Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
File: m9LNu_XMLYOp2PExgRJx8DLSFFA.mft (raw, json)
Hash identifier: c+ev/iSVz1xvv/x5d1dYoX0bGXBLg4OBYtBuWa8CH8I=
Subject key identifier: 81:71:A0:4C:21:07:8A:ED:68:BE:19:52:74:80:A1:1D:00:EF:CB:CD
Authority key identifier: 9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50
Certificate issuer: /CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
Certificate serial: 019D39412353CAF59A2C45AD17AEACE298EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
Manifest number: 25
Signing time: Sun 29 Mar 2026 11:01:03 +0000
Manifest this update: Sun 29 Mar 2026 11:01:03 +0000
Manifest next update: Mon 30 Mar 2026 11:01:03 +0000
Files and hashes: 1: m9LNu_XMLYOp2PExgRJx8DLSFFA.crl (hash: ry3ZrOxJx6jTQ2YNjluo4iA8LSfAKo1X23MsLdiqIiQ=)
2: sRIRtm1WlkJMryRVLofyBLDhtX0.roa (hash: Ho8VKDeLdI3OgV2j2givaKlNGpZaNoqeOK7mD/4wmSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:23:53:ca:f5:9a:2c:45:ad:17:ae:ac:e2:98:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
Validity
Not Before: Mar 29 11:01:03 2026 GMT
Not After : Mar 30 11:01:03 2026 GMT
Subject: CN=8171a04c21078aed68be19527480a11d00efcbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:d7:2d:43:e9:7c:87:9e:1a:4f:e1:30:a3:
94:a3:55:79:36:e3:e2:ad:4e:66:bd:44:6a:16:56:
16:8f:39:0e:31:54:7a:cf:a5:69:0a:56:69:86:2a:
39:d6:a2:e0:13:b7:a2:0c:f7:79:ff:b2:b6:21:2f:
ef:66:8d:26:83:7b:c8:78:26:de:2a:05:ff:0d:c3:
1b:92:b4:6f:ef:9b:70:72:cb:f3:49:ca:9b:c6:09:
54:ac:93:86:e1:5b:8f:1c:13:e9:cc:98:57:aa:97:
d8:a6:8a:23:4a:0c:fc:1d:fa:1b:6f:3b:88:ce:14:
1c:e4:52:e8:75:74:59:50:64:4d:ce:b8:22:dc:93:
30:31:c0:6b:9d:b1:f2:b3:5b:36:06:ec:6b:d1:9f:
97:36:d3:af:cb:76:d5:17:53:ac:0e:32:a4:15:f0:
7e:f3:b5:1e:56:78:14:af:98:9a:0e:4c:95:0a:07:
9b:cc:f8:da:36:f8:22:0e:6f:57:64:94:46:fc:6b:
d2:77:73:7c:73:33:3e:09:c0:05:4a:cb:c1:aa:f5:
83:0b:e0:35:93:8a:78:34:8f:54:61:18:a8:47:db:
76:2f:02:bd:f5:fa:be:3e:12:76:01:91:42:9e:6d:
23:da:a6:39:03:3d:97:b3:d1:8f:65:09:81:23:68:
1f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:71:A0:4C:21:07:8A:ED:68:BE:19:52:74:80:A1:1D:00:EF:CB:CD
X509v3 Authority Key Identifier:
keyid:9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:66:89:7b:1a:07:27:81:eb:1b:ca:b1:b3:c4:c7:7b:3a:f1:
a9:e3:af:54:2a:cd:f3:20:ac:49:33:42:14:41:3f:c7:9c:b4:
