Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
File: 9B_-fSl-5OHU0jM1qatKAIjAJdc.mft (raw, json)
Hash identifier: inNvgBExkgmN8WyMMtQ6Fu+eyUoPyLAKv9CRH6EEf28=
Subject key identifier: AD:49:77:83:D9:C8:40:64:CE:14:84:AC:AC:1E:70:CD:AF:62:61:6B
Authority key identifier: F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
Certificate issuer: /CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Certificate serial: 019D371BBABA768AD60756BB9A3D866DA7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
Manifest number: 0E63
Signing time: Sun 29 Mar 2026 01:00:57 +0000
Manifest this update: Sun 29 Mar 2026 01:00:57 +0000
Manifest next update: Mon 30 Mar 2026 01:00:57 +0000
Files and hashes: 1: 9B_-fSl-5OHU0jM1qatKAIjAJdc.crl (hash: FUpurt6JQamiK/6JkhX7C6TokRv7+acysQXNSj3LZuU=)
2: dJqD19E6mk5uleQws4cS1vrhxjc.roa (hash: B93wH1HCjYPCakWp9euufDKeozgy2SCaB0olYXjrVtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ba:ba:76:8a:d6:07:56:bb:9a:3d:86:6d:a7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Validity
Not Before: Mar 29 01:00:57 2026 GMT
Not After : Mar 30 01:00:57 2026 GMT
Subject: CN=ad497783d9c84064ce1484acac1e70cdaf62616b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:02:94:39:05:2d:fd:0e:eb:df:2a:a7:cc:89:
b8:6b:54:e4:9b:07:d7:22:e0:b7:cc:f3:f6:11:4e:
e0:bf:d0:f1:b9:83:2e:7e:19:ba:fb:f7:41:d5:79:
27:4b:1f:2c:42:0a:2d:31:27:0b:20:8f:2b:d6:28:
8a:1f:56:fd:92:61:ad:16:d5:1c:76:34:7a:b5:0d:
e4:c6:aa:cd:f4:d2:5e:80:53:29:09:ea:9d:a8:e8:
48:23:b7:a2:b3:42:6c:a2:f7:56:db:d3:8b:cc:39:
cb:87:92:bb:af:ce:a8:6a:ad:bc:44:61:82:78:94:
e7:34:62:44:45:f0:8c:78:e3:b7:35:cc:0c:22:67:
0d:a8:03:ce:17:b3:b9:58:58:8e:f2:4c:29:1d:80:
c5:d8:48:1e:ff:67:dc:53:3d:b0:73:b4:e9:a0:dc:
05:0d:35:93:44:8a:e6:b0:a4:48:29:e4:8a:8e:ce:
50:9d:b5:c9:8a:48:c9:64:0d:0b:75:92:0a:e1:13:
33:bd:3b:54:a1:b9:95:53:9e:23:20:23:b2:9b:ca:
60:94:dc:e7:ce:73:bf:a4:7b:11:f2:87:7d:f6:04:
6f:5b:b6:75:45:15:14:67:24:f5:6b:99:da:76:b5:
a3:b9:7b:fd:23:6e:b7:be:b9:17:af:18:6e:cc:e7:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:49:77:83:D9:C8:40:64:CE:14:84:AC:AC:1E:70:CD:AF:62:61:6B
X509v3 Authority Key Identifier:
keyid:F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:15:9d:c9:e9:3a:b0:7f:4e:97:62:90:1e:b0:ec:bd:27:57:
9d:ec:46:c4:e4:5a:a5:ae:3a:ee:2b:0d:ae:74:a2:0c:f7:51:
