Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier: vl1Dn8voKlwENhyPTVm+WxjBBkUUlgUJ5GW4VU9Q8DM=
Subject key identifier: D2:F2:83:9E:13:38:81:70:0B:60:AC:67:DB:A1:D6:11:BE:1C:87:53
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 019D3977E4039EAE4495AEAEF5BB5E086C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 12:00:51 +0000
Manifest this update: Sun 29 Mar 2026 12:00:51 +0000
Manifest next update: Mon 30 Mar 2026 12:00:51 +0000
Files and hashes: 1: 4seyTDBe9bL2x8Z_6sMBSrOYvgM.roa (hash: Ld+vj6OA1gKqESzL9huJc2LDFrgP5kvfK/8UeR3bm/4=)
2: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: QKDLXnnkUY8vR5NWFkDGU4UIqltAv1ns8NQ5eFo4K2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:e4:03:9e:ae:44:95:ae:ae:f5:bb:5e:08:6c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Mar 29 12:00:51 2026 GMT
Not After : Mar 30 12:00:51 2026 GMT
Subject: CN=d2f2839e133881700b60ac67dba1d611be1c8753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:b8:ab:68:d0:74:b3:0a:e8:8e:6d:85:63:
df:2a:9f:b7:ed:81:08:a4:60:e6:44:ae:86:d5:52:
49:d2:1e:eb:f4:41:59:28:41:b8:ee:19:ca:ef:37:
cc:84:34:97:c0:e9:5a:21:4b:05:ce:34:c9:3d:dd:
35:20:61:7c:5a:bc:e2:d3:df:33:30:25:de:3e:b9:
b9:2e:70:4c:94:fb:1d:e9:36:ae:56:ac:b6:0f:0b:
b2:b7:1e:c2:66:0e:d1:13:ab:93:13:ca:bc:c7:a1:
b4:e0:44:f7:38:3c:ed:b6:91:58:33:af:23:0c:bf:
01:44:91:18:99:3f:95:e1:0f:b2:35:51:58:38:db:
d5:d9:87:d4:f8:4d:88:b3:af:e2:3c:88:c6:0a:83:
10:25:ef:74:d7:a4:11:bc:23:2e:28:71:37:f2:7a:
14:ce:98:71:c5:4d:96:d0:5f:9d:ae:fd:8c:31:bc:
42:ed:1d:9a:94:e4:cc:04:d9:84:4d:21:63:56:b5:
ac:d1:b4:41:dd:f7:cd:bb:19:e2:b1:4c:61:cf:71:
29:68:c8:56:81:07:38:b0:b0:dd:ef:87:db:44:38:
f2:af:2c:9d:87:8b:b9:9a:de:60:9b:a6:05:03:e4:
d1:5a:d0:98:60:8a:f5:24:0d:af:e4:12:03:33:96:
99:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F2:83:9E:13:38:81:70:0B:60:AC:67:DB:A1:D6:11:BE:1C:87:53
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4e:71:67:ab:ce:a9:02:e1:3a:fd:3b:c2:1c:45:86:50:9b:
75:72:a9:13:96:96:75:be:80:ae:44:b9:f8:56:99:a2:6f:28:
47:27:4b:84:5d:66:97:da:ee:f8:cf:ae:9a:99:a6:bb:75:66:
37:1b:93:06:99:dc:49:bf:06:28:41:c1:c8:45:ec:50:ac:92:
92:d3:b5:9d:8d:14:6f:c6:92:a4:28:4e:74:6f:e6:bf:6c:1d:
c4:85:c9:75:68:07:d3:b8:01:68:47:d1:4e:f3:7d:94:7b:8f:
78:6e:ff:4b:4b:9b:a8:17:cb:2b:b5:b7:d8:7d:39:c0:25:78:
55:20:5d:12:bd:b8:9b:29:c9:65:f7:25:55:21:5a:d2:17:24:
5b:92:81:03:ec:1d:bd:b0:00:c2:15:7b:11:d8:5d:86:0b:63:
39:7c:6a:76:87:fb:6c:ce:88:98:bf:16:2f:da:d2:35:b5:17:
3c:5e:6c:64:9e:56:b4:c0:56:b0:af:14:87:26:18:03:46:6b:
64:70:a5:f0:4c:a3:4c:9c:b7:f0:22:1b:e3:cc:cd:55:3c:06:
cd:e5:f7:e9:e5:b9:25:38:79:46:ad:6a:4f:c1:a4:2a:21:c5:
db:32:8b:81:0b:ba:11:b5:97:a2:5e:f5:50:92:a9:5d:1b:2d:
99:8c:bf:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d+QDnq5Ela6u9bteCGwnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MGI2YjQyNTYwMGEyNWE2ZGMxMzJkZTUxNDc5N2UyYWE0
YjAyNDcwHhcNMjYwMzI5MTIwMDUxWhcNMjYwMzMwMTIwMDUxWjAzMTEwLwYDVQQD
EyhkMmYyODM5ZTEzMzg4MTcwMGI2MGFjNjdkYmExZDYxMWJlMWM4NzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyka4q2jQdLMK6I5thWPfKp+37YEI
pGDmRK6G1VJJ0h7r9EFZKEG47hnK7zfMhDSXwOlaIUsFzjTJPd01IGF8Wrzi098z
MCXePrm5LnBMlPsd6TauVqy2Dwuytx7CZg7RE6uTE8q8x6G04ET3ODzttpFYM68j
DL8BRJEYmT+V4Q+yNVFYONvV2YfU+E2Is6/iPIjGCoMQJe9016QRvCMuKHE38noU
zphxxU2W0F+drv2MMbxC7R2alOTMBNmETSFjVrWs0bRB3ffNuxnisUxhz3EpaMhW
gQc4sLDd74fbRDjyryydh4u5mt5gm6YFA+TRWtCYYIr1JA2v5BIDM5aZ8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLyg54TOIFwC2CsZ9uh1hG+HIdTMB8GA1UdIwQY
MBaAFPULa0JWAKJabcEy3lFHl+KqSwJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOWZjYzktNjdiMi00NGQ2LWI1NjYt
MTAwZjg0ZmU5NTBjLzEvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hOWZjYzktNjdiMi00NGQ2LWI1NjYtMTAwZjg0ZmU5NTBj
LzEvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb05xZ6vO
qQLhOv07whxFhlCbdXKpE5aWdb6ArkS5+FaZom8oRydLhF1ml9ru+M+umpmmu3Vm
NxuTBpncSb8GKEHByEXsUKySktO1nY0Ub8aSpChOdG/mv2wdxIXJdWgH07gBaEfR
TvN9lHuPeG7/S0ubqBfLK7W32H05wCV4VSBdEr24mynJZfclVSFa0hckW5KBA+wd
vbAAwhV7EdhdhgtjOXxqdof7bM6ImL8WL9rSNbUXPF5sZJ5WtMBWsK8UhyYYA0Zr
ZHCl8EyjTJy38CIb48zNVTwGzeX36eW5JTh5Rq1qT8GkKiHF2zKLgQu6EbWXol71
UJKpXRstmYy/2w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:59 2026 by rpki-client