Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
File: 9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json)
Hash identifier: mzYbDv1LfEVZFfKFNJ6FF/Bb4pGguYHfh2II1whh578=
Subject key identifier: 4F:DC:54:68:11:AF:8F:06:35:FC:B1:38:0B:8D:69:AD:DB:89:F5:6B
Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
Certificate issuer: /CN=f60707f287a2309beecbb852ee40aa831b9e7866
Certificate serial: 019D37C060007A269A1DA06AB0B464B7ECAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
Manifest number: 0F3C
Signing time: Sun 29 Mar 2026 04:00:47 +0000
Manifest this update: Sun 29 Mar 2026 04:00:47 +0000
Manifest next update: Mon 30 Mar 2026 04:00:47 +0000
Files and hashes: 1: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: i7Sp76SlLIzgw+zpxww7SvadCjCi73vSGTBt0OWEt88=)
2: o3IVsTtHp4LvNCkM3vhyjfWuFnU.roa (hash: lY2LMXKbJT6BlB/lSBYqcfLveqU3+U+eDmIrpngNEak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:60:00:7a:26:9a:1d:a0:6a:b0:b4:64:b7:ec:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866
Validity
Not Before: Mar 29 04:00:47 2026 GMT
Not After : Mar 30 04:00:47 2026 GMT
Subject: CN=4fdc546811af8f0635fcb1380b8d69addb89f56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:be:98:0e:6e:37:aa:3f:1b:2f:f9:ef:d2:
9b:1c:05:64:4f:ce:d8:a3:83:7a:dc:66:35:e8:fd:
d6:ea:e7:ec:dc:1d:8a:a2:a6:01:45:c1:b2:ad:45:
6d:24:d9:6c:25:a5:9f:b6:89:d5:13:b2:66:c7:11:
46:f0:8a:2c:6b:86:e1:ac:64:20:5c:fa:64:fe:34:
88:b3:c9:81:ec:ad:20:0e:06:54:ef:e2:97:a4:6d:
17:1b:8b:57:cc:b0:b8:47:a7:9e:95:a8:66:0a:7d:
fc:98:c9:b9:26:4e:68:84:3b:4f:20:81:27:69:8f:
47:09:4e:5b:39:c1:fa:ae:c4:4d:e7:67:e2:85:b9:
3e:93:a5:97:ca:94:3b:20:c6:ee:e1:8e:65:d2:36:
6e:9a:2c:76:52:a9:be:64:af:fe:33:8b:77:89:93:
ce:43:8f:fa:ce:cc:2c:3c:25:1a:bc:6e:95:1f:92:
52:71:07:bd:f5:ea:49:8c:55:4c:8b:ac:dd:dc:3a:
0e:8a:a9:68:ee:b8:a3:59:83:87:88:27:bb:b9:b2:
de:b1:1d:f8:e0:cb:29:76:1a:4d:ba:b5:40:af:18:
10:ac:3d:c5:53:7c:ba:ef:f2:92:3d:f0:e0:9e:3d:
b5:b7:28:78:69:6d:97:0b:f9:26:2e:a0:af:d4:e4:
5d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DC:54:68:11:AF:8F:06:35:FC:B1:38:0B:8D:69:AD:DB:89:F5:6B
X509v3 Authority Key Identifier:
keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a6:74:72:e0:4b:3c:c1:2a:9b:36:64:52:0a:73:40:ed:80:
72:60:55:1c:60:f2:ee:4a:15:76:8d:2d:20:c6:c1:16:a8:b5:
