Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
File: T9ZCEC691_ImjBTCfj678mtMr-s.mft (raw, json)
Hash identifier: H48zPHdgmkjgoeceLsRREEQGNhLzmOYczMd8CwU7agQ=
Subject key identifier: CA:03:8F:3B:41:A1:8B:4C:29:F0:FC:87:19:39:2D:E4:8C:36:C8:C9
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 019F129C76D14A5F0FB278E56D2BBA0BDA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
Manifest number: 01AA
Signing time: Mon 29 Jun 2026 09:01:11 +0000
Manifest this update: Mon 29 Jun 2026 09:01:11 +0000
Manifest next update: Tue 30 Jun 2026 09:01:11 +0000
Files and hashes: 1: BOT5KFIXJpkIbzlxtuVva-pqcW8.roa (hash: V0+HzlrzgNuQq4OTP8iqfYcbyGXd1T0uSkmpDamsFm0=)
2: FXU6diYKcbRIsw4MmevlGTpvGb0.roa (hash: aFnvjS1XXi7qixi4xTsDLaU24Ku8jOZbxW9SYMuhSJc=)
3: IXv7GLa92HnV3l1DApAceTiWeyw.roa (hash: wbQSrQRDyv+cAs4TzHktwX1YmUunTHit+MVHYBjMrCw=)
4: JIP6keB7F7Gm2ZlkQopa4DPs_us.roa (hash: jFlq3BusUmP4qYxCaXEGJylNWdexiUDC80OW6u36VHU=)
5: T9ZCEC691_ImjBTCfj678mtMr-s.crl (hash: l+/zQXcvunWW40ubFJjO7IkYAX3iimFzSOmI6VvcW4o=)
6: VNfg-QglXGIujd90KUvMXS6gBSY.roa (hash: i1z1xtfhhF9sKthwdcoGahPZ+gLqvmKabhZTgAjg+1Q=)
7: YuXGy4DeeKK817s02xmtLVstl_M.roa (hash: 3pU1tPDQwQuNiKFX6sho9jHiT+VzWttOjYDmMxptk5w=)
8: ZTOkVo51zjkueJP-_jF8sE0dlwI.roa (hash: qWI1aXm7aJOa2gqUSo121mJhm0HQWb9xB4CjBEm9B2Y=)
9: gh269-L8TbTY3-TVP_7aO8lyx58.roa (hash: VbOH7TTnQt8mmF2t2Xgvv1Gs0QXIq8ndLB+CWsdxeFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:76:d1:4a:5f:0f:b2:78:e5:6d:2b:ba:0b:da:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Jun 29 09:01:11 2026 GMT
Not After : Jun 30 09:01:11 2026 GMT
Subject: CN=ca038f3b41a18b4c29f0fc8719392de48c36c8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:88:fb:77:21:92:59:ea:6c:ac:7a:bf:88:
f4:e2:57:a4:41:e5:a3:aa:93:d6:a7:2b:b2:a9:f8:
e7:be:9d:3c:85:b0:9c:cf:58:c3:f0:a0:ee:a3:ec:
43:0b:a5:b6:cd:5d:35:04:95:01:50:08:5c:b4:1e:
2c:6e:99:ae:39:01:a3:9f:8b:0d:d6:27:01:a5:bd:
1b:c5:26:05:99:09:96:60:19:b6:4a:84:85:71:08:
8d:92:8d:fc:fa:7d:c8:cc:c8:93:d7:c1:be:4b:f9:
77:7a:61:0c:6e:6b:e6:35:be:56:d0:60:24:51:f2:
ba:c7:30:71:4f:89:2b:3e:b7:8b:5f:c2:71:b9:d7:
80:d9:47:44:87:d5:33:19:c4:14:f9:57:8c:3a:fc:
4f:7a:b4:c4:59:4a:4f:b9:99:7c:56:65:f7:6f:a0:
a5:88:d2:76:86:49:cb:fa:04:f0:cc:c0:a7:8b:92:
45:a1:f5:75:61:b6:89:de:0c:a4:f0:0d:dc:14:0f:
c8:3e:dc:19:19:0a:42:be:73:d8:94:ba:56:61:dd:
17:c1:cb:26:08:d6:5d:07:d0:e6:16:9d:30:08:73:
8a:6e:b6:60:39:88:a0:7f:d4:58:24:d9:85:f7:15:
