Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.mft
File: 9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.mft (raw, json)
Hash identifier: pK4Aj2ADt5sfMdLNI3GenZLZeDB903E4VOgat8zAmvU=
Subject key identifier: 0D:C8:E2:18:DC:9A:A7:5F:F4:33:09:E5:F4:1F:B7:71:DC:E2:34:73
Authority key identifier: F5:19:77:AA:22:77:72:5E:D1:0E:B5:67:4D:5D:A1:D6:62:2F:41:B7
Certificate issuer: /CN=f51977aa2277725ed10eb5674d5da1d6622f41b7
Certificate serial: 019D38D3925979F2DF5B8EDC00DF4D34924C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.mft
Manifest number: 016B
Signing time: Sun 29 Mar 2026 09:01:22 +0000
Manifest this update: Sun 29 Mar 2026 09:01:22 +0000
Manifest next update: Mon 30 Mar 2026 09:01:22 +0000
Files and hashes: 1: 9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.crl (hash: bkln2hmfspKB2yXSL+euytJE2pj7yza+5wNQ4Ezyttw=)
2: ePRndmdPQkAmQ25IxhGXY-VBItY.roa (hash: z8m/69HlbuBNdd6nUe5ZAEp9Wjk/etrtEAsqzncs40c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:92:59:79:f2:df:5b:8e:dc:00:df:4d:34:92:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51977aa2277725ed10eb5674d5da1d6622f41b7
Validity
Not Before: Mar 29 09:01:22 2026 GMT
Not After : Mar 30 09:01:22 2026 GMT
Subject: CN=0dc8e218dc9aa75ff43309e5f41fb771dce23473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:5b:f5:1e:01:42:37:79:dc:dc:e6:54:c0:
3f:ac:b6:25:02:10:02:6b:db:cb:20:16:0f:54:77:
d4:8d:c8:3e:db:41:f4:d9:33:43:c2:7b:37:ee:fc:
f6:a0:3d:71:33:7e:53:e3:4c:71:7b:18:12:20:b4:
23:0f:e3:ed:7f:55:db:f2:ef:ef:20:77:db:f6:93:
05:a7:73:57:67:2f:17:76:04:51:09:ae:c3:e6:9a:
73:8c:07:c3:9f:de:96:61:74:95:d6:27:e1:2b:e8:
06:cf:b6:7e:de:8f:93:20:14:d1:a8:16:98:79:08:
07:19:b5:60:cb:51:8c:f4:bf:0f:fd:6f:86:3e:27:
2e:11:aa:9a:b3:6a:b4:99:2a:bc:ad:8d:8a:00:d5:
d7:45:57:74:04:af:c2:0d:c7:62:f0:c2:7c:5c:d8:
20:8e:56:47:f3:78:26:9d:d1:b7:59:d4:0f:30:53:
d3:fb:6a:14:9b:d1:29:f5:60:be:9a:45:3b:b0:5e:
3f:48:4b:34:09:63:0a:f5:f9:2b:70:33:dd:27:ae:
d7:e4:f6:84:2a:90:73:4b:2d:21:45:4b:0c:79:20:
68:98:67:6c:eb:30:82:e6:cf:b5:da:fd:ae:3b:c3:
d7:2f:47:17:fb:d2:9d:48:b0:21:04:e1:87:bc:4b:
7c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C8:E2:18:DC:9A:A7:5F:F4:33:09:E5:F4:1F:B7:71:DC:E2:34:73
X509v3 Authority Key Identifier:
keyid:F5:19:77:AA:22:77:72:5E:D1:0E:B5:67:4D:5D:A1:D6:62:2F:41:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:04:25:57:40:25:c7:3e:8a:f9:a1:e2:22:26:01:a3:04:57:
