Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
File: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft (raw, json)
Hash identifier: V9j1IdkPd+3X9N33MDJpTWB3x/LkFCsCerAhHcmGuc4=
Subject key identifier: B5:0F:7C:89:52:A9:4A:31:5C:F3:73:5C:59:CD:3A:97:91:31:83:BF
Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
Certificate issuer: /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Certificate serial: 019D3865AB3603B076E9195D72A7698E1FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
Manifest number: 1396
Signing time: Sun 29 Mar 2026 07:01:20 +0000
Manifest this update: Sun 29 Mar 2026 07:01:20 +0000
Manifest next update: Mon 30 Mar 2026 07:01:20 +0000
Files and hashes: 1: 0mgkR8Oatppf6KwkGwCdocguoA0.roa (hash: xBRpWZu5TH9MlFJBVgXYiAXfSpweoxy68K+P+8afR20=)
2: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl (hash: o/T8TD9o/IAnHQIzCVYp2LFuAUSu+tqyLSjohmG6j3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ab:36:03:b0:76:e9:19:5d:72:a7:69:8e:1f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Validity
Not Before: Mar 29 07:01:20 2026 GMT
Not After : Mar 30 07:01:20 2026 GMT
Subject: CN=b50f7c8952a94a315cf3735c59cd3a97913183bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:d9:ee:3d:e9:f8:ec:a3:0f:bb:d6:55:67:
6e:59:2a:22:0b:3b:0d:60:2d:f5:3e:e1:e7:f9:7f:
ae:83:ce:dd:e0:69:3d:00:81:09:08:f3:cd:d5:b2:
70:a1:ca:c3:09:62:6f:7d:6f:5d:28:6e:51:27:ee:
f7:82:b6:54:fc:c5:ef:aa:9d:08:8a:95:b7:d4:28:
da:92:47:e7:d0:03:da:61:66:ab:b8:50:88:71:05:
04:5a:50:5d:4e:13:d8:58:16:c3:e2:0b:e7:c9:8d:
be:d9:ce:75:81:56:7e:c8:69:4f:43:39:d6:cc:4a:
f9:6e:6f:fb:55:ed:96:67:b7:5b:ec:29:00:57:97:
91:79:ed:26:d7:64:93:8a:fb:90:be:7b:17:72:2b:
6a:f3:c3:49:b6:d7:3d:f1:72:ef:c9:01:90:95:90:
06:5c:11:79:41:65:61:2e:ed:e4:2e:da:11:55:0d:
ce:ff:68:f4:f1:52:da:7b:bf:cd:8f:19:f4:ec:3a:
73:e9:59:cb:96:e1:97:9f:a9:a9:ed:19:d9:02:88:
8a:bf:5d:ef:c8:24:8f:49:72:78:d1:c0:64:73:e2:
b3:d4:b9:83:d8:2e:54:4a:7c:72:8e:5c:5e:5f:20:
ab:43:18:2a:d2:3f:4a:c6:d5:10:2b:1f:ec:2d:61:
c1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0F:7C:89:52:A9:4A:31:5C:F3:73:5C:59:CD:3A:97:91:31:83:BF
X509v3 Authority Key Identifier:
keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:39:f3:15:8d:22:40:6c:dd:40:b2:48:b9:56:d3:c1:3d:8c:
b7:90:c4:c9:e2:e0:dd:be:17:4f:84:37:59:ad:12:ee:86:8a:
f3:54:2d:e5:65:76:3e:fc:61:c2:34:27:89:14:b3:77:8f:1b:
aa:bb:48:f1:6e:79:ba:81:ae:a0:93:44:20:e9:b2:ba:3b:15:
a4:24:3b:78:e1:6e:54:b1:95:9d:7f:1c:7c:dc:19:97:f5:cc:
31:80:08:45:10:1c:c9:91:88:ec:8f:ab:5d:07:d9:46:e9:9e:
04:c1:ee:89:cf:35:9f:69:9a:c1:c1:3c:d6:e7:f8:28:0f:0c:
64:f8:8e:91:0a:c3:e6:af:dd:e7:85:38:e8:e4:62:58:a3:44:
df:f8:0e:30:cc:c6:80:db:40:fe:00:d9:42:05:c8:65:a1:f4:
40:9f:1a:68:7c:a9:22:13:72:a4:0e:c5:55:db:a7:ce:99:1c:
80:e7:28:1e:2f:97:90:a2:88:8b:20:27:ab:a4:1a:ad:21:48:
d8:21:c4:11:47:61:a3:52:ea:0d:3c:3e:2d:35:c6:b8:be:5b:
43:8f:f1:a7:90:77:0b:96:8d:1c:c2:db:72:cd:ff:fc:52:e6:
b9:73:a0:80:b6:f1:07:e4:da:71:c2:84:96:7f:1f:14:54:f7:
4f:a5:ba:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zas2A7B26Rldcqdpjh++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YWM5OWQ3N2E3YTFjODRkZDQ3ZjQzYmI3MjA1MWFhNzNi
MWFhZDYwHhcNMjYwMzI5MDcwMTIwWhcNMjYwMzMwMDcwMTIwWjAzMTEwLwYDVQQD
EyhiNTBmN2M4OTUyYTk0YTMxNWNmMzczNWM1OWNkM2E5NzkxMzE4M2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmrZ7j3p+OyjD7vWVWduWSoiCzsN
YC31PuHn+X+ug87d4Gk9AIEJCPPN1bJwocrDCWJvfW9dKG5RJ+73grZU/MXvqp0I
ipW31Cjakkfn0APaYWaruFCIcQUEWlBdThPYWBbD4gvnyY2+2c51gVZ+yGlPQznW
zEr5bm/7Ve2WZ7db7CkAV5eRee0m12STivuQvnsXcitq88NJttc98XLvyQGQlZAG
XBF5QWVhLu3kLtoRVQ3O/2j08VLae7/Njxn07Dpz6VnLluGXn6mp7RnZAoiKv13v
yCSPSXJ40cBkc+Kz1LmD2C5USnxyjlxeXyCrQxgq0j9KxtUQKx/sLWHB+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUPfIlSqUoxXPNzXFnNOpeRMYO/MB8GA1UdIwQY
MBaAFPSsmdd6ehyE3Uf0O7cgUapzsarWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNzY0NDUtMTk4YS00Zjg1LWJiZjgt
NjZjY2E4MWU2YzA3LzEvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNzY0NDUtMTk4YS00Zjg1LWJiZjgtNjZjY2E4MWU2YzA3
LzEvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgznzFY0i
QGzdQLJIuVbTwT2Mt5DEyeLg3b4XT4Q3Wa0S7oaK81Qt5WV2PvxhwjQniRSzd48b
qrtI8W55uoGuoJNEIOmyujsVpCQ7eOFuVLGVnX8cfNwZl/XMMYAIRRAcyZGI7I+r
XQfZRumeBMHuic81n2mawcE81uf4KA8MZPiOkQrD5q/d54U46ORiWKNE3/gOMMzG
gNtA/gDZQgXIZaH0QJ8aaHypIhNypA7FVdunzpkcgOcoHi+XkKKIiyAnq6QarSFI
2CHEEUdho1LqDTw+LTXGuL5bQ4/xp5B3C5aNHMLbcs3//FLmuXOggLbxB+TaccKE
ln8fFFT3T6W62A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:26 2026 by rpki-client