Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
File: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft (raw, json)
Hash identifier: fJlHkiOxaibV3Zh8J7ME9CpdZv6wLgfS5JrZm0J21e4=
Subject key identifier: EA:B6:AC:CC:CD:F8:84:82:57:63:AA:8B:9A:A6:B5:B7:8A:4A:BA:7F
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Certificate issuer: /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial: 019D37C124603408DB7D7CF7BDC2BC95037C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
Manifest number: 0DAC
Signing time: Sun 29 Mar 2026 04:01:37 +0000
Manifest this update: Sun 29 Mar 2026 04:01:37 +0000
Manifest next update: Mon 30 Mar 2026 04:01:37 +0000
Files and hashes: 1: 5FdT73JkLCgHgzugWWXpOCrhVgc.roa (hash: oluoiDxtzFoApZrsUB2VZK/Twzibw5WYce0WItyA/mY=)
2: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl (hash: reZlMAnEmVoTHpCPPEAjRRw35TesPyd/SrBVqWCGtWU=)
3: gFVBldPsPJ9_Z3436EbOexrFKyQ.roa (hash: XpNUD5CKdNtgQ6f8YKYlS0lGIc67007/Bg5jHv80Qgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:24:60:34:08:db:7d:7c:f7:bd:c2:bc:95:03:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Validity
Not Before: Mar 29 04:01:37 2026 GMT
Not After : Mar 30 04:01:37 2026 GMT
Subject: CN=eab6accccdf884825763aa8b9aa6b5b78a4aba7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:33:dc:3b:07:6d:83:9d:23:aa:6e:7c:fd:
3a:76:31:db:d0:b8:5d:1c:1e:99:42:8b:97:1d:e5:
a5:80:2e:08:a6:64:92:b6:5f:43:3b:57:ce:b3:cf:
af:2e:69:92:3f:c1:f5:42:b9:a4:9b:67:2e:60:a0:
2b:27:6d:7c:36:5a:9c:8b:9b:ad:33:4c:6e:43:06:
9f:13:fe:33:28:81:13:ec:ae:7c:55:a5:08:38:b2:
10:f4:97:75:15:f6:90:23:55:8b:c9:27:cc:bb:14:
a8:b8:5a:4d:f2:12:97:b6:98:2f:e1:f9:a3:76:f6:
2d:66:5e:de:1b:75:d4:5d:29:a9:e3:8b:00:18:e2:
e3:74:12:0f:9b:cc:c3:82:19:0b:14:85:af:61:5c:
57:47:e7:57:5f:09:25:3c:30:c8:7f:b7:76:4a:43:
46:3e:cf:3a:a2:0f:df:11:02:78:5e:3c:b1:78:6d:
22:79:6c:28:b7:4c:35:06:13:04:a0:3d:11:f6:8b:
ad:a6:53:46:2d:3c:c7:45:7d:2a:3e:44:2e:a7:ad:
7c:35:f8:f0:76:53:4d:a8:4b:2c:71:ac:36:6c:17:
58:3b:84:e6:63:a6:b6:6f:bf:a1:4e:02:33:2c:62:
b8:62:a4:79:51:e7:5a:7c:45:2b:f5:e7:49:6e:0f:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B6:AC:CC:CD:F8:84:82:57:63:AA:8B:9A:A6:B5:B7:8A:4A:BA:7F
X509v3 Authority Key Identifier:
keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b9:40:75:25:8a:b8:0b:72:fd:05:cb:82:47:c2:14:93:0d:
