsd7tjLzjccL1EMOOlnagjemdC7ia1f87
QcE86rSWnnQECc/BCvBXFhoHTKhrUhDGpDpAkYPLqzxe68af2Zt8nub1Ln9nkfYw
j15u9tRN204slA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:05 2026 by rpki-client