ad:17:1a:76:bd:8b:b2:8b:1a:5f:b7:f8:e4:0b:b4:c3:2e:a1:
7b:a7:8c:1b:87:bf:d6:fb:2f:18:fd:74:8d:6b:3f:d0:37:4a:
d1:c1:d6:94:2b:cc:1f:d5:d1:ce:d8:44:36:40:93:cd:38:55:
7d:4f:79:a3:f2:9e:ad:b5:42:72:2d:59:0a:19:bd:0f:4a:d9:
b9:0c:1d:8d:41:6e:9d:92:02:50:30:63:18:43:8a:bf:59:2e:
5f:14:31:98:df:ba:d7:5e:4e:5a:94:ba:dd:5c:2e:b5:34:3b:
50:13:ad:ee:dd:1b:62:8c:02:7a:da:7b:09:94:03:90:42:a2:
f9:9c:9a:88:59:02:30:cc:1e:f6:06:3e:0f:7a:40:fc:3b:d2:
fb:97:47:a1:0e:81:6d:82:51:38:48:9c:54:bc:6a:ad:2d:ca:
91:21:1c:c2:9f:e0:ac:c9:cd:da:c9:a6:fd:11:61:42:f6:a6:
1c:5f:51:70:d5:4d:c6:d7:d5:49:34:1d:41:3c:eb:88:f7:b9:
70:7e:6a:94:41:d2:a0:d1:e2:d9:ac:0e:d0:a1:e9:df:51:b0:
9e:75:0a:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wGAAeiaaHaBqsLRkt+yrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MDcwN2YyODdhMjMwOWJlZWNiYjg1MmVlNDBhYTgzMWI5
ZTc4NjYwHhcNMjYwMzI5MDQwMDQ3WhcNMjYwMzMwMDQwMDQ3WjAzMTEwLwYDVQQD
Eyg0ZmRjNTQ2ODExYWY4ZjA2MzVmY2IxMzgwYjhkNjlhZGRiODlmNTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfO+mA5uN6o/Gy/579KbHAVkT87Y
o4N63GY16P3W6ufs3B2KoqYBRcGyrUVtJNlsJaWftonVE7JmxxFG8Iosa4bhrGQg
XPpk/jSIs8mB7K0gDgZU7+KXpG0XG4tXzLC4R6eelahmCn38mMm5Jk5ohDtPIIEn
aY9HCU5bOcH6rsRN52fihbk+k6WXypQ7IMbu4Y5l0jZumix2Uqm+ZK/+M4t3iZPO
Q4/6zswsPCUavG6VH5JScQe99epJjFVMi6zd3DoOiqlo7rijWYOHiCe7ubLesR34
4MspdhpNurVArxgQrD3FU3y67/KSPfDgnj21tyh4aW2XC/kmLqCv1ORdswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/cVGgRr48GNfyxOAuNaa3bifVrMB8GA1UdIwQY
MBaAFPYHB/KHojCb7su4Uu5AqoMbnnhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWdjSDhvZWlNSnZ1eTdoUzdrQ3FneHVlZUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hM2E3MDgtYzY2OS00NzdmLTlkM2It
ZTVmYTM1MGY4ZmE4LzEvOWdjSDhvZWlNSnZ1eTdoUzdrQ3FneHVlZUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hM2E3MDgtYzY2OS00NzdmLTlkM2ItZTVmYTM1MGY4ZmE4
LzEvOWdjSDhvZWlNSnZ1eTdoUzdrQ3FneHVlZUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6Z0cuBL
PMEqmzZkUgpzQO2AcmBVHGDy7koVdo0tIMbBFqi1rRcadr2LsosaX7f45Au0wy6h
e6eMG4e/1vsvGP10jWs/0DdK0cHWlCvMH9XRzthENkCTzThVfU95o/KerbVCci1Z
Chm9D0rZuQwdjUFunZICUDBjGEOKv1kuXxQxmN+6115OWpS63VwutTQ7UBOt7t0b
YowCetp7CZQDkEKi+ZyaiFkCMMwe9gY+D3pA/DvS+5dHoQ6BbYJROEicVLxqrS3K
kSEcwp/grMnN2smm/RFhQvamHF9RcNVNxtfVSTQdQTzriPe5cH5qlEHSoNHi2awO
0KHp31GwnnUKmg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:58 2026 by rpki-client