Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File: 9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier: R56j+fARM8z9elxG5Gz9Rvkp/y3KOwzLsO2BLhNu034=
Subject key identifier: 00:5A:06:C3:F7:0C:C7:FF:8E:AF:3A:9A:01:38:18:0E:E6:67:A1:D6
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 019D382DE3E911A87986AB7E48FF2A788AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 06:00:24 +0000
Manifest this update: Sun 29 Mar 2026 06:00:24 +0000
Manifest next update: Mon 30 Mar 2026 06:00:24 +0000
Files and hashes: 1: 14LKfzEcyprlucXZUzPgqnyuaSo.roa (hash: owEZKmUqoURhemkZHaPKsDWoCPoanQn9LH86MqhDwCI=)
2: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: aIbImUp1MVMIicYFil64iR5gcMy8RS2xN8xAAJdhYrs=)
3: G5qi4rCJoI8AUX8isP7b0ojIn7g.roa (hash: FS/t0aq2LUO9zTLCRQWanvLuxo6AAzEoo01kqAkUXDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e3:e9:11:a8:79:86:ab:7e:48:ff:2a:78:8a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Mar 29 06:00:24 2026 GMT
Not After : Mar 30 06:00:24 2026 GMT
Subject: CN=005a06c3f70cc7ff8eaf3a9a0138180ee667a1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b3:7e:09:23:0d:d5:2a:57:06:7e:a3:f3:22:
f5:4d:57:70:4e:79:77:8b:4c:e4:84:60:6b:ae:e2:
2d:73:e5:3b:e3:19:91:a7:3b:03:13:de:e1:af:78:
f6:77:78:ae:7c:54:58:c8:76:3f:6e:de:c7:94:ab:
f3:27:5c:cd:69:2b:32:96:fe:36:1c:37:a6:d0:36:
17:c2:74:3f:7d:e9:69:1b:23:65:a8:6a:73:9a:c9:
70:fc:a2:83:6d:96:7f:5b:5e:61:b0:5c:af:1d:ed:
9d:4d:a2:3d:40:24:43:85:bd:b0:b8:0b:65:d6:d6:
24:4d:af:52:40:41:e7:2d:11:02:76:de:45:07:70:
71:93:c7:c4:06:07:3d:e1:be:57:67:2e:39:38:28:
16:c3:32:7b:02:38:51:4a:d5:17:58:e9:28:42:66:
9d:b7:cc:12:4a:1f:63:c1:a5:ae:c0:71:b5:60:e4:
23:7c:a6:b3:85:f0:8c:d8:52:03:b6:c3:4b:6b:97:
78:e8:f8:38:f2:3d:c2:f3:4c:1f:03:b7:e1:49:01:
70:cd:31:0f:1c:c9:50:51:9b:f8:00:ec:44:5b:63:
9a:4e:4d:9d:67:da:40:54:89:3c:af:d5:33:dd:1c:
cb:6e:42:01:e7:a1:0c:c8:d1:1c:f3:03:f9:99:e8:
74:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5A:06:C3:F7:0C:C7:FF:8E:AF:3A:9A:01:38:18:0E:E6:67:A1:D6
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:cb:c5:03:b1:ee:52:ef:97:bf:a0:b0:58:11:a0:56:d5:9e:
c3:d8:20:d3:18:62:a3:b1:96:fa:62:77:5a:f8:87:94:f9:5f:
48:41:ff:d5:4f:8e:93:e1:ca:b6:0b:c3:88:dc:7d:32:1f:6f:
98:c2:19:ee:5d:b8:07:84:51:5f:2b:0f:fe:3d:7f:b1:0c:8f:
d1:74:79:37:22:37:99:2e:b0:c3:85:fb:a7:8b:83:41:9a:79:
29:fd:cd:0a:6c:bd:be:0c:35:fc:a4:2f:42:d3:14:45:a7:7f:
21:e5:58:b6:b8:00:a3:0a:6c:ad:7e:a2:d6:90:28:56:62:de:
f2:06:ff:57:77:17:5c:13:40:7d:83:e0:f0:4c:eb:3e:98:4b:
bd:ba:9b:4b:7b:f5:7b:9b:e6:a4:b9:9c:40:91:ce:23:48:e8:
1a:af:20:82:fa:ed:22:24:19:e8:bd:b7:c7:d4:f6:e6:4e:d2:
51:af:2e:b4:20:26:20:12:b0:20:c1:bd:97:9a:94:26:4b:13:
66:15:2e:1e:41:5e:85:ee:13:e5:df:f4:a5:9f:c3:98:41:fa:
5c:c6:07:7d:2b:7e:1d:cd:cc:f1:e3:c3:30:bb:ae:3f:23:1e:
30:1b:d8:67:cc:cb:da:c4:d9:53:2e:9a:3c:66:1b:1e:03:b3:
3c:98:ee:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LePpEah5hqt+SP8qeIq0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjdhYjQ1ODdlNjkwMjJlNWUyYmMyNDEwN2I1MDFkMDMx
YzM3MjAwHhcNMjYwMzI5MDYwMDI0WhcNMjYwMzMwMDYwMDI0WjAzMTEwLwYDVQQD
EygwMDVhMDZjM2Y3MGNjN2ZmOGVhZjNhOWEwMTM4MTgwZWU2NjdhMWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17N+CSMN1SpXBn6j8yL1TVdwTnl3
i0zkhGBrruItc+U74xmRpzsDE97hr3j2d3iufFRYyHY/bt7HlKvzJ1zNaSsylv42
HDem0DYXwnQ/felpGyNlqGpzmslw/KKDbZZ/W15hsFyvHe2dTaI9QCRDhb2wuAtl
1tYkTa9SQEHnLRECdt5FB3Bxk8fEBgc94b5XZy45OCgWwzJ7AjhRStUXWOkoQmad
t8wSSh9jwaWuwHG1YOQjfKazhfCM2FIDtsNLa5d46Pg48j3C80wfA7fhSQFwzTEP
HMlQUZv4AOxEW2OaTk2dZ9pAVIk8r9Uz3RzLbkIB56EMyNEc8wP5meh0aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABaBsP3DMf/jq86mgE4GA7mZ6HWMB8GA1UdIwQY
MBaAFPT3q0WH5pAi5eK8JBB7UB0DHDcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83N2Y0ZjAtYjgzMy00N2I3LWEzYzct
ZWY3MTBlYzdiMmZlLzEvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83N2Y0ZjAtYjgzMy00N2I3LWEzYzctZWY3MTBlYzdiMmZl
LzEvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsvFA7Hu
Uu+Xv6CwWBGgVtWew9gg0xhio7GW+mJ3WviHlPlfSEH/1U+Ok+HKtgvDiNx9Mh9v
mMIZ7l24B4RRXysP/j1/sQyP0XR5NyI3mS6ww4X7p4uDQZp5Kf3NCmy9vgw1/KQv
QtMURad/IeVYtrgAowpsrX6i1pAoVmLe8gb/V3cXXBNAfYPg8EzrPphLvbqbS3v1
e5vmpLmcQJHOI0joGq8ggvrtIiQZ6L23x9T25k7SUa8utCAmIBKwIMG9l5qUJksT
ZhUuHkFehe4T5d/0pZ/DmEH6XMYHfSt+Hc3M8ePDMLuuPyMeMBvYZ8zL2sTZUy6a
PGYbHgOzPJjuTA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:01 2026 by rpki-client