Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
File: ct9pdDDLtXxJoKGZMCTW0yn35WU.mft (raw, json)
Hash identifier: S/x0OobDUXe/zc4DwsCoGT2W4UFol8rNzbuI2qgron8=
Subject key identifier: B7:4B:86:7D:7C:4D:3D:B9:13:D7:06:66:70:43:C4:50:DF:82:1C:B2
Authority key identifier: 72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
Certificate issuer: /CN=72df697430cbb57c49a0a1993024d6d329f7e565
Certificate serial: 019D382DF74CCBA4A5023A72AA75B5A2196A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
Manifest number: 133B
Signing time: Sun 29 Mar 2026 06:00:29 +0000
Manifest this update: Sun 29 Mar 2026 06:00:29 +0000
Manifest next update: Mon 30 Mar 2026 06:00:29 +0000
Files and hashes: 1: ct9pdDDLtXxJoKGZMCTW0yn35WU.crl (hash: QRtdIKOFB4D4STEM+/9oUks3gpqCoN6SmOcc8uU5sNM=)
2: h4TyPM-lSUzBFc-GVJsAqMyi_Q8.roa (hash: QRRCqIhfzgSfHjTwanuS+mvIUE37zMG7bc9JISZqHPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f7:4c:cb:a4:a5:02:3a:72:aa:75:b5:a2:19:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72df697430cbb57c49a0a1993024d6d329f7e565
Validity
Not Before: Mar 29 06:00:29 2026 GMT
Not After : Mar 30 06:00:29 2026 GMT
Subject: CN=b74b867d7c4d3db913d706667043c450df821cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:1a:f7:69:4a:c8:3b:a4:48:c3:fa:12:ff:
b3:9d:3e:36:91:15:10:14:ab:1e:5b:54:f6:b9:58:
63:94:2c:31:b3:25:08:a3:95:a2:32:b7:a7:77:09:
de:7c:fa:48:ea:da:14:14:32:ae:f0:87:c3:81:9f:
ed:95:78:e7:84:d2:70:d6:27:83:d2:f6:b8:62:e7:
a3:83:f9:60:37:88:8c:12:4d:26:58:49:20:ad:3f:
4c:6d:23:2e:4d:4a:89:b9:b4:0e:67:61:22:5e:fd:
98:46:f0:d8:32:85:9e:af:54:8e:45:da:01:7b:90:
fe:0b:69:84:03:b8:bd:c1:09:29:20:98:3e:3b:b3:
7f:eb:1f:95:63:7a:fe:91:20:2e:71:68:e3:d5:3c:
ac:6e:ba:e8:09:58:15:fb:28:14:2a:7e:53:b1:3f:
c4:df:76:a0:41:69:07:c7:57:e3:54:02:c6:0b:cd:
2e:e7:93:05:2a:fd:4c:8f:a9:ae:bc:00:fe:14:03:
e9:9b:fa:0a:0e:c8:a4:cc:0c:13:30:ec:44:ae:1b:
65:60:74:f5:a0:b5:ed:55:8a:fb:56:aa:41:99:60:
86:ed:ba:fa:59:1d:d6:04:29:8c:8c:80:13:e7:27:
37:66:ef:66:7d:e7:72:44:03:6e:c3:a7:c1:3e:df:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4B:86:7D:7C:4D:3D:B9:13:D7:06:66:70:43:C4:50:DF:82:1C:B2
X509v3 Authority Key Identifier:
keyid:72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:10:b7:05:ad:fb:76:41:13:6f:fc:30:7c:2c:a7:2d:45:b1:
fe:8c:45:d3:a4:27:48:80:e9:7f:32:41:cb:2f:7e:bc:58:3c:
