Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
File: 9rrOePyQJ42C8ehmiooZ7pmCzcM.mft (raw, json)
Hash identifier: QWu/Ap5ormwEUwav1b0WhHphp3kGilOk+mwFVgdA4w8=
Subject key identifier: 66:10:A8:E6:11:72:B7:0E:19:4E:C8:0E:BE:81:2A:E6:55:72:6F:4F
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 019D38661A9C4A8115ECE208751FA545447D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
Manifest number: 0AB3
Signing time: Sun 29 Mar 2026 07:01:48 +0000
Manifest this update: Sun 29 Mar 2026 07:01:48 +0000
Manifest next update: Mon 30 Mar 2026 07:01:48 +0000
Files and hashes: 1: 9rrOePyQJ42C8ehmiooZ7pmCzcM.crl (hash: /Ra2j2n113jevFbeLxawepoKzGI/gIwYrUjmNo67W9E=)
2: eiKeW5DZrw8ubUVRgQR3ZnISUA8.roa (hash: G/mSpJ5ilGB6NcS3kOpxScz/226GTJNOO7cls8f2b0g=)
3: ey3Mr8JzbFWqpi_zpEHpZfcPVTI.roa (hash: RZTYOXGch0DUBzdLJFR6bBMusCngAipnQLe9rTFjcIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1a:9c:4a:81:15:ec:e2:08:75:1f:a5:45:44:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Mar 29 07:01:48 2026 GMT
Not After : Mar 30 07:01:48 2026 GMT
Subject: CN=6610a8e61172b70e194ec80ebe812ae655726f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:75:08:97:80:f5:f5:ac:52:68:06:0f:8f:
68:c1:03:a6:22:de:0b:b0:cc:2e:1c:1f:91:3c:4b:
80:e1:9e:75:af:e2:f4:f7:02:0b:a5:07:c0:07:76:
a9:ed:37:8f:4e:5b:50:10:f2:7f:14:68:ad:69:4b:
e5:a0:c9:58:d2:25:7f:bc:d4:52:4e:31:de:1e:8d:
b2:7a:d4:ea:b8:77:1b:b5:19:38:b5:0e:69:24:13:
e1:25:46:0e:38:94:f2:e7:09:ea:23:5a:f3:a4:9e:
7a:e0:13:81:b4:12:a8:e8:21:ea:1f:1e:fc:9e:36:
c2:f3:9e:d7:4b:e0:8c:bc:8f:c3:ae:b7:8d:99:f7:
b0:aa:32:ac:12:2d:16:c3:5e:f6:3d:06:25:25:e3:
1b:e7:eb:47:b8:7d:b7:5d:8c:0c:ce:b5:f4:b7:2e:
35:b1:7d:e2:7f:07:35:60:8d:b6:7f:a4:25:68:0a:
df:18:3f:b2:13:76:5c:b8:b2:d2:6b:cf:e9:e8:14:
aa:5b:9f:ac:85:01:c1:27:77:ad:ad:44:ec:33:55:
a3:1b:88:be:6b:3c:16:be:68:93:31:3b:38:28:f6:
75:cf:84:e9:73:ac:7e:99:06:12:c7:52:e1:06:c9:
86:f0:ac:dc:8f:2a:1e:e1:39:2b:b2:93:d9:ce:2b:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:10:A8:E6:11:72:B7:0E:19:4E:C8:0E:BE:81:2A:E6:55:72:6F:4F
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:10:c3:e7:6a:fd:ca:a5:31:f4:96:f9:7a:70:c3:37:72:ff:
d9:d4:41:29:09:a5:7a:4c:df:af:d6:24:05:f3:2f:05:2c:90:
1c:33:30:18:26:55:b2:a4:a0:4b:1e:2e:1d:d0:b0:68:53:47:
af:a9:4a:60:68:aa:16:bf:18:69:90:f1:19:35:db:d6:0f:a0:
b8:60:4e:0a:e4:52:58:c2:04:a2:1a:16:8f:69:7b:5b:91:ac:
24:0e:17:61:9f:e3:fb:9a:f2:a5:92:88:44:02:82:96:d1:7d:
b9:11:fd:85:c8:b9:76:21:f3:90:05:cd:8a:a6:19:93:93:ee:
16:f3:39:ef:de:05:20:7e:86:15:2b:55:93:59:e7:d3:56:45:
0f:d4:5d:11:e6:63:58:95:3f:29:ad:d1:84:11:37:14:69:af:
41:a8:54:9c:5c:14:77:50:ff:1a:ad:9b:b6:92:74:43:85:00:
c9:26:7b:16:03:61:ad:86:6f:eb:ef:47:7f:50:78:9d:95:6f:
47:1c:c1:70:b1:5f:bf:bd:c0:1c:0a:67:8b:f2:1c:5f:9d:fc:
e5:30:13:ef:28:55:77:df:e7:c7:32:ae:e1:1b:a7:5d:e8:42:
c8:0b:d8:c8:19:7a:75:14:4f:5d:18:a4:3d:2c:99:9f:f6:4e:
bc:16:7f:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZhqcSoEV7OIIdR+lRUR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YmFjZTc4ZmM5MDI3OGQ4MmYxZTg2NjhhOGExOWVlOTk4
MmNkYzMwHhcNMjYwMzI5MDcwMTQ4WhcNMjYwMzMwMDcwMTQ4WjAzMTEwLwYDVQQD
Eyg2NjEwYThlNjExNzJiNzBlMTk0ZWM4MGViZTgxMmFlNjU1NzI2ZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEB1CJeA9fWsUmgGD49owQOmIt4L
sMwuHB+RPEuA4Z51r+L09wILpQfAB3ap7TePTltQEPJ/FGitaUvloMlY0iV/vNRS
TjHeHo2yetTquHcbtRk4tQ5pJBPhJUYOOJTy5wnqI1rzpJ564BOBtBKo6CHqHx78
njbC857XS+CMvI/DrreNmfewqjKsEi0Ww172PQYlJeMb5+tHuH23XYwMzrX0ty41
sX3ifwc1YI22f6QlaArfGD+yE3ZcuLLSa8/p6BSqW5+shQHBJ3etrUTsM1WjG4i+
azwWvmiTMTs4KPZ1z4Tpc6x+mQYSx1LhBsmG8Kzcjyoe4TkrspPZziutpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYQqOYRcrcOGU7IDr6BKuZVcm9PMB8GA1UdIwQY
MBaAFPa6znj8kCeNgvHoZoqKGe6Zgs3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC83ODM1YzItMjA0Yy00ZGRlLThlZjkt
ZjZkZDNiNTE2MWY1LzEvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC83ODM1YzItMjA0Yy00ZGRlLThlZjktZjZkZDNiNTE2MWY1
LzEvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxDD52r9
yqUx9Jb5enDDN3L/2dRBKQmlekzfr9YkBfMvBSyQHDMwGCZVsqSgSx4uHdCwaFNH
r6lKYGiqFr8YaZDxGTXb1g+guGBOCuRSWMIEohoWj2l7W5GsJA4XYZ/j+5rypZKI
RAKCltF9uRH9hci5diHzkAXNiqYZk5PuFvM5794FIH6GFStVk1nn01ZFD9RdEeZj
WJU/Ka3RhBE3FGmvQahUnFwUd1D/Gq2btpJ0Q4UAySZ7FgNhrYZv6+9Hf1B4nZVv
RxzBcLFfv73AHApni/IcX5385TAT7yhVd9/nxzKu4RunXehCyAvYyBl6dRRPXRik
PSyZn/ZOvBZ/FQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:17 2026 by rpki-client