Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier: a6r5fb8l100oVu4SbsaIVY/kcEfvSIlEk+YfAOdYWJI=
Subject key identifier: 0D:F8:1E:B8:20:02:35:C5:86:E3:6C:76:1B:A8:18:62:C0:08:31:1C
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 019D3940AF12876DFBDBFE056E5BCF405C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number: 0FAB
Signing time: Sun 29 Mar 2026 11:00:33 +0000
Manifest this update: Sun 29 Mar 2026 11:00:33 +0000
Manifest next update: Mon 30 Mar 2026 11:00:33 +0000
Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: e89AwtJUqWRTF9Do6aTbzIvx0H+tBpVefhvVTRIL1hQ=)
2: i1q-5ppGHZKen0mg4iu01mYnQM0.roa (hash: sIuyBrADQrDmfb4gofoZhceJ2ljMvz5t7ov19sRqXKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:af:12:87:6d:fb:db:fe:05:6e:5b:cf:40:5c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: Mar 29 11:00:33 2026 GMT
Not After : Mar 30 11:00:33 2026 GMT
Subject: CN=0df81eb8200235c586e36c761ba81862c008311c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:7c:bc:fa:63:59:55:da:9e:3d:bc:1f:45:
7c:87:7d:00:8a:cf:d8:40:61:ed:55:57:03:4b:20:
74:cc:62:ec:fd:8b:31:38:2e:68:1e:af:15:05:85:
75:a8:12:fb:1d:be:4a:6d:e0:ae:aa:a7:2c:ab:38:
e4:be:2a:c1:06:22:5a:0d:9b:03:95:4e:7b:ad:02:
a0:10:2f:23:ae:19:bb:d9:37:fb:39:6e:ed:21:ed:
c4:33:29:b8:9d:37:57:ed:0c:79:23:c9:2b:df:ec:
47:8d:19:25:a8:c4:11:94:7f:31:7a:17:cf:ea:02:
c9:65:e1:f1:d0:a3:7b:34:5a:61:bd:c7:05:5c:56:
6a:ae:7e:3c:0e:64:2d:a3:91:41:30:2f:19:91:bf:
7f:fe:59:9c:ea:aa:b5:49:d9:a8:d7:aa:78:05:58:
db:91:1c:b3:ff:00:2f:48:ac:24:bd:12:b5:91:6b:
b8:77:59:53:7e:b4:28:61:c1:d1:f5:5a:6c:3e:8f:
66:a5:21:4f:26:17:b6:87:39:dd:b3:e1:25:9d:3d:
9c:e1:d8:5e:c8:46:e1:5a:3a:14:80:b2:b4:88:49:
02:5d:7e:95:56:0b:23:e6:b3:3a:71:47:c5:6d:fb:
6d:81:3a:64:70:74:66:f5:ab:93:77:ac:c5:d8:4e:
e4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F8:1E:B8:20:02:35:C5:86:E3:6C:76:1B:A8:18:62:C0:08:31:1C
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:86:45:3e:fc:0c:20:23:df:04:53:50:72:74:f4:27:59:e1:
bf:fa:ac:37:37:25:06:33:96:63:6b:3c:20:2d:1f:6a:fe:f6:
5d:e8:c0:10:10:9f:b7:a7:e0:0e:6c:ac:74:9b:ec:ee:86:17:
e7:7c:e1:4c:c0:1e:e0:d2:fc:eb:47:f8:d1:ca:23:0b:83:94:
ca:70:59:1e:ad:b8:7b:6a:81:29:19:10:8d:66:4e:cd:b3:a4:
a8:69:81:46:a4:1e:96:e2:71:a0:f2:6f:67:be:75:24:4a:68:
7a:66:26:0a:1f:b3:5e:cd:38:ab:d9:91:9a:a2:41:bd:5d:41:
c2:92:62:04:e3:7a:d3:9f:84:11:74:cd:3e:97:0c:89:74:43:
f7:35:9f:f2:fe:cc:8b:17:20:5c:6b:81:29:e7:5a:2d:99:b8:
bc:a3:e3:a1:75:87:ec:b1:a6:0b:bf:9f:7e:4e:a9:e9:0c:01:
c5:f3:d3:59:d4:8a:a6:cd:b7:c1:66:51:51:e0:f6:18:a0:e3:
88:7e:5a:88:9b:00:d8:65:05:f8:41:d8:4d:60:16:b7:9e:36:
a2:9f:1c:a0:57:7a:c4:26:f5:5f:5f:f4:7c:9b:56:c5:61:56:
dd:93:e1:6f:4a:c5:15:ae:f6:e2:aa:27:f5:13:8b:b3:45:dc:
d8:f4:c3:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QK8Sh2372/4FblvPQFxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTQxOWUzNzAwYTM2YmEyYjAzOTA2YzlmOGY0ZDJkZmQ4
NDgwNzAwHhcNMjYwMzI5MTEwMDMzWhcNMjYwMzMwMTEwMDMzWjAzMTEwLwYDVQQD
EygwZGY4MWViODIwMDIzNWM1ODZlMzZjNzYxYmE4MTg2MmMwMDgzMTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwl8vPpjWVXanj28H0V8h30Ais/Y
QGHtVVcDSyB0zGLs/YsxOC5oHq8VBYV1qBL7Hb5KbeCuqqcsqzjkvirBBiJaDZsD
lU57rQKgEC8jrhm72Tf7OW7tIe3EMym4nTdX7Qx5I8kr3+xHjRklqMQRlH8xehfP
6gLJZeHx0KN7NFphvccFXFZqrn48DmQto5FBMC8Zkb9//lmc6qq1Sdmo16p4BVjb
kRyz/wAvSKwkvRK1kWu4d1lTfrQoYcHR9VpsPo9mpSFPJhe2hznds+ElnT2c4dhe
yEbhWjoUgLK0iEkCXX6VVgsj5rM6cUfFbfttgTpkcHRm9auTd6zF2E7knQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA34HrggAjXFhuNsdhuoGGLACDEcMB8GA1UdIwQY
MBaAFPZUGeNwCja6KwOQbJ+PTS39hIBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYt
ZDRiNzIzZWQ3ODFjLzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYtZDRiNzIzZWQ3ODFj
LzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMoZFPvwM
ICPfBFNQcnT0J1nhv/qsNzclBjOWY2s8IC0fav72XejAEBCft6fgDmysdJvs7oYX
53zhTMAe4NL860f40cojC4OUynBZHq24e2qBKRkQjWZOzbOkqGmBRqQeluJxoPJv
Z751JEpoemYmCh+zXs04q9mRmqJBvV1BwpJiBON605+EEXTNPpcMiXRD9zWf8v7M
ixcgXGuBKedaLZm4vKPjoXWH7LGmC7+ffk6p6QwBxfPTWdSKps23wWZRUeD2GKDj
iH5aiJsA2GUF+EHYTWAWt542op8coFd6xCb1X1/0fJtWxWFW3ZPhb0rFFa724qon
9ROLs0Xc2PTDRQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:51 2026 by rpki-client