e5:69:4f:a4:8a:f6:e0:a1:82:e4:6c:f6:a4:ce:55:32:36:92:
02:18:e9:a2:bc:47:96:b1:2f:dd:b7:17:13:bf:5f:50:9f:01:
e0:cf:c5:de:3b:6c:21:56:f3:6d:29:2c:0c:b1:f9:f0:3c:60:
56:b5:4e:70:68:65:78:fb:cb:68:0d:e4:d6:16:c2:a3:21:a7:
df:6c:39:79:f9:64:0a:c4:12:1f:57:cd:89:cd:2c:b5:30:63:
c6:31:95:ad:54:43:8e:e5:65:c7:57:00:78:e3:f5:57:fa:a4:
c3:a0:b0:4b:02:7d:bf:4d:f4:dc:bf:a0:ea:72:8c:5f:cc:48:
90:9c:7e:c3:b6:f6:dc:ca:bc:b2:03:68:5a:ba:8c:e3:54:e9:
ab:47:c0:70:67:60:7b:10:60:80:28:98:e2:2f:67:e1:da:af:
07:d8:cd:2b:f4:f2:c4:ba:8c:19:98:55:6c:40:02:86:43:10:
4f:27:44:36:f8:8a:0e:97:48:5d:b3:54:f8:7f:d7:c3:7a:be:
a9:81:fb:6d:5c:4a:80:ae:35:51:26:73:87:e1:84:95:b2:68:
b5:bb:7f:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QSNTyvWaLEWtF66s4pjqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZDJjZGJiZjVjYzJkODNhOWQ4ZjEzMTgxMTI3MWYwMzJk
MjE0NTAwHhcNMjYwMzI5MTEwMTAzWhcNMjYwMzMwMTEwMTAzWjAzMTEwLwYDVQQD
Eyg4MTcxYTA0YzIxMDc4YWVkNjhiZTE5NTI3NDgwYTExZDAwZWZjYmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKHXLUPpfIeeGk/hMKOUo1V5NuPi
rU5mvURqFlYWjzkOMVR6z6VpClZphio51qLgE7eiDPd5/7K2IS/vZo0mg3vIeCbe
KgX/DcMbkrRv75twcsvzScqbxglUrJOG4VuPHBPpzJhXqpfYpoojSgz8HfobbzuI
zhQc5FLodXRZUGRNzrgi3JMwMcBrnbHys1s2Buxr0Z+XNtOvy3bVF1OsDjKkFfB+
87UeVngUr5iaDkyVCgebzPjaNvgiDm9XZJRG/GvSd3N8czM+CcAFSsvBqvWDC+A1
k4p4NI9UYRioR9t2LwK99fq+PhJ2AZFCnm0j2qY5Az2Xs9GPZQmBI2gfCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFxoEwhB4rtaL4ZUnSAoR0A78vNMB8GA1UdIwQY
MBaAFJvSzbv1zC2DqdjxMYEScfAy0hRQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTlMTnVfWE1MWU9wMlBFeGdSSng4RExTRkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iY2NmMTctNzJhZC00MzM2LWI1NWQt
Yjc1NDdhYjg3MzJlLzEvbTlMTnVfWE1MWU9wMlBFeGdSSng4RExTRkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iY2NmMTctNzJhZC00MzM2LWI1NWQtYjc1NDdhYjg3MzJl
LzEvbTlMTnVfWE1MWU9wMlBFeGdSSng4RExTRkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemaJexoH
J4HrG8qxs8THezrxqeOvVCrN8yCsSTNCFEE/x5y05WlPpIr24KGC5Gz2pM5VMjaS
AhjporxHlrEv3bcXE79fUJ8B4M/F3jtsIVbzbSksDLH58DxgVrVOcGhlePvLaA3k
1hbCoyGn32w5eflkCsQSH1fNic0stTBjxjGVrVRDjuVlx1cAeOP1V/qkw6CwSwJ9
v0303L+g6nKMX8xIkJx+w7b23Mq8sgNoWrqM41Tpq0fAcGdgexBggCiY4i9n4dqv
B9jNK/TyxLqMGZhVbEAChkMQTydENviKDpdIXbNU+H/Xw3q+qYH7bVxKgK41USZz
h+GElbJotbt/aw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:40 2026 by rpki-client