Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
File: 9bdVrRo8ekUCu8PqNMdba85hyUw.mft (raw, json)
Hash identifier: L3blBxxXeMjJQGhsuzobtu4LUJ/hk9vPc8Vje7hj5rQ=
Subject key identifier: F8:11:4C:A7:60:CF:03:B2:C1:FB:53:8F:86:BC:8E:2B:D7:0C:9E:EA
Authority key identifier: F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
Certificate issuer: /CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Certificate serial: 019D39418B7183D83166DC73A775B124866B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 11:01:29 +0000
Manifest this update: Sun 29 Mar 2026 11:01:29 +0000
Manifest next update: Mon 30 Mar 2026 11:01:29 +0000
Files and hashes: 1: 9bdVrRo8ekUCu8PqNMdba85hyUw.crl (hash: G9+ucGcNzRwc3zaxAyYhsUDtBpQFFMaJmvCIgmboEuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:8b:71:83:d8:31:66:dc:73:a7:75:b1:24:86:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Validity
Not Before: Mar 29 11:01:29 2026 GMT
Not After : Mar 30 11:01:29 2026 GMT
Subject: CN=f8114ca760cf03b2c1fb538f86bc8e2bd70c9eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:6e:e0:12:3f:92:5b:b5:4d:85:28:ff:35:
e4:63:fb:77:36:b8:a2:e9:21:1c:2d:38:ab:c3:27:
a0:a5:cd:d1:60:55:bd:b7:0d:b9:6b:49:29:ed:bd:
eb:7a:c4:11:3b:e8:0a:dc:22:d1:ad:ef:82:0f:ec:
57:88:6f:d5:42:3a:77:d5:e2:25:0a:c3:99:68:81:
b7:5a:de:af:d3:91:9f:9a:88:ab:bd:a9:bb:2a:f3:
11:32:18:f5:8b:75:48:2a:0b:ca:8e:91:e5:7f:d3:
48:31:05:f4:a1:db:96:a0:11:12:05:fb:6c:b0:39:
2a:01:ac:a5:e8:67:0b:42:84:63:1a:94:2c:08:56:
a6:08:90:8a:11:57:fc:46:06:ff:bf:7c:b1:16:cb:
81:6a:12:9e:30:73:b3:9e:9b:2b:b3:5b:ac:f5:9c:
67:3c:14:c0:8c:7a:8a:a5:5f:42:46:97:28:7c:93:
dd:7c:02:a5:5c:1b:17:e0:e4:bb:42:df:54:f1:f3:
4b:4f:ed:ad:03:1a:02:61:cb:fe:eb:cb:c7:8a:c6:
6b:70:27:6f:71:3a:52:68:f5:81:74:f6:55:de:4d:
58:da:b0:28:da:02:7a:f6:e9:6b:2a:3b:77:10:02:
7e:97:82:57:b5:b9:e1:d4:24:07:1d:f0:37:86:1d:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:11:4C:A7:60:CF:03:B2:C1:FB:53:8F:86:BC:8E:2B:D7:0C:9E:EA
X509v3 Authority Key Identifier:
keyid:F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e2:46:f5:c8:c6:e0:28:ae:08:cc:51:6c:1b:3a:5a:90:36:
18:16:5f:09:39:70:0c:11:73:e8:9e:aa:7f:40:6d:fb:78:b9:
cb:0d:91:7b:cd:65:38:33:47:d4:32:b2:6a:8a:13:b9:a3:69:
11:e1:76:7c:03:f5:be:63:23:90:09:d1:35:28:ef:38:7a:ff:
b8:e4:14:1a:31:16:2e:35:85:dc:21:76:7f:21:ee:3e:50:d3:
45:34:4a:17:86:63:2a:27:5f:dd:8f:4a:20:0d:d1:ca:f0:e1:
23:ee:e6:36:83:d8:a5:78:df:66:da:7c:9f:bb:08:f3:45:47:
d3:d8:df:5d:f5:02:85:7d:70:1c:2c:40:55:2f:f5:98:34:1e:
b5:04:f0:71:29:7a:a1:c3:0d:78:3b:a7:f0:b8:40:f4:ed:8c:
91:c6:3d:86:60:ee:6a:86:46:06:71:99:64:10:8a:02:07:c4:
a0:de:a0:db:7a:e5:11:6e:2c:0b:93:b8:59:5e:51:d1:10:80:
0f:be:fb:b4:43:0f:e4:4c:f7:73:b8:29:2b:9e:dc:94:e3:8c:
8a:1d:c0:f1:4c:ed:e0:13:fc:a8:0d:7e:15:73:9c:08:70:59:
05:8b:36:5c:e4:22:8f:6c:7b:be:99:e4:9a:50:45:80:b8:48:
b7:92:54:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QYtxg9gxZtxzp3WxJIZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Yjc1NWFkMWEzYzdhNDUwMmJiYzNlYTM0Yzc1YjZiY2U2
MWM5NGMwHhcNMjYwMzI5MTEwMTI5WhcNMjYwMzMwMTEwMTI5WjAzMTEwLwYDVQQD
EyhmODExNGNhNzYwY2YwM2IyYzFmYjUzOGY4NmJjOGUyYmQ3MGM5ZWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJFu4BI/klu1TYUo/zXkY/t3Nrii
6SEcLTirwyegpc3RYFW9tw25a0kp7b3resQRO+gK3CLRre+CD+xXiG/VQjp31eIl
CsOZaIG3Wt6v05Gfmoirvam7KvMRMhj1i3VIKgvKjpHlf9NIMQX0oduWoBESBfts
sDkqAayl6GcLQoRjGpQsCFamCJCKEVf8Rgb/v3yxFsuBahKeMHOznpsrs1us9Zxn
PBTAjHqKpV9CRpcofJPdfAKlXBsX4OS7Qt9U8fNLT+2tAxoCYcv+68vHisZrcCdv
cTpSaPWBdPZV3k1Y2rAo2gJ69ulrKjt3EAJ+l4JXtbnh1CQHHfA3hh02kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgRTKdgzwOywftTj4a8jivXDJ7qMB8GA1UdIwQY
MBaAFPW3Va0aPHpFArvD6jTHW2vOYclMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWJkVnJSbzhla1VDdThQcU5NZGJhODVoeVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iNjQ5NjQtYjY3NS00ZTUzLThlZjgt
MGJiZGU4ODRlODEyLzEvOWJkVnJSbzhla1VDdThQcU5NZGJhODVoeVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9iNjQ5NjQtYjY3NS00ZTUzLThlZjgtMGJiZGU4ODRlODEy
LzEvOWJkVnJSbzhla1VDdThQcU5NZGJhODVoeVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouJG9cjG
4CiuCMxRbBs6WpA2GBZfCTlwDBFz6J6qf0Bt+3i5yw2Re81lODNH1DKyaooTuaNp
EeF2fAP1vmMjkAnRNSjvOHr/uOQUGjEWLjWF3CF2fyHuPlDTRTRKF4ZjKidf3Y9K
IA3RyvDhI+7mNoPYpXjfZtp8n7sI80VH09jfXfUChX1wHCxAVS/1mDQetQTwcSl6
ocMNeDun8LhA9O2MkcY9hmDuaoZGBnGZZBCKAgfEoN6g23rlEW4sC5O4WV5R0RCA
D777tEMP5Ez3c7gpK57clOOMih3A8Uzt4BP8qA1+FXOcCHBZBYs2XOQij2x7vpnk
mlBFgLhIt5JULA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:16:05 2026 by rpki-client