Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
File: 9H1LS48bGIg-rDtJnA8EKsomsKk.mft (raw, json)
Hash identifier: o1a7bFwvUyjq9QD3rbprs+20iGuZz516L7YNzLMkMa0=
Subject key identifier: A2:6F:BC:66:95:75:A2:9B:4D:14:A7:77:2F:61:08:41:56:2F:7E:52
Authority key identifier: F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
Certificate issuer: /CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Certificate serial: 019D3A1C6BE3B2BE6FC7B8DB3EF79E892AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
Manifest number: 0BC2
Signing time: Sun 29 Mar 2026 15:00:34 +0000
Manifest this update: Sun 29 Mar 2026 15:00:34 +0000
Manifest next update: Mon 30 Mar 2026 15:00:34 +0000
Files and hashes: 1: 9H1LS48bGIg-rDtJnA8EKsomsKk.crl (hash: zbFCDh1ebqVfsOpfF1omJ43k+8VT80WrFl65oh9Wp88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:6b:e3:b2:be:6f:c7:b8:db:3e:f7:9e:89:2a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Validity
Not Before: Mar 29 15:00:34 2026 GMT
Not After : Mar 30 15:00:34 2026 GMT
Subject: CN=a26fbc669575a29b4d14a7772f610841562f7e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:52:8a:64:28:87:8f:e4:c4:43:d1:f2:00:
53:fb:26:77:7a:55:f8:c6:56:b4:00:c9:e0:1e:61:
39:9f:00:6c:15:21:e3:a4:01:ce:e3:44:30:e1:81:
b2:c8:b6:fa:0d:49:96:bd:c4:7b:74:f8:9f:08:46:
f6:1c:35:ac:32:74:21:fc:02:7c:5e:a9:45:ea:d8:
9a:d8:4b:16:2b:03:a1:bd:33:dc:22:be:4a:45:73:
11:1c:26:61:67:97:78:46:fb:83:8f:aa:eb:17:fe:
ec:f1:8a:8b:8c:85:10:cf:8b:b0:53:22:3a:cf:c2:
b6:89:b4:08:af:7c:e6:64:a7:6d:83:2a:ec:88:f8:
a9:f2:cb:3f:ee:7b:f2:15:85:ed:5d:a1:62:95:73:
e7:d2:09:4b:98:f5:3b:b3:4f:34:a9:9a:d7:54:4e:
03:ef:14:de:fe:b6:ed:f7:82:b6:5d:6c:e3:e6:50:
da:61:f8:14:18:56:5f:ea:1d:8f:3e:7a:ec:75:2e:
9b:3c:4c:11:57:70:14:27:5a:40:0a:21:59:bd:7f:
09:56:00:e4:7d:48:c2:a9:2b:e3:a8:5b:d1:3b:7c:
11:c0:b9:9b:b4:11:ba:7b:6f:40:17:b2:b9:b0:25:
0c:6c:64:d6:65:5d:4f:cc:f1:4f:29:66:1a:e0:74:
90:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6F:BC:66:95:75:A2:9B:4D:14:A7:77:2F:61:08:41:56:2F:7E:52
X509v3 Authority Key Identifier:
keyid:F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:98:b9:1a:c0:8a:9a:43:12:6a:4e:ac:bb:1e:1c:00:94:68:
6c:ef:92:fe:3b:31:b0:d9:1b:24:73:a5:20:be:01:36:38:32:
0c:03:91:4d:7d:88:08:d1:94:54:90:bd:cf:34:3c:bf:d5:f9:
1d:5f:50:61:c0:3f:98:64:a7:f4:b8:ed:79:0c:02:38:09:03:
46:aa:6f:97:00:cb:4b:eb:ca:a8:bd:42:22:52:9a:e3:c8:44:
57:bb:37:38:b1:0d:95:68:8c:d6:0f:32:be:db:72:83:4f:6a:
2e:c0:3c:fe:a8:2a:6d:8c:d1:ff:29:0b:3c:ac:02:78:9b:30:
69:61:3a:b9:98:6d:a1:9b:bc:ac:d0:a8:42:f0:11:9d:12:25:
17:0b:be:96:68:58:71:46:73:25:60:f6:5d:41:74:f7:52:5f:
29:da:8e:ef:17:4b:e3:ea:67:fd:fc:8e:f7:23:e9:f2:75:ca:
a4:96:ee:fe:93:a3:95:82:29:97:41:ba:70:62:24:c4:fd:e0:
ff:67:ab:4f:22:87:5f:41:87:ce:bf:4d:27:01:0c:56:23:fa:
d6:bc:8b:10:7d:9c:2a:fb:d0:74:e8:61:5e:24:a0:f9:96:46:
ea:9a:5d:95:f9:1d:35:12:82:03:aa:6b:a7:ea:b2:b1:54:f0:
22:29:7f:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HGvjsr5vx7jbPveeiSqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0N2Q0YjRiOGYxYjE4ODgzZWFjM2I0OTljMGYwNDJhY2Ey
NmIwYTkwHhcNMjYwMzI5MTUwMDM0WhcNMjYwMzMwMTUwMDM0WjAzMTEwLwYDVQQD
EyhhMjZmYmM2Njk1NzVhMjliNGQxNGE3NzcyZjYxMDg0MTU2MmY3ZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EJSimQoh4/kxEPR8gBT+yZ3elX4
xla0AMngHmE5nwBsFSHjpAHO40Qw4YGyyLb6DUmWvcR7dPifCEb2HDWsMnQh/AJ8
XqlF6tia2EsWKwOhvTPcIr5KRXMRHCZhZ5d4RvuDj6rrF/7s8YqLjIUQz4uwUyI6
z8K2ibQIr3zmZKdtgyrsiPip8ss/7nvyFYXtXaFilXPn0glLmPU7s080qZrXVE4D
7xTe/rbt94K2XWzj5lDaYfgUGFZf6h2PPnrsdS6bPEwRV3AUJ1pACiFZvX8JVgDk
fUjCqSvjqFvRO3wRwLmbtBG6e29AF7K5sCUMbGTWZV1PzPFPKWYa4HSQxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJvvGaVdaKbTRSndy9hCEFWL35SMB8GA1UdIwQY
MBaAFPR9S0uPGxiIPqw7SZwPBCrKJrCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzZkMWYtZWVkZi00YTRkLTg5NWIt
MjcxNjY3NTNkZjA4LzEvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNzZkMWYtZWVkZi00YTRkLTg5NWItMjcxNjY3NTNkZjA4
LzEvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZi5GsCK
mkMSak6sux4cAJRobO+S/jsxsNkbJHOlIL4BNjgyDAORTX2ICNGUVJC9zzQ8v9X5
HV9QYcA/mGSn9LjteQwCOAkDRqpvlwDLS+vKqL1CIlKa48hEV7s3OLENlWiM1g8y
vttyg09qLsA8/qgqbYzR/ykLPKwCeJswaWE6uZhtoZu8rNCoQvARnRIlFwu+lmhY
cUZzJWD2XUF091JfKdqO7xdL4+pn/fyO9yPp8nXKpJbu/pOjlYIpl0G6cGIkxP3g
/2erTyKHX0GHzr9NJwEMViP61ryLEH2cKvvQdOhhXiSg+ZZG6ppdlfkdNRKCA6pr
p+qysVTwIil/Sg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:16:08 2026 by rpki-client