Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
File: m9o0FBNxKfo4psYcSWq4thQJzgI.mft (raw, json)
Hash identifier: /b9/Tfoh+pRZG6NZF7Tt0vI1nLWtFodzEBMwwlayfW0=
Subject key identifier: 99:35:E4:1F:6A:61:92:70:52:98:C3:A3:49:98:3F:EC:56:2D:68:68
Authority key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
Certificate issuer: /CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Certificate serial: 019CE82546C8D970E5151884BD6A91EEDE91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
Manifest number: 1864
Signing time: Fri 13 Mar 2026 17:01:22 +0000
Manifest this update: Fri 13 Mar 2026 17:01:22 +0000
Manifest next update: Sat 14 Mar 2026 17:01:22 +0000
Files and hashes: 1: m9o0FBNxKfo4psYcSWq4thQJzgI.crl (hash: PJjaYLVM9CjmP9IIkMAFwXYNQnxdnQhwDki47fTjkjI=)
2: oNy7iyROhmf7k1QXS1fyOykVhms.roa (hash: 7ICki/NejOefHux3d5CNCzujTTJwY1H52uKM23OBmV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:25:46:c8:d9:70:e5:15:18:84:bd:6a:91:ee:de:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Validity
Not Before: Mar 13 17:01:22 2026 GMT
Not After : Mar 14 17:01:22 2026 GMT
Subject: CN=9935e41f6a6192705298c3a349983fec562d6868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:c9:d9:04:7a:5a:48:26:07:1d:1d:90:68:
e6:7d:38:d5:96:ba:52:e1:a6:82:9b:e0:bf:91:be:
15:f4:1f:34:54:c3:6c:85:46:6f:8f:99:8d:38:c7:
d3:68:da:55:69:3d:3e:47:9a:d2:2a:a9:37:fb:7a:
d7:e6:5e:af:07:2d:9e:ea:94:d5:26:b1:c4:19:98:
7e:be:f9:09:2b:28:ee:05:da:69:d7:42:db:f8:38:
f6:69:b5:09:e6:33:1c:46:33:a6:6d:77:b2:17:b9:
43:bc:b2:49:a6:e8:62:bb:2b:e6:9f:10:c9:91:a4:
8e:37:c8:60:81:58:94:7a:be:d0:e2:c2:07:82:5c:
26:a0:a0:9e:be:db:d7:03:11:80:ca:94:e3:26:df:
56:5e:08:e3:44:44:3a:2c:a0:ab:76:c0:a9:0b:f0:
c5:9c:5f:0c:b7:1f:41:e6:96:87:e1:e2:bb:0d:3a:
ef:94:26:d9:93:8f:14:ad:ce:c9:df:b2:85:94:65:
b5:20:9b:55:c0:99:d4:b0:cd:f3:9b:bd:88:4a:c3:
8b:98:18:67:94:b9:31:34:12:4a:5b:26:9a:53:7a:
e4:c3:fc:3e:91:56:62:15:a6:f5:a5:48:80:40:da:
e8:f4:26:c4:d7:7f:73:7f:82:bb:82:90:0b:00:7a:
5c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:35:E4:1F:6A:61:92:70:52:98:C3:A3:49:98:3F:EC:56:2D:68:68
X509v3 Authority Key Identifier:
keyid:9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8c:fc:b5:d0:ac:f7:35:48:5a:95:6c:ce:41:df:9c:3a:2d:
0e:17:af:69:f9:42:01:54:ba:ed:dd:1d:71:08:0f:2b:4b:37:
aa:f0:43:a3:61:2c:62:bc:3a:c3:38:81:f8:87:2e:da:46:ed:
56:af:9d:58:f8:63:eb:d3:ae:79:b5:46:5f:de:d0:07:b4:f8:
76:6d:98:22:58:29:27:16:8e:13:6a:87:72:6a:71:8d:b2:3e:
dd:9e:fb:13:93:cf:b2:ff:bf:e8:17:ff:36:03:c4:07:8d:f9:
c7:af:3c:8b:71:b6:08:3f:05:93:00:11:29:7b:1e:df:6c:fd:
b8:41:08:d2:0f:9f:c3:25:26:0f:73:8d:90:82:36:ad:58:ea:
35:a2:78:c5:d0:8f:90:d0:aa:98:83:11:e8:2c:5a:44:ac:db:
50:5e:61:0a:ef:07:62:2b:7b:f4:63:71:ae:32:18:5d:76:f5:
a9:72:d5:f2:47:2a:13:e5:e7:45:66:da:20:bb:20:2c:aa:1e:
99:98:1d:75:b9:13:96:93:83:18:92:d0:fa:10:69:55:4d:3b:
ee:1a:20:da:99:36:2e:66:5a:3b:43:d1:81:e4:88:04:9e:b9:
02:90:8b:ab:3b:20:35:16:19:41:cf:d8:b8:cd:3d:60:6b:01:
46:50:33:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzoJUbI2XDlFRiEvWqR7t6RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZGEzNDE0MTM3MTI5ZmEzOGE2YzYxYzQ5NmFiOGI2MTQw
OWNlMDIwHhcNMjYwMzEzMTcwMTIyWhcNMjYwMzE0MTcwMTIyWjAzMTEwLwYDVQQD
Eyg5OTM1ZTQxZjZhNjE5MjcwNTI5OGMzYTM0OTk4M2ZlYzU2MmQ2ODY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6bJ2QR6WkgmBx0dkGjmfTjVlrpS
4aaCm+C/kb4V9B80VMNshUZvj5mNOMfTaNpVaT0+R5rSKqk3+3rX5l6vBy2e6pTV
JrHEGZh+vvkJKyjuBdpp10Lb+Dj2abUJ5jMcRjOmbXeyF7lDvLJJpuhiuyvmnxDJ
kaSON8hggViUer7Q4sIHglwmoKCevtvXAxGAypTjJt9WXgjjREQ6LKCrdsCpC/DF
nF8Mtx9B5paH4eK7DTrvlCbZk48Urc7J37KFlGW1IJtVwJnUsM3zm72ISsOLmBhn
lLkxNBJKWyaaU3rkw/w+kVZiFab1pUiAQNro9CbE139zf4K7gpALAHpcEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJk15B9qYZJwUpjDo0mYP+xWLWhoMB8GA1UdIwQY
MBaAFJvaNBQTcSn6OKbGHElquLYUCc4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTlvMEZCTnhLZm80cHNZY1NXcTR0aFFKemdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yOTk1Y2QtNDY1Zi00YjQwLWE0NTUt
MTZkM2NkMzUyZjJlLzEvbTlvMEZCTnhLZm80cHNZY1NXcTR0aFFKemdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yOTk1Y2QtNDY1Zi00YjQwLWE0NTUtMTZkM2NkMzUyZjJl
LzEvbTlvMEZCTnhLZm80cHNZY1NXcTR0aFFKemdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoz8tdCs
9zVIWpVszkHfnDotDhevaflCAVS67d0dcQgPK0s3qvBDo2EsYrw6wziB+Icu2kbt
Vq+dWPhj69OuebVGX97QB7T4dm2YIlgpJxaOE2qHcmpxjbI+3Z77E5PPsv+/6Bf/
NgPEB435x688i3G2CD8FkwARKXse32z9uEEI0g+fwyUmD3ONkII2rVjqNaJ4xdCP
kNCqmIMR6CxaRKzbUF5hCu8HYit79GNxrjIYXXb1qXLV8kcqE+XnRWbaILsgLKoe
mZgddbkTlpODGJLQ+hBpVU077hog2pk2LmZaO0PRgeSIBJ65ApCLqzsgNRYZQc/Y
uM09YGsBRlAzTg==
-----END CERTIFICATE-----
Generated at Sat Mar 14 04:00:34 2026 by rpki-client