7a:32:6c:69:3d:0d:01:11:de:b6:03:77:0a:9f:46:c2:8b:d4:
34:de:92:45:ce:1d:20:4a:cb:88:35:6e:bd:cc:23:72:1e:bb:
21:97:6c:b7:94:c5:65:35:e1:27:34:64:b8:39:44:8b:3f:67:
a0:52:5e:90:8f:c4:53:48:1c:a0:10:31:8a:6c:99:55:38:07:
92:6e:41:8f:04:74:de:10:2e:19:f3:2a:d2:8f:fe:ed:fc:cd:
73:e2:25:2a:9e:35:b3:22:eb:e8:43:fa:44:12:ea:01:ae:b3:
e4:86:85:54:c2:07:c7:6c:72:de:b1:ab:55:95:db:1b:aa:34:
8d:d8:d4:70:f8:af:87:5c:5a:fd:13:27:f3:32:25:c4:36:4d:
14:ea:92:be:6c:27:e2:c9:e8:91:03:fd:dd:2d:c5:00:e3:61:
6c:34:6f:b0:2b:63:1b:d4:05:59:03:35:45:66:45:63:3e:b6:
df:a0:29:a4:66:58:d6:cb:a2:dc:50:da:d4:79:6c:c2:b6:82:
40:10:ce:fa:2a:44:c9:04:8c:a3:49:20:1c:8e:a9:ce:32:04:
81:c2:f2:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LfdMy6SlAjpyqnW1ohlqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZGY2OTc0MzBjYmI1N2M0OWEwYTE5OTMwMjRkNmQzMjlm
N2U1NjUwHhcNMjYwMzI5MDYwMDI5WhcNMjYwMzMwMDYwMDI5WjAzMTEwLwYDVQQD
EyhiNzRiODY3ZDdjNGQzZGI5MTNkNzA2NjY3MDQzYzQ1MGRmODIxY2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY0a92lKyDukSMP6Ev+znT42kRUQ
FKseW1T2uVhjlCwxsyUIo5WiMrendwnefPpI6toUFDKu8IfDgZ/tlXjnhNJw1ieD
0va4Yuejg/lgN4iMEk0mWEkgrT9MbSMuTUqJubQOZ2EiXv2YRvDYMoWer1SORdoB
e5D+C2mEA7i9wQkpIJg+O7N/6x+VY3r+kSAucWjj1TysbrroCVgV+ygUKn5TsT/E
33agQWkHx1fjVALGC80u55MFKv1Mj6muvAD+FAPpm/oKDsikzAwTMOxErhtlYHT1
oLXtVYr7VqpBmWCG7br6WR3WBCmMjIAT5yc3Zu9mfedyRANuw6fBPt88TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdLhn18TT25E9cGZnBDxFDfghyyMB8GA1UdIwQY
MBaAFHLfaXQwy7V8SaChmTAk1tMp9+VlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3Q5cGREREx0WHhKb0tHWk1DVFcweW4zNVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mODE2ZDYtMDE2YS00MTM1LTk5ZTMt
OGM0MmJiMjIzMWFiLzEvY3Q5cGREREx0WHhKb0tHWk1DVFcweW4zNVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9mODE2ZDYtMDE2YS00MTM1LTk5ZTMtOGM0MmJiMjIzMWFi
LzEvY3Q5cGREREx0WHhKb0tHWk1DVFcweW4zNVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRC3Ba37
dkETb/wwfCynLUWx/oxF06QnSIDpfzJByy9+vFg8ejJsaT0NARHetgN3Cp9GwovU
NN6SRc4dIErLiDVuvcwjch67IZdst5TFZTXhJzRkuDlEiz9noFJekI/EU0gcoBAx
imyZVTgHkm5BjwR03hAuGfMq0o/+7fzNc+IlKp41syLr6EP6RBLqAa6z5IaFVMIH
x2xy3rGrVZXbG6o0jdjUcPivh1xa/RMn8zIlxDZNFOqSvmwn4snokQP93S3FAONh
bDRvsCtjG9QFWQM1RWZFYz6236AppGZY1sui3FDa1HlswraCQBDO+ipEyQSMo0kg
HI6pzjIEgcLyqg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:32 2026 by rpki-client