e3:70:36:e5:c7:31:81:70:aa:e2:53:fa:4f:2f:c0:69:ea:09:
d8:99:ee:16:30:5b:8b:c0:fa:07:fe:d4:bd:2c:61:58:30:11:
7b:f9:29:0f:e4:75:d6:01:59:49:1d:a9:41:e7:24:1d:2c:78:
bf:04:dc:78:7c:64:00:03:88:ed:c6:ec:ec:2a:b8:bc:87:4b:
8f:33:f0:cf:41:0a:14:70:e7:1c:e7:ab:ef:ce:66:7d:fd:78:
f6:d8:11:43:a1:ec:64:6f:99:ca:d7:95:a6:ca:64:0d:62:56:
ce:70:39:43:33:9a:34:b4:43:22:6d:1e:e2:7c:70:c2:29:3f:
52:50:58:71:f2:30:68:2d:61:3f:53:c3:9e:d1:dd:b7:15:c7:
a8:91:00:7c:b1:a8:5b:8f:cc:14:f2:e9:72:36:a9:de:80:48:
16:fd:52:e4:c4:32:44:4d:71:bc:a9:25:a8:e5:ba:7c:7d:9a:
fa:84:6a:8f:a3:71:e9:cc:e6:6f:79:09:31:3c:45:04:1f:3c:
6f:d3:33:37:4f:46:34:4d:f5:79:f0:a5:06:d2:88:c4:b6:ab:
5b:2c:4a:7d:97:64:72:b1:2c:47:12:c7:a7:f6:09:1e:79:39:
3a:a0:5e:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wSRgNAjbfXz3vcK8lQN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MjRjYmE1MjFjMDgwZGI3MmE2ZTU0YTFiOGNmNDQ5NWNi
YmM3ZDYwHhcNMjYwMzI5MDQwMTM3WhcNMjYwMzMwMDQwMTM3WjAzMTEwLwYDVQQD
EyhlYWI2YWNjY2NkZjg4NDgyNTc2M2FhOGI5YWE2YjViNzhhNGFiYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyScz3DsHbYOdI6pufP06djHb0Lhd
HB6ZQouXHeWlgC4IpmSStl9DO1fOs8+vLmmSP8H1Qrmkm2cuYKArJ218Nlqci5ut
M0xuQwafE/4zKIET7K58VaUIOLIQ9Jd1FfaQI1WLySfMuxSouFpN8hKXtpgv4fmj
dvYtZl7eG3XUXSmp44sAGOLjdBIPm8zDghkLFIWvYVxXR+dXXwklPDDIf7d2SkNG
Ps86og/fEQJ4XjyxeG0ieWwot0w1BhMEoD0R9outplNGLTzHRX0qPkQup618Nfjw
dlNNqEsscaw2bBdYO4TmY6a2b7+hTgIzLGK4YqR5UedafEUr9edJbg8f0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOq2rMzN+ISCV2Oqi5qmtbeKSrp/MB8GA1UdIwQY
MBaAFPcky6UhwIDbcqblShuM9Elcu8fWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXlUTHBTSEFnTnR5cHVWS0c0ejBTVnk3eDlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80OGI1MGItYWRmZS00ZGZiLWFkODAt
MTAzYjIwNmJhMjhiLzEvOXlUTHBTSEFnTnR5cHVWS0c0ejBTVnk3eDlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80OGI1MGItYWRmZS00ZGZiLWFkODAtMTAzYjIwNmJhMjhi
LzEvOXlUTHBTSEFnTnR5cHVWS0c0ejBTVnk3eDlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrlAdSWK
uAty/QXLgkfCFJMN43A25ccxgXCq4lP6Ty/AaeoJ2JnuFjBbi8D6B/7UvSxhWDAR
e/kpD+R11gFZSR2pQeckHSx4vwTceHxkAAOI7cbs7Cq4vIdLjzPwz0EKFHDnHOer
785mff149tgRQ6HsZG+ZyteVpspkDWJWznA5QzOaNLRDIm0e4nxwwik/UlBYcfIw
aC1hP1PDntHdtxXHqJEAfLGoW4/MFPLpcjap3oBIFv1S5MQyRE1xvKklqOW6fH2a
+oRqj6Nx6czmb3kJMTxFBB88b9MzN09GNE31efClBtKIxLarWyxKfZdkcrEsRxLH
p/YJHnk5OqBe1w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:13 2026 by rpki-client