Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: g+n2A58GeBBMYaWdtt2BiQuniJr34QGM76iktWSnI7o=
Subject key identifier: 14:6F:A6:0C:1A:AB:7A:80:80:01:9C:7A:5D:64:D9:EA:CA:DD:84:DA
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 019CD98D348890EF9D5268D3FFEA45F48942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 0802
Signing time: Tue 10 Mar 2026 21:00:35 +0000
Manifest this update: Tue 10 Mar 2026 21:00:35 +0000
Manifest next update: Wed 11 Mar 2026 21:00:35 +0000
Files and hashes: 1: 1r95LK4HWizqALUZJhEWO2mRfys.roa (hash: a7n3lQCzMluTfryIIH6MTnQ1x4Z9vPgOFoHPe0ckSs8=)
2: 2geswA6ENW-xIrWxFpiZS2QEtSg.roa (hash: Wximrdr2iWFM1jcG/8HAiLIPhr2g4tLO5QAJ9/FpqDs=)
3: 2nwagyLqxJwRqLdgTLA7_n4lSs8.roa (hash: 4fgPknlaVUuj1rnAi5TgALYEc9dAtHGP5otC5r0jNlo=)
4: 6N3xoZPe2eQVbNsjIZFngGfa3VM.roa (hash: tFoFVqeUGxu4Apov92KrkjVc4GER0DpKn92wl0890bo=)
5: 7MPluVravo2Zg570yKX0YG2N3n8.roa (hash: 1uXMPGhv4RMa4aedR0mQyuAIi9Pi5joQGyAwvqPRBLA=)
6: D4d_4pxCPjZEGl90vALx44fXxu8.roa (hash: nJq9NCViYi/1CQ0r2u9R6OYAeLLC1B3FaJoObbBwLb8=)
7: XiJSnqUnbwsKfWxUtA9oWKzznIk.roa (hash: il5+2Wom7vPDCFPGBRmCP1wr3fGf4op2yuM4yZALCHs=)
8: ZoZb90LpJA9Ip-2MHkdgs69BJlw.roa (hash: Vsdm6rW7baX27WeKyLbDvpzx2QoVqvnpUMNu9ywBMO4=)
9: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: 74hkfv397XJ6mNDugtOyCBJtU+GIF5oz8BS9ixLhqqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d9:8d:34:88:90:ef:9d:52:68:d3:ff:ea:45:f4:89:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Mar 10 21:00:35 2026 GMT
Not After : Mar 11 21:00:35 2026 GMT
Subject: CN=146fa60c1aab7a8080019c7a5d64d9eacadd84da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e9:47:81:a3:c7:9c:86:bd:ac:f5:9d:04:82:
37:d7:ec:3a:ba:a8:6f:a1:9b:5c:f4:bd:5f:82:aa:
37:6a:1c:af:fb:c7:58:98:a1:53:ab:37:b3:7b:82:
b4:cd:42:2f:b1:e8:08:dd:05:b2:69:37:d4:8c:58:
91:62:6f:c6:a3:fb:03:96:7d:c1:58:31:66:61:01:
5f:31:c4:1b:ee:81:88:7d:70:cc:74:64:ca:e4:0b:
44:75:3a:db:5c:2e:27:31:62:23:af:6d:45:cd:98:
29:32:7c:9f:f6:18:5b:3b:a9:b1:82:70:35:e3:2d:
3d:dd:ae:98:4d:47:57:52:6b:20:98:73:73:d8:19:
45:44:df:b8:94:de:06:29:70:d0:a6:3a:e1:2c:62:
f7:c0:a2:48:d1:d4:27:c5:81:da:a7:8f:30:9d:cf:
f1:4c:84:92:cb:2b:11:c5:e4:e5:ce:1f:5f:4c:0d:
cc:21:7a:bc:bc:bb:e7:cb:88:59:59:b0:f6:5a:67:
68:9b:8f:60:a3:06:62:a6:a4:d4:2e:87:dc:8d:c2:
d8:67:ce:d9:3a:5f:ab:8b:8f:43:84:6a:38:53:51:
df:5f:69:d5:65:19:5d:65:11:39:b2:00:18:d6:53:
92:0f:0d:35:cf:43:15:9d:fd:de:89:87:63:76:76:
91:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6F:A6:0C:1A:AB:7A:80:80:01:9C:7A:5D:64:D9:EA:CA:DD:84:DA
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:23:19:68:b4:99:ec:3c:f3:32:5f:0f:98:e3:01:80:05:ca:
fd:c0:e4:44:74:51:14:e9:4b:7f:25:b1:e3:d4:c3:13:41:36:
87:b1:a1:ea:28:6b:2e:e6:ae:19:80:cd:46:b4:68:d4:b2:86:
c4:70:ed:ac:af:e8:2c:ed:34:0f:8d:ba:b9:7e:63:e2:09:97:
3b:b7:05:74:a1:64:27:fa:83:a6:00:60:ed:31:62:f9:1e:94:
30:e9:7b:23:8e:03:fe:e8:2d:2a:a1:c3:d4:84:a4:64:74:34:
5c:c0:00:2e:61:c3:7f:c7:43:3a:28:98:09:73:ed:b3:5a:b4:
4a:14:bf:26:d1:14:99:32:68:64:1a:6c:4c:8f:0a:df:96:df:
cf:20:0a:6d:97:67:06:b6:eb:f8:a3:e0:a0:6a:45:ab:80:28:
c6:50:ee:95:91:71:76:d3:74:15:b2:bd:e8:5d:80:aa:e8:49:
d1:8c:06:da:42:8f:25:8c:a1:ff:4c:3c:fb:c4:b4:33:0b:eb:
a0:e0:88:5e:e5:32:dc:af:da:cc:45:59:40:4c:03:ab:0a:d5:
92:53:e2:59:15:5e:7e:d2:7f:f3:0e:d9:77:d5:d0:ad:1d:6d:
a1:f3:b0:67:63:2f:8d:77:9b:e6:4b:9c:96:40:f7:20:85:9c:
dd:0c:f4:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzZjTSIkO+dUmjT/+pF9IlCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGJmYmRiNmU5NzVkZGNhOGY2ZGQ5NjhjMzdhN2Q1NTYw
ZTY5MWQwHhcNMjYwMzEwMjEwMDM1WhcNMjYwMzExMjEwMDM1WjAzMTEwLwYDVQQD
EygxNDZmYTYwYzFhYWI3YTgwODAwMTljN2E1ZDY0ZDllYWNhZGQ4NGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4elHgaPHnIa9rPWdBII31+w6uqhv
oZtc9L1fgqo3ahyv+8dYmKFTqzeze4K0zUIvsegI3QWyaTfUjFiRYm/Go/sDln3B
WDFmYQFfMcQb7oGIfXDMdGTK5AtEdTrbXC4nMWIjr21FzZgpMnyf9hhbO6mxgnA1
4y093a6YTUdXUmsgmHNz2BlFRN+4lN4GKXDQpjrhLGL3wKJI0dQnxYHap48wnc/x
TISSyysRxeTlzh9fTA3MIXq8vLvny4hZWbD2Wmdom49gowZipqTULofcjcLYZ87Z
Ol+ri49DhGo4U1HfX2nVZRldZRE5sgAY1lOSDw01z0MVnf3eiYdjdnaRaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRvpgwaq3qAgAGcel1k2erK3YTaMB8GA1UdIwQY
MBaAFP/b+9tul13cqPbdlow3p9VWDmkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUt
MTk3NjlmNTc4ZWZkLzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUtMTk3NjlmNTc4ZWZk
LzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyMZaLSZ
7DzzMl8PmOMBgAXK/cDkRHRRFOlLfyWx49TDE0E2h7Gh6ihrLuauGYDNRrRo1LKG
xHDtrK/oLO00D426uX5j4gmXO7cFdKFkJ/qDpgBg7TFi+R6UMOl7I44D/ugtKqHD
1ISkZHQ0XMAALmHDf8dDOiiYCXPts1q0ShS/JtEUmTJoZBpsTI8K35bfzyAKbZdn
Brbr+KPgoGpFq4AoxlDulZFxdtN0FbK96F2AquhJ0YwG2kKPJYyh/0w8+8S0Mwvr
oOCIXuUy3K/azEVZQEwDqwrVklPiWRVeftJ/8w7Zd9XQrR1tofOwZ2MvjXeb5kuc
lkD3IIWc3Qz0uw==
-----END CERTIFICATE-----
Generated at Wed Mar 11 05:34:52 2026 by rpki-client