Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier: TaWCycf4jyGLGYCyae2OTx91CFTm1yqqiHtjyp4TAq8=
Subject key identifier: ED:A2:39:87:00:76:C1:4F:00:E2:44:E1:BA:EF:64:FB:48:EF:42:AA
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 019D38D3D0A12139D5D393A8AE3C26C447DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number: 0B8E
Signing time: Sun 29 Mar 2026 09:01:38 +0000
Manifest this update: Sun 29 Mar 2026 09:01:38 +0000
Manifest next update: Mon 30 Mar 2026 09:01:38 +0000
Files and hashes: 1: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: cFAts26NMoAPBEPVBxJ0sWQxzVY6ejveRAurR7ab/ng=)
2: QBd5Wpp5kWkoCSM4_95uiC5JDV0.roa (hash: flLVepDAjYfRnttnJvSS11YgDPxXUtJLpwyzAOjne3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d0:a1:21:39:d5:d3:93:a8:ae:3c:26:c4:47:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Mar 29 09:01:38 2026 GMT
Not After : Mar 30 09:01:38 2026 GMT
Subject: CN=eda239870076c14f00e244e1baef64fb48ef42aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d6:2f:6b:98:2c:df:9b:0a:7c:11:c5:c6:83:
fe:de:b2:ef:1a:c9:8e:31:0e:79:9f:c1:dd:8e:26:
3d:04:f6:b1:86:44:45:21:1c:99:9f:86:c7:9b:7f:
78:a9:81:b2:4b:dc:1f:c5:d6:0a:82:43:80:a9:99:
e2:fb:3d:3f:a5:7d:9e:97:4c:c1:86:bd:da:8a:2e:
c0:b5:e9:67:9c:a0:70:b8:36:7a:c3:62:95:1d:47:
9a:ce:8b:2d:6d:de:37:54:20:2c:ae:a5:af:71:86:
0f:10:cd:ab:4b:e7:f7:54:d0:58:8c:c7:d3:f4:62:
23:5c:d5:97:9b:d6:a0:5a:d6:39:82:c7:b6:ae:8f:
1d:d4:fc:4b:1a:8d:9e:97:dd:bb:e1:7f:d3:ab:b3:
a4:f3:b8:b7:bd:ab:37:3f:41:20:e4:24:a4:a0:eb:
c2:6a:19:6f:29:88:71:49:d0:83:a2:59:8e:2c:15:
b7:d3:9a:f7:e2:5e:c2:df:3e:94:65:e2:ed:8a:e9:
51:b4:7c:fc:21:17:8b:6f:31:b5:93:d5:99:05:82:
61:dd:3b:7b:bd:da:36:3c:eb:3c:c0:3a:60:ae:55:
01:31:f5:2a:e2:ff:24:56:ba:23:82:e5:b2:61:26:
15:30:2d:3d:30:34:e5:4b:8e:50:42:8e:96:c0:10:
9b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A2:39:87:00:76:C1:4F:00:E2:44:E1:BA:EF:64:FB:48:EF:42:AA
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b2:e9:6a:2b:9c:fa:96:6d:3d:0d:9d:1c:8d:fd:84:2f:09:
e7:bc:d3:db:af:b3:d1:e0:20:42:60:3f:db:ab:a6:cc:3f:f7:
5a:90:f9:b8:fa:28:2c:c5:b0:3e:9c:97:2a:10:2f:ff:dd:3a:
5c:96:ac:60:6e:c9:f4:19:03:2f:75:94:66:b4:79:23:26:7a:
62:bb:ac:d8:64:24:01:f3:c6:0d:ba:dc:69:fb:b3:e7:66:27:
27:35:88:53:f8:ef:67:40:c1:0f:0c:51:4a:46:23:3e:9b:1d:
85:06:ab:37:91:6d:92:97:aa:27:41:5d:b1:6b:4a:49:78:d1:
71:35:23:ae:46:c9:7b:2d:79:00:26:68:69:91:ce:85:e5:c4:
5f:bd:0e:5a:47:9a:b2:e9:6e:27:b3:eb:81:47:ee:2c:87:8b:
ad:80:23:3a:70:74:23:51:f6:14:1b:d0:05:46:fe:3b:99:ae:
d1:fa:d5:37:51:a9:fd:f8:65:82:ec:80:ca:38:59:26:f6:b8:
8d:6a:c9:dd:c4:25:8a:ca:cd:95:59:51:ba:42:da:08:d0:2b:
cb:9c:55:f6:97:eb:f4:65:9c:0d:fd:74:69:3b:38:00:0d:ac:
d6:c2:10:4c:00:6b:cd:8c:37:6c:2d:7f:b7:9d:4f:0b:96:90:
f7:23:96:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0409ChITnV05OorjwmxEfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OWJhOTkxMTRlYmRhYmQ2ZTRjYmQzNmY2Y2Q0NzViMzNj
ZjEzODYwHhcNMjYwMzI5MDkwMTM4WhcNMjYwMzMwMDkwMTM4WjAzMTEwLwYDVQQD
EyhlZGEyMzk4NzAwNzZjMTRmMDBlMjQ0ZTFiYWVmNjRmYjQ4ZWY0MmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dYva5gs35sKfBHFxoP+3rLvGsmO
MQ55n8HdjiY9BPaxhkRFIRyZn4bHm394qYGyS9wfxdYKgkOAqZni+z0/pX2el0zB
hr3aii7AtelnnKBwuDZ6w2KVHUeazostbd43VCAsrqWvcYYPEM2rS+f3VNBYjMfT
9GIjXNWXm9agWtY5gse2ro8d1PxLGo2el9274X/Tq7Ok87i3vas3P0Eg5CSkoOvC
ahlvKYhxSdCDolmOLBW305r34l7C3z6UZeLtiulRtHz8IReLbzG1k9WZBYJh3Tt7
vdo2POs8wDpgrlUBMfUq4v8kVrojguWyYSYVMC09MDTlS45QQo6WwBCbRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2iOYcAdsFPAOJE4brvZPtI70KqMB8GA1UdIwQY
MBaAFPSbqZEU69q9bky9NvbNR1szzxOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82ZTRkYjctNDVhOC00OTkzLWIzODQt
OWE2ZWU0ODZlZmY3LzEvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82ZTRkYjctNDVhOC00OTkzLWIzODQtOWE2ZWU0ODZlZmY3
LzEvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuLLpaiuc
+pZtPQ2dHI39hC8J57zT26+z0eAgQmA/26umzD/3WpD5uPooLMWwPpyXKhAv/906
XJasYG7J9BkDL3WUZrR5IyZ6Yrus2GQkAfPGDbrcafuz52YnJzWIU/jvZ0DBDwxR
SkYjPpsdhQarN5FtkpeqJ0FdsWtKSXjRcTUjrkbJey15ACZoaZHOheXEX70OWkea
suluJ7PrgUfuLIeLrYAjOnB0I1H2FBvQBUb+O5mu0frVN1Gp/fhlguyAyjhZJva4
jWrJ3cQlisrNlVlRukLaCNAry5xV9pfr9GWcDf10aTs4AA2s1sIQTABrzYw3bC1/
t51PC5aQ9yOWxA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:50 2026 by rpki-client