65:f9:55:28:cb:f5:34:e2:bf:84:18:9d:f9:33:3a:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:03:8F:3B:41:A1:8B:4C:29:F0:FC:87:19:39:2D:E4:8C:36:C8:C9
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bc:cf:88:51:79:23:2a:aa:8d:49:d2:0d:8d:f4:90:57:27:
61:84:bf:d8:95:4d:00:a8:dc:7c:df:89:eb:f6:da:70:2f:7d:
19:ce:fe:82:d8:4f:cc:c0:b8:3b:dc:e5:9d:61:07:d0:f6:0b:
ba:7a:22:7b:28:5e:35:5c:ee:42:09:c4:14:95:ac:f4:4a:2b:
73:e3:10:98:14:1a:36:79:b8:b9:ef:6e:0a:32:db:98:ae:af:
7a:7c:79:5e:82:ba:a9:29:9a:a6:01:e8:58:24:de:5c:e9:68:
38:ad:d8:dc:57:92:43:2e:85:f0:98:e8:c1:a9:29:3b:cc:83:
24:19:67:79:19:42:c1:71:84:cb:ad:70:c9:ed:49:fe:6b:89:
0b:25:de:54:3f:23:a1:eb:98:f6:d3:c8:ad:e0:59:16:ea:b5:
75:13:0f:21:33:16:90:4d:44:61:11:f2:69:7c:0c:3c:59:7e:
39:f9:19:9a:92:ed:7e:ed:d2:6a:d9:da:ec:f7:a5:33:36:35:
6a:97:2f:ac:69:95:f8:fa:ad:b3:f5:34:62:b5:7a:64:38:cd:
77:c6:ac:97:91:5b:a2:60:e4:2f:d3:bf:1f:ae:c1:d1:ed:f8:
d0:94:76:6f:54:0a:67:4b:d5:d0:06:65:b7:99:99:d7:7a:48:
b7:dc:8e:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SnHbRSl8PsnjlbSu6C9pmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZDY0MjEwMmViZGQ3ZjIyNjhjMTRjMjdlM2ViYmYyNmI0
Y2FmZWIwHhcNMjYwNjI5MDkwMTExWhcNMjYwNjMwMDkwMTExWjAzMTEwLwYDVQQD
EyhjYTAzOGYzYjQxYTE4YjRjMjlmMGZjODcxOTM5MmRlNDhjMzZjOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsmI+3chklnqbKx6v4j04lekQeWj
qpPWpyuyqfjnvp08hbCcz1jD8KDuo+xDC6W2zV01BJUBUAhctB4sbpmuOQGjn4sN
1icBpb0bxSYFmQmWYBm2SoSFcQiNko38+n3IzMiT18G+S/l3emEMbmvmNb5W0GAk
UfK6xzBxT4krPreLX8JxudeA2UdEh9UzGcQU+VeMOvxPerTEWUpPuZl8VmX3b6Cl
iNJ2hknL+gTwzMCni5JFofV1YbaJ3gyk8A3cFA/IPtwZGQpCvnPYlLpWYd0Xwcsm
CNZdB9DmFp0wCHOKbrZgOYigf9RYJNmF9xVl+VUoy/U04r+EGJ35Mzqy+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoDjztBoYtMKfD8hxk5LeSMNsjJMB8GA1UdIwQY
MBaAFE/WQhAuvdfyJowUwn4+u/JrTK/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQt
Zjk0MWNjMzlhNzFlLzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQtZjk0MWNjMzlhNzFl
LzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLzPiFF5
IyqqjUnSDY30kFcnYYS/2JVNAKjcfN+J6/bacC99Gc7+gthPzMC4O9zlnWEH0PYL
unoieyheNVzuQgnEFJWs9Eorc+MQmBQaNnm4ue9uCjLbmK6venx5XoK6qSmapgHo
WCTeXOloOK3Y3FeSQy6F8JjowakpO8yDJBlneRlCwXGEy61wye1J/muJCyXeVD8j
oeuY9tPIreBZFuq1dRMPITMWkE1EYRHyaXwMPFl+OfkZmpLtfu3Satna7PelMzY1
apcvrGmV+Pqts/U0YrV6ZDjNd8asl5FbomDkL9O/H67B0e340JR2b1QKZ0vV0AZl
t5mZ13pIt9yOYA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:53 2026 by rpki-client