82:42:b3:c1:d5:66:ae:63:c8:2a:bf:27:39:ec:0e:80:bb:fe:
59:ae:7c:bf:a3:de:f8:53:92:2f:43:de:52:3b:aa:fe:72:24:
88:31:72:f2:3a:f0:e2:4a:5f:3d:94:50:ae:55:a6:39:90:c7:
42:b0:e4:92:22:cb:64:03:71:c9:57:6b:b9:fa:01:89:15:72:
43:20:1c:04:31:df:de:fd:42:68:81:aa:cc:98:fa:e3:2c:d4:
da:82:ed:dd:8f:71:36:7b:23:ff:b6:de:aa:14:5f:09:87:71:
e7:c8:93:49:65:d9:34:a4:be:55:8f:f0:f4:ad:3a:0e:fe:a0:
01:89:c3:b5:19:24:0f:a2:b4:27:6b:6a:92:4f:35:fd:a0:d1:
59:74:f5:f2:d5:ee:af:c5:e4:83:76:e4:11:a4:32:43:38:ba:
3a:3a:29:54:4a:10:fc:cc:74:88:b6:8b:3f:04:d4:57:13:74:
ed:86:37:12:2e:67:ea:dd:ce:c3:6f:2d:8d:11:10:32:28:f2:
c2:03:ac:c0:d1:a0:d6:8c:de:9b:99:20:b0:a1:a4:6d:6a:b1:
0e:1f:aa:4c:b6:c2:0f:ca:bb:0e:ab:8d:c7:eb:38:7a:b9:ee:
ba:28:13:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0405JZefLfW47cAN9NNJJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTk3N2FhMjI3NzcyNWVkMTBlYjU2NzRkNWRhMWQ2NjIy
ZjQxYjcwHhcNMjYwMzI5MDkwMTIyWhcNMjYwMzMwMDkwMTIyWjAzMTEwLwYDVQQD
EygwZGM4ZTIxOGRjOWFhNzVmZjQzMzA5ZTVmNDFmYjc3MWRjZTIzNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjpb9R4BQjd53NzmVMA/rLYlAhAC
a9vLIBYPVHfUjcg+20H02TNDwns37vz2oD1xM35T40xxexgSILQjD+Ptf1Xb8u/v
IHfb9pMFp3NXZy8XdgRRCa7D5ppzjAfDn96WYXSV1ifhK+gGz7Z+3o+TIBTRqBaY
eQgHGbVgy1GM9L8P/W+GPicuEaqas2q0mSq8rY2KANXXRVd0BK/CDcdi8MJ8XNgg
jlZH83gmndG3WdQPMFPT+2oUm9Ep9WC+mkU7sF4/SEs0CWMK9fkrcDPdJ67X5PaE
KpBzSy0hRUsMeSBomGds6zCC5s+12v2uO8PXL0cX+9KdSLAhBOGHvEt8wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3I4hjcmqdf9DMJ5fQft3Hc4jRzMB8GA1UdIwQY
MBaAFPUZd6oid3Je0Q61Z01dodZiL0G3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJsM3FpSjNjbDdSRHJWblRWMmgxbUl2UWJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80NmVlYzEtODZlMy00NzliLTkzY2Yt
MTAzNWRjYzlkNDg5LzEvOVJsM3FpSjNjbDdSRHJWblRWMmgxbUl2UWJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80NmVlYzEtODZlMy00NzliLTkzY2YtMTAzNWRjYzlkNDg5
LzEvOVJsM3FpSjNjbDdSRHJWblRWMmgxbUl2UWJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagQlV0Al
xz6K+aHiIiYBowRXgkKzwdVmrmPIKr8nOewOgLv+Wa58v6Pe+FOSL0PeUjuq/nIk
iDFy8jrw4kpfPZRQrlWmOZDHQrDkkiLLZANxyVdrufoBiRVyQyAcBDHf3v1CaIGq
zJj64yzU2oLt3Y9xNnsj/7beqhRfCYdx58iTSWXZNKS+VY/w9K06Dv6gAYnDtRkk
D6K0J2tqkk81/aDRWXT18tXur8Xkg3bkEaQyQzi6OjopVEoQ/Mx0iLaLPwTUVxN0
7YY3Ei5n6t3Ow28tjREQMijywgOswNGg1ozem5kgsKGkbWqxDh+qTLbCD8q7DquN
x+s4ernuuigTvQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:15 2026 by rpki-client