62:9b:fd:4a:d6:87:85:49:0b:a8:2c:89:d2:f1:5b:1c:0e:9d:
ce:53:4e:01:b5:34:e0:27:e2:4c:7b:37:8c:d7:1d:88:05:ea:
d0:d4:bc:6f:24:5a:70:f3:b2:60:de:9e:52:ab:04:54:a6:f9:
54:77:f8:7a:1a:ec:62:f3:51:41:2a:e6:96:90:ba:7e:5a:48:
69:0d:10:21:37:e6:fb:c9:54:02:6d:49:70:60:0d:de:44:06:
c4:94:8c:4d:ca:83:a0:e1:95:4a:ff:e1:81:22:ad:1f:c6:c1:
d4:ab:92:c4:2b:16:21:bf:25:94:df:1b:10:68:90:96:41:ed:
24:74:47:71:42:93:fb:bc:8d:de:39:de:95:30:c4:fa:4f:ac:
03:c0:f6:6f:15:95:24:ef:7a:f2:aa:c0:59:4b:2c:91:05:70:
70:d7:98:cd:53:25:62:54:6c:93:fd:20:95:2b:24:06:e0:f8:
20:64:40:7d:0a:85:6c:34:33:5b:4a:c8:df:fa:d5:a7:78:b7:
26:05:f3:33:b1:1e:6c:1e:48:d2:35:91:22:46:a5:a0:2d:b4:
01:74:ff:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G7q6dorWB1a7mj2GbafyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MWZmZTdkMjk3ZWU0ZTFkNGQyMzMzNWE5YWI0YTAwODhj
MDI1ZDcwHhcNMjYwMzI5MDEwMDU3WhcNMjYwMzMwMDEwMDU3WjAzMTEwLwYDVQQD
EyhhZDQ5Nzc4M2Q5Yzg0MDY0Y2UxNDg0YWNhYzFlNzBjZGFmNjI2MTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwKUOQUt/Q7r3yqnzIm4a1TkmwfX
IuC3zPP2EU7gv9DxuYMufhm6+/dB1XknSx8sQgotMScLII8r1iiKH1b9kmGtFtUc
djR6tQ3kxqrN9NJegFMpCeqdqOhII7eis0JsovdW29OLzDnLh5K7r86oaq28RGGC
eJTnNGJERfCMeOO3NcwMImcNqAPOF7O5WFiO8kwpHYDF2Ege/2fcUz2wc7TpoNwF
DTWTRIrmsKRIKeSKjs5QnbXJikjJZA0LdZIK4RMzvTtUobmVU54jICOym8pglNzn
znO/pHsR8od99gRvW7Z1RRUUZyT1a5nadrWjuXv9I263vrkXrxhuzOfRCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1Jd4PZyEBkzhSErKwecM2vYmFrMB8GA1UdIwQY
MBaAFPQf/n0pfuTh1NIzNamrSgCIwCXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJfLWZTbC01T0hVMGpNMXFhdEtBSWpBSmRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zMTAzYTEtYmM1OC00NDRjLTgyMzEt
NDNkOGE2ZmQxZjQ1LzEvOUJfLWZTbC01T0hVMGpNMXFhdEtBSWpBSmRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8zMTAzYTEtYmM1OC00NDRjLTgyMzEtNDNkOGE2ZmQxZjQ1
LzEvOUJfLWZTbC01T0hVMGpNMXFhdEtBSWpBSmRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRWdyek6
sH9Ol2KQHrDsvSdXnexGxORapa467isNrnSiDPdRYpv9StaHhUkLqCyJ0vFbHA6d
zlNOAbU04CfiTHs3jNcdiAXq0NS8byRacPOyYN6eUqsEVKb5VHf4ehrsYvNRQSrm
lpC6flpIaQ0QITfm+8lUAm1JcGAN3kQGxJSMTcqDoOGVSv/hgSKtH8bB1KuSxCsW
Ib8llN8bEGiQlkHtJHRHcUKT+7yN3jnelTDE+k+sA8D2bxWVJO968qrAWUsskQVw
cNeYzVMlYlRsk/0glSskBuD4IGRAfQqFbDQzW0rI3/rVp3i3JgXzM7EebB5I0jWR
IkaloC20AXT/gg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:02 2026 by rpki-client