Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
File: 9jOGnDZCtefqAii_DgspXO_MTd8.mft (raw, json)
Hash identifier: U6BqROFlqYYJ1YiHg0Bh/WaA2dvjX79uuZk+bQX2uBI=
Subject key identifier: 6A:FF:7B:9E:30:24:06:59:D0:16:2D:9D:A5:FB:7E:B3:35:8A:9A:0C
Authority key identifier: F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
Certificate issuer: /CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Certificate serial: 019D39099349B0261E621F0E488CA13A2737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
Manifest number: 1305
Signing time: Sun 29 Mar 2026 10:00:21 +0000
Manifest this update: Sun 29 Mar 2026 10:00:21 +0000
Manifest next update: Mon 30 Mar 2026 10:00:21 +0000
Files and hashes: 1: 9jOGnDZCtefqAii_DgspXO_MTd8.crl (hash: dvh6pa7r7NcFx9QV2YT6zaxEASOnTIDJdA6uxA3fRr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:93:49:b0:26:1e:62:1f:0e:48:8c:a1:3a:27:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Validity
Not Before: Mar 29 10:00:21 2026 GMT
Not After : Mar 30 10:00:21 2026 GMT
Subject: CN=6aff7b9e30240659d0162d9da5fb7eb3358a9a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:0a:ed:c9:07:e5:97:90:d4:d9:8e:c2:61:
8e:e3:e5:84:a4:58:90:f7:e7:5d:93:99:f3:b6:27:
0a:63:9c:77:0c:1b:a4:c6:d8:ae:38:ae:46:85:89:
8e:07:9c:bb:af:e2:c2:4c:c3:f1:6a:4f:bf:2d:e3:
78:9f:61:e1:3b:fe:28:17:6a:5c:3f:c2:49:79:ac:
00:9a:9e:3c:13:cf:3d:2b:62:60:b5:de:bc:ee:59:
f1:e1:a4:82:07:8c:c0:29:63:f2:8b:03:7e:6a:30:
42:d3:ba:45:57:9f:10:78:51:7c:15:3b:ab:10:69:
90:33:ab:17:d5:bc:7e:4c:ed:68:24:86:17:89:7f:
7d:d5:51:49:ec:bd:0b:fc:12:cb:46:be:11:f5:9b:
d9:66:d6:d5:cc:0d:66:c0:de:26:16:ed:a1:12:6a:
a2:f7:13:c7:a3:e8:96:a8:da:87:8c:8d:51:e3:d8:
48:95:9d:bb:27:62:95:33:21:e4:9f:1a:21:b2:cc:
e7:6d:c1:3e:e5:34:17:7d:e1:ca:96:b1:b2:3a:3f:
7f:23:ef:e6:1b:a7:22:cf:db:62:81:8b:fc:b8:8d:
09:13:29:a5:d0:a2:53:67:a2:6c:39:47:55:cc:f7:
65:a6:68:04:0a:eb:c9:28:73:cc:8b:7d:37:3d:b4:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FF:7B:9E:30:24:06:59:D0:16:2D:9D:A5:FB:7E:B3:35:8A:9A:0C
X509v3 Authority Key Identifier:
keyid:F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f3:a2:b1:0b:85:99:18:10:47:24:80:40:bf:5d:7b:3a:c5:
9d:65:7f:22:c0:c1:67:6c:a4:f6:e0:e6:e7:17:53:02:77:c5:
90:97:eb:0f:46:b4:29:8b:d0:ce:8f:99:ca:33:83:1e:d8:50:
4e:68:c4:ec:78:1b:25:cc:4a:aa:d6:8f:37:31:87:c0:3e:d1:
77:3d:e6:59:f9:30:ec:30:c1:4e:5e:bb:b8:ab:e0:56:8e:40:
ea:2c:8d:0b:59:7f:97:02:d2:ab:a9:3c:38:be:a9:69:ef:f5:
52:94:0a:fb:45:e5:d5:84:19:e3:a9:ae:2a:ff:01:1e:0c:29:
09:99:13:67:6b:fb:3a:76:e6:55:9d:1c:2a:54:2e:b2:fd:36:
f1:22:65:f0:8b:84:1d:0a:9b:96:05:50:07:16:61:aa:49:60:
95:f5:ac:74:fd:c3:e7:7f:50:24:7b:43:24:a3:32:07:e2:f8:
91:a4:e8:a4:f3:99:7e:93:75:07:5a:12:13:1b:55:ed:61:8b:
62:04:68:ac:23:f1:eb:fb:2e:ef:d4:2c:9a:85:56:dc:c6:1c:
eb:b0:97:e5:1c:40:70:de:6d:65:2b:96:ff:ef:36:21:57:b8:
69:a8:9a:7c:3b:bc:8d:9e:f6:5a:6d:7b:0d:74:0a:a3:7a:99:
97:c1:bf:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CZNJsCYeYh8OSIyhOic3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MzM4NjljMzY0MmI1ZTdlYTAyMjhiZjBlMGIyOTVjZWZj
YzRkZGYwHhcNMjYwMzI5MTAwMDIxWhcNMjYwMzMwMTAwMDIxWjAzMTEwLwYDVQQD
Eyg2YWZmN2I5ZTMwMjQwNjU5ZDAxNjJkOWRhNWZiN2ViMzM1OGE5YTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNEK7ckH5ZeQ1NmOwmGO4+WEpFiQ
9+ddk5nzticKY5x3DBukxtiuOK5GhYmOB5y7r+LCTMPxak+/LeN4n2HhO/4oF2pc
P8JJeawAmp48E889K2Jgtd687lnx4aSCB4zAKWPyiwN+ajBC07pFV58QeFF8FTur
EGmQM6sX1bx+TO1oJIYXiX991VFJ7L0L/BLLRr4R9ZvZZtbVzA1mwN4mFu2hEmqi
9xPHo+iWqNqHjI1R49hIlZ27J2KVMyHknxohssznbcE+5TQXfeHKlrGyOj9/I+/m
G6ciz9tigYv8uI0JEyml0KJTZ6JsOUdVzPdlpmgECuvJKHPMi303PbRTaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGr/e54wJAZZ0BYtnaX7frM1ipoMMB8GA1UdIwQY
MBaAFPYzhpw2QrXn6gIovw4LKVzvzE3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWpPR25EWkN0ZWZxQWlpX0Rnc3BYT19NVGQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82ZGE1NjItYTgzNi00OGNjLWFhNTct
OGM0YmI0NDg1ZjM0LzEvOWpPR25EWkN0ZWZxQWlpX0Rnc3BYT19NVGQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82ZGE1NjItYTgzNi00OGNjLWFhNTctOGM0YmI0NDg1ZjM0
LzEvOWpPR25EWkN0ZWZxQWlpX0Rnc3BYT19NVGQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfOisQuF
mRgQRySAQL9dezrFnWV/IsDBZ2yk9uDm5xdTAnfFkJfrD0a0KYvQzo+ZyjODHthQ
TmjE7HgbJcxKqtaPNzGHwD7Rdz3mWfkw7DDBTl67uKvgVo5A6iyNC1l/lwLSq6k8
OL6pae/1UpQK+0Xl1YQZ46muKv8BHgwpCZkTZ2v7OnbmVZ0cKlQusv028SJl8IuE
HQqblgVQBxZhqklglfWsdP3D539QJHtDJKMyB+L4kaTopPOZfpN1B1oSExtV7WGL
YgRorCPx6/su79QsmoVW3MYc67CX5RxAcN5tZSuW/+82IVe4aaiafDu8jZ72Wm17
DXQKo3qZl8G/Lw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:50 2026 by rpki-client