Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier: /49DgOiiEGf5sImdfy90d5jLrsLyc1G+beHHkW6niao=
Subject key identifier: FF:61:45:4B:E1:CF:71:F2:19:4B:AD:41:BF:A2:41:CE:31:35:A4:6C
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial: 019D389C5FEA489B02555D9A8BFA85937ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number: 058E
Signing time: Sun 29 Mar 2026 08:01:05 +0000
Manifest this update: Sun 29 Mar 2026 08:01:05 +0000
Manifest next update: Mon 30 Mar 2026 08:01:05 +0000
Files and hashes: 1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: 22fK9HlR01yZ7Z49gAQWds542E+G/HZ5ik7ndW/THKk=)
2: JKxruJrsyQODEt0lo_2igVlEBhw.roa (hash: 2Ldq4wJQTMkIcJXiRtPhwdIrKaep4MniRxTOmuYmXUs=)
3: UrR8he9LeX1_n_grB04eKjIEfn4.roa (hash: 6VYM1BE9h3lSboPJRgPSxyvYhSPFOMNMfzzxqBF3w0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5f:ea:48:9b:02:55:5d:9a:8b:fa:85:93:7e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Validity
Not Before: Mar 29 08:01:05 2026 GMT
Not After : Mar 30 08:01:05 2026 GMT
Subject: CN=ff61454be1cf71f2194bad41bfa241ce3135a46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:30:1d:e5:93:e1:9d:62:8a:47:d2:ba:24:e1:
a9:7b:f7:a3:01:75:f1:ef:cb:91:43:1d:4b:a8:f4:
18:2b:80:56:9a:40:16:80:4b:11:06:70:ca:b4:ed:
b0:d2:3e:29:12:be:b7:51:7e:9b:7b:32:e1:60:10:
0c:f1:82:df:cf:72:5d:59:84:8a:be:79:5a:ea:4e:
58:47:b0:97:9f:6b:2e:cb:06:58:73:a4:91:82:51:
e6:68:9c:21:0f:a3:78:11:ac:63:83:59:42:9d:4e:
94:69:04:bb:4f:cb:99:b2:d3:da:ea:ee:ad:f3:17:
d5:4b:bb:61:02:ef:fd:92:54:45:03:72:2a:d9:6a:
e2:a7:e2:92:a9:4e:ce:0c:33:63:b8:05:68:57:3f:
b1:ae:71:43:8e:ee:7e:4b:5f:0b:07:78:23:49:fb:
5a:18:c1:fc:53:0c:d8:c4:d0:6a:e8:31:32:35:9f:
19:60:87:87:1e:e1:f1:6c:71:73:6a:8f:65:e6:f8:
f7:81:26:2f:36:f4:97:8d:8f:14:3c:a6:98:19:60:
72:22:30:56:af:fd:f6:fa:73:4e:97:99:43:a8:20:
3e:ad:be:c0:45:f4:4a:4b:0b:d1:97:32:53:cf:51:
c3:38:bd:6e:af:6d:38:a1:9f:47:59:6b:0c:9a:7a:
2f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:61:45:4B:E1:CF:71:F2:19:4B:AD:41:BF:A2:41:CE:31:35:A4:6C
X509v3 Authority Key Identifier:
keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:97:ce:ad:5b:8e:cb:5d:a4:fd:93:ed:f4:1a:d5:e8:7e:fd:
e4:9d:b7:da:49:c9:0c:07:58:e7:56:3f:97:10:6e:67:83:36:
7c:07:cb:66:36:16:c6:97:8d:2f:22:d3:ad:97:53:61:0e:84:
e5:1d:a1:9b:79:ae:39:0a:e6:b7:1f:3c:6e:a5:f6:f1:44:5e:
2e:3b:5a:e3:2c:76:41:2e:b6:92:c3:e7:8a:b0:a5:37:66:0d:
b6:c7:a3:43:d5:5e:b6:60:5d:e3:a6:7c:28:13:0e:39:ad:11:
d0:d4:7e:c4:2e:61:b4:5b:27:13:bb:29:e2:67:75:a7:69:9c:
ed:1a:0a:e1:e3:85:93:72:7e:c0:ec:01:1c:e5:1f:5d:bf:1d:
56:78:d9:9d:65:98:0d:38:85:af:73:fd:7e:93:c3:40:b3:ba:
86:f9:c1:9f:34:12:eb:a4:f5:9a:8b:dc:ad:44:79:c1:af:8a:
77:41:65:12:1a:f1:83:b6:c8:d8:ce:bf:e6:76:ed:ba:db:96:
39:02:26:73:f4:90:b6:61:6f:58:6f:e3:f4:e5:b1:b7:bc:2a:
26:1c:8f:6a:5c:66:db:27:30:e9:b6:e7:97:df:3d:00:58:91:
b2:62:e1:dc:0c:0b:58:46:92:80:09:af:82:0e:a7:a9:01:83:
94:29:33:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nF/qSJsCVV2ai/qFk37NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MWM3ZDQ3NzE4YThhNGE5ZDhjNTBiMjYwODNlNzE4NTI1
YjZjMWIwHhcNMjYwMzI5MDgwMTA1WhcNMjYwMzMwMDgwMTA1WjAzMTEwLwYDVQQD
EyhmZjYxNDU0YmUxY2Y3MWYyMTk0YmFkNDFiZmEyNDFjZTMxMzVhNDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TAd5ZPhnWKKR9K6JOGpe/ejAXXx
78uRQx1LqPQYK4BWmkAWgEsRBnDKtO2w0j4pEr63UX6bezLhYBAM8YLfz3JdWYSK
vnla6k5YR7CXn2suywZYc6SRglHmaJwhD6N4Eaxjg1lCnU6UaQS7T8uZstPa6u6t
8xfVS7thAu/9klRFA3Iq2Wrip+KSqU7ODDNjuAVoVz+xrnFDju5+S18LB3gjSfta
GMH8UwzYxNBq6DEyNZ8ZYIeHHuHxbHFzao9l5vj3gSYvNvSXjY8UPKaYGWByIjBW
r/32+nNOl5lDqCA+rb7ARfRKSwvRlzJTz1HDOL1ur204oZ9HWWsMmnov5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9hRUvhz3HyGUutQb+iQc4xNaRsMB8GA1UdIwQY
MBaAFPQcfUdxiopKnYxQsmCD5xhSW2wbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUt
NjBiMmM5ODIxMDc4LzEvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUtNjBiMmM5ODIxMDc4
LzEvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5fOrVuO
y12k/ZPt9BrV6H795J232knJDAdY51Y/lxBuZ4M2fAfLZjYWxpeNLyLTrZdTYQ6E
5R2hm3muOQrmtx88bqX28UReLjta4yx2QS62ksPnirClN2YNtsejQ9VetmBd46Z8
KBMOOa0R0NR+xC5htFsnE7sp4md1p2mc7RoK4eOFk3J+wOwBHOUfXb8dVnjZnWWY
DTiFr3P9fpPDQLO6hvnBnzQS66T1movcrUR5wa+Kd0FlEhrxg7bI2M6/5nbtutuW
OQImc/SQtmFvWG/j9OWxt7wqJhyPalxm2ycw6bbnl989AFiRsmLh3AwLWEaSgAmv
gg6nqQGDlCkzDg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:42 2026 by rpki-client