Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
File: 9O9duhAKkrJETz5RLQGlksAZUcI.mft (raw, json)
Hash identifier: K05BcWb13E9T+tsoURSGgm1H1HMfgs5c1ik8IGuK5HI=
Subject key identifier: 94:1D:DC:7A:82:22:92:F2:61:84:C6:61:4E:F8:93:34:5D:BA:A8:28
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial: 019D38D32BACBAC7A5C2F9BF4E13DF70D7E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
Manifest number: 0AFC
Signing time: Sun 29 Mar 2026 09:00:56 +0000
Manifest this update: Sun 29 Mar 2026 09:00:56 +0000
Manifest next update: Mon 30 Mar 2026 09:00:56 +0000
Files and hashes: 1: 3FkzAPl5dDeXfEEMRSwLpvP5dBw.roa (hash: qThiWbhOm4MVwzcc4QS1C0KW/Cr2nD4QzMpn3VG/nII=)
2: 9O9duhAKkrJETz5RLQGlksAZUcI.crl (hash: yrKxomI/ouDzM8I6UXMEvOOmWst5e202qgQpS7XqXHE=)
3: GvMwO11Qb_MZ3FmpbZFa_YHcQEw.roa (hash: HHH3HBau0CenEM488oLj5N8VnZu9hoi/hHRUfx5gvaA=)
4: vAGwaiC2Bp1wYYYgaEDGo4Uiqpc.roa (hash: kDL6yMpm7SXuYLlIMpKeyi5R+9DyzeTyoxzQraFeyqU=)
5: yXsRkQTNVDsj9z8xG-aM4CEyin8.roa (hash: ts64cc9kwijL/HlxdE2LWSMe9OcM5b1Rlyuz3fR2RTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2b:ac:ba:c7:a5:c2:f9:bf:4e:13:df:70:d7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Validity
Not Before: Mar 29 09:00:56 2026 GMT
Not After : Mar 30 09:00:56 2026 GMT
Subject: CN=941ddc7a822292f26184c6614ef893345dbaa828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:6e:81:7c:ea:41:8e:eb:fc:fd:6c:65:2f:
fb:f4:3a:94:ff:70:3a:ea:31:4a:aa:68:69:b1:6e:
93:94:3d:b0:c0:68:0a:ef:f9:40:fc:37:72:5d:d3:
0a:37:8d:35:43:a9:23:c2:75:7d:53:d1:4e:15:41:
5e:7e:6e:c5:b1:47:2c:11:39:47:dd:d8:5f:16:e9:
0e:c6:bd:4d:37:72:79:38:28:a2:d6:e2:39:86:11:
d3:ac:72:81:2c:70:e1:c6:0d:dc:56:33:90:b6:a5:
a9:95:b5:24:93:af:cb:c0:0d:69:22:aa:ac:9d:97:
f5:cf:1d:13:00:02:43:6b:f6:a4:71:a0:db:72:ef:
a0:bf:e5:de:50:31:f2:e3:29:db:a8:dd:9b:41:3f:
41:90:0c:2b:71:37:a5:46:bc:a8:93:15:a5:2f:0f:
b8:c2:80:21:80:e6:1d:29:e1:00:38:cf:38:71:27:
f5:e4:d5:94:b8:9f:ca:1c:c5:26:d8:62:9c:ac:03:
a1:50:51:36:13:45:fd:4d:08:ca:f9:61:84:24:cd:
eb:22:af:d2:88:73:ee:48:7c:65:2a:0e:b7:10:ed:
68:03:dc:b5:53:93:f2:d5:ba:61:93:f5:2d:bd:60:
56:85:8f:8e:f9:63:48:68:56:91:9d:7a:23:40:39:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1D:DC:7A:82:22:92:F2:61:84:C6:61:4E:F8:93:34:5D:BA:A8:28
X509v3 Authority Key Identifier:
keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:76:66:c3:bf:ed:85:f3:36:a2:f8:f6:22:d2:c4:23:93:19:
f2:9b:b5:52:5f:ce:72:7a:6e:5d:00:e1:f3:3a:1c:f7:52:ba:
4d:1c:2b:ed:f3:f2:ce:1b:61:1d:9a:27:ab:14:48:04:3e:0f:
63:68:80:ad:a3:8c:35:64:f6:61:5a:d8:98:a3:20:97:96:b6:
70:c4:83:ee:9f:6e:8e:ec:cb:f0:7e:11:db:4e:f0:49:f2:80:
96:9e:66:58:81:51:56:4d:9b:9a:23:73:38:75:81:a4:88:ea:
53:2a:10:8a:c2:bf:da:e6:44:8c:da:ff:a9:ee:39:ad:e6:69:
5d:36:ed:2c:b9:de:77:68:27:e3:4b:0d:79:38:11:e7:b3:a8:
8e:d3:91:44:e1:6c:a5:e7:bf:08:69:7e:d1:dc:dd:0c:81:c9:
84:17:bd:5d:a8:c7:3b:2c:96:1a:23:18:83:8f:62:01:f6:32:
52:e2:f2:40:70:8f:2d:ea:01:4f:63:f4:6d:ca:02:67:29:7b:
31:6b:b1:30:a7:82:94:61:c1:c6:84:84:1d:bc:dc:2c:5c:53:
15:66:90:94:b2:f5:09:97:15:ef:df:f6:1f:36:83:d0:43:e1:
53:77:20:7e:d7:30:06:fc:46:b4:41:b5:4c:ad:2e:09:8a:df:
f0:b0:8a:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040yususelwvm/ThPfcNflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZWY1ZGJhMTAwYTkyYjI0NDRmM2U1MTJkMDFhNTkyYzAx
OTUxYzIwHhcNMjYwMzI5MDkwMDU2WhcNMjYwMzMwMDkwMDU2WjAzMTEwLwYDVQQD
Eyg5NDFkZGM3YTgyMjI5MmYyNjE4NGM2NjE0ZWY4OTMzNDVkYmFhODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSxugXzqQY7r/P1sZS/79DqU/3A6
6jFKqmhpsW6TlD2wwGgK7/lA/DdyXdMKN401Q6kjwnV9U9FOFUFefm7FsUcsETlH
3dhfFukOxr1NN3J5OCii1uI5hhHTrHKBLHDhxg3cVjOQtqWplbUkk6/LwA1pIqqs
nZf1zx0TAAJDa/akcaDbcu+gv+XeUDHy4ynbqN2bQT9BkAwrcTelRryokxWlLw+4
woAhgOYdKeEAOM84cSf15NWUuJ/KHMUm2GKcrAOhUFE2E0X9TQjK+WGEJM3rIq/S
iHPuSHxlKg63EO1oA9y1U5Py1bphk/UtvWBWhY+O+WNIaFaRnXojQDms7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQd3HqCIpLyYYTGYU74kzRduqgoMB8GA1UdIwQY
MBaAFPTvXboQCpKyRE8+US0BpZLAGVHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDct
YWQwMjdlOTVjNWM3LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDctYWQwMjdlOTVjNWM3
LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHZmw7/t
hfM2ovj2ItLEI5MZ8pu1Ul/OcnpuXQDh8zoc91K6TRwr7fPyzhthHZonqxRIBD4P
Y2iAraOMNWT2YVrYmKMgl5a2cMSD7p9ujuzL8H4R207wSfKAlp5mWIFRVk2bmiNz
OHWBpIjqUyoQisK/2uZEjNr/qe45reZpXTbtLLned2gn40sNeTgR57OojtORROFs
pee/CGl+0dzdDIHJhBe9XajHOyyWGiMYg49iAfYyUuLyQHCPLeoBT2P0bcoCZyl7
MWuxMKeClGHBxoSEHbzcLFxTFWaQlLL1CZcV79/2HzaD0EPhU3cgftcwBvxGtEG1
TK0uCYrf8LCK2g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:01 2026 by rpki-client