Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
File: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft (raw, json)
Hash identifier: vCncnGv56QwNveg6y5oDC0D56UBWasQIslVqbJhhvSM=
Subject key identifier: E3:EB:EE:1D:F9:D5:64:54:39:C1:35:A6:1E:75:E7:02:55:F3:51:77
Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
Certificate issuer: /CN=f6f49bfb2a0b82446060c7fc907810e518705936
Certificate serial: 019D37F6E3A4898590D7C54A4D7B9CB6E3FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
Manifest number: 04F6
Signing time: Sun 29 Mar 2026 05:00:20 +0000
Manifest this update: Sun 29 Mar 2026 05:00:20 +0000
Manifest next update: Mon 30 Mar 2026 05:00:20 +0000
Files and hashes: 1: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl (hash: h2FWUr8VZ87Fg0Vy2corDHxp3mfEQnWJYCc+zZ6xamA=)
2: Q1BIazUMtU491Kfp1prxFz4oeuU.roa (hash: sJo8b2jgePbm04v5Oh4sG6+LqF87DEVfl2ISH3CHQlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e3:a4:89:85:90:d7:c5:4a:4d:7b:9c:b6:e3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936
Validity
Not Before: Mar 29 05:00:20 2026 GMT
Not After : Mar 30 05:00:20 2026 GMT
Subject: CN=e3ebee1df9d5645439c135a61e75e70255f35177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:a7:b1:92:d2:30:54:f7:4e:9e:ca:2f:7c:
78:00:d1:d9:cd:c0:15:d0:08:87:33:ae:45:fc:ce:
9e:40:af:84:24:ab:06:ff:59:8c:8a:0e:7b:6d:56:
a2:db:d9:28:85:7a:bb:5f:2d:1b:50:3b:1f:6f:61:
7f:10:6a:22:12:40:23:f0:4a:cc:88:1d:20:5b:7c:
30:a9:11:fc:76:8a:bf:f6:71:7d:25:fd:a3:6c:a0:
5f:08:4f:86:24:30:e5:a1:6d:bc:fd:ef:02:38:ac:
6c:1b:81:98:72:39:a6:74:1b:65:c8:87:cd:cc:ae:
72:2c:89:28:88:ec:6f:ec:e1:2a:bd:61:0f:b7:f1:
b0:18:08:b8:b4:ff:d1:43:b0:29:a5:1b:26:89:1a:
00:7a:a7:74:c8:0e:5e:6e:ec:c1:a0:e7:7e:06:5c:
64:af:87:38:ba:cd:83:61:04:bd:e6:59:a0:bb:eb:
56:6f:76:e3:64:76:b6:de:7e:73:d5:46:d5:c0:9f:
73:38:98:d4:1f:a2:f4:f7:f8:1a:5a:1f:32:82:b2:
c1:02:65:ed:9f:d0:6b:7a:c5:08:de:32:ea:e2:05:
e6:22:f4:c8:47:a0:c0:da:d1:6c:41:01:1b:8c:01:
57:19:35:ca:db:95:c8:9f:71:ca:ee:dc:ec:b2:2d:
c1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EB:EE:1D:F9:D5:64:54:39:C1:35:A6:1E:75:E7:02:55:F3:51:77
X509v3 Authority Key Identifier:
keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2c:d0:86:68:d8:6e:76:7b:be:84:1f:9b:ae:6a:46:0c:93:
6d:45:53:a0:3b:91:02:d0:c0:9d:56:71:3e:41:bb:f2:33:7d:
df:77:de:a7:f0:ef:c5:5c:78:1a:6d:e2:10:a2:ab:f2:0d:ae:
0b:78:a1:54:42:b8:5f:85:e9:04:33:35:ca:0d:fc:52:66:31:
76:31:4c:ed:3c:f9:63:ad:fc:68:ef:f6:05:9f:80:52:80:4f:
a7:27:e2:e7:70:d3:55:5c:b2:2f:d0:e0:f7:7e:c5:7e:97:9e:
d0:9d:b2:16:bb:ab:a2:4a:22:25:30:fb:06:73:1d:06:16:e7:
fa:ca:11:e0:0f:88:35:c7:fa:2d:d2:fa:ab:29:36:9f:2a:bc:
ae:ed:1e:2b:f3:10:31:e2:cb:3f:84:ed:0d:07:f0:7a:f2:e1:
bf:c8:2c:d3:45:2f:35:f0:37:87:b0:e6:71:08:5b:47:33:06:
ec:1f:04:72:10:8a:d3:99:cd:37:9d:da:5a:5b:91:89:b8:a2:
61:d7:c9:8d:2f:4c:26:e1:90:4a:47:03:b0:a0:17:f4:66:03:
bd:7b:2d:ac:49:71:40:5d:f9:9e:62:83:b4:41:90:2d:27:69:
f0:00:7b:de:74:5e:cd:83:ff:81:5b:00:00:29:4f:47:50:4b:
0a:1d:71:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039uOkiYWQ18VKTXuctuP7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZjQ5YmZiMmEwYjgyNDQ2MDYwYzdmYzkwNzgxMGU1MTg3
MDU5MzYwHhcNMjYwMzI5MDUwMDIwWhcNMjYwMzMwMDUwMDIwWjAzMTEwLwYDVQQD
EyhlM2ViZWUxZGY5ZDU2NDU0MzljMTM1YTYxZTc1ZTcwMjU1ZjM1MTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLCnsZLSMFT3Tp7KL3x4ANHZzcAV
0AiHM65F/M6eQK+EJKsG/1mMig57bVai29kohXq7Xy0bUDsfb2F/EGoiEkAj8ErM
iB0gW3wwqRH8doq/9nF9Jf2jbKBfCE+GJDDloW28/e8COKxsG4GYcjmmdBtlyIfN
zK5yLIkoiOxv7OEqvWEPt/GwGAi4tP/RQ7AppRsmiRoAeqd0yA5ebuzBoOd+Blxk
r4c4us2DYQS95lmgu+tWb3bjZHa23n5z1UbVwJ9zOJjUH6L09/gaWh8ygrLBAmXt
n9BresUI3jLq4gXmIvTIR6DA2tFsQQEbjAFXGTXK25XIn3HK7tzssi3BwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPr7h351WRUOcE1ph515wJV81F3MB8GA1UdIwQY
MBaAFPb0m/sqC4JEYGDH/JB4EOUYcFk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83NzcyOGQtYWNmZS00NGE0LWJjOTIt
MzNhNTZmNDU5YmMwLzEvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83NzcyOGQtYWNmZS00NGE0LWJjOTItMzNhNTZmNDU5YmMw
LzEvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdizQhmjY
bnZ7voQfm65qRgyTbUVToDuRAtDAnVZxPkG78jN933fep/DvxVx4Gm3iEKKr8g2u
C3ihVEK4X4XpBDM1yg38UmYxdjFM7Tz5Y638aO/2BZ+AUoBPpyfi53DTVVyyL9Dg
937Ffpee0J2yFrurokoiJTD7BnMdBhbn+soR4A+INcf6LdL6qyk2nyq8ru0eK/MQ
MeLLP4TtDQfwevLhv8gs00UvNfA3h7DmcQhbRzMG7B8EchCK05nNN53aWluRibii
YdfJjS9MJuGQSkcDsKAX9GYDvXstrElxQF35nmKDtEGQLSdp8AB73nRezYP/gVsA
AClPR1BLCh1xrg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:37 2026 by rpki-client