Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier: SRUizWanDiSY+4xxDoDW0eUVu2GhKg7U3Wtg4gmY2Bw=
Subject key identifier: B9:59:3F:E2:A5:AC:74:D7:1E:35:E3:07:C6:D6:14:A0:A8:15:C4:82
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 019D3AC109617DA09094FB9FE2949F0DC1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number: 0DC3
Signing time: Sun 29 Mar 2026 18:00:22 +0000
Manifest this update: Sun 29 Mar 2026 18:00:22 +0000
Manifest next update: Mon 30 Mar 2026 18:00:22 +0000
Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: QhNfJmV2e2EK2qDFPbVx1APAZ6vUBLJAcc7sadvXuDs=)
2: yCy_86dbJqoexnTrD2dlicXc2yE.roa (hash: JBNXmhezJRCIp5u3OP1UX59OO3DddhKcgHEEF7XBd38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:09:61:7d:a0:90:94:fb:9f:e2:94:9f:0d:c1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: Mar 29 18:00:22 2026 GMT
Not After : Mar 30 18:00:22 2026 GMT
Subject: CN=b9593fe2a5ac74d71e35e307c6d614a0a815c482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5f:b4:e5:3f:64:5c:dd:2d:fc:cd:e1:b3:6e:
4e:fb:5e:0c:63:5a:c5:4c:37:3b:5b:49:bd:ea:86:
90:f4:3d:66:38:32:1d:d4:38:ab:4b:af:07:9d:bc:
28:25:f4:0b:1c:7d:0c:39:ac:49:bf:db:01:d0:ba:
4d:aa:90:4b:63:5b:c2:c2:14:7d:75:f5:f8:f6:f5:
ab:d0:b2:e9:94:f0:bc:76:04:2f:8e:a0:79:fe:45:
6e:61:0e:6c:28:2d:a9:21:83:95:75:09:ff:79:f5:
d9:de:a7:27:6e:ac:3f:7d:ec:fd:3b:3b:99:e2:20:
62:6d:ec:b6:ae:ab:58:e6:fb:4a:b0:63:93:57:69:
6e:51:47:7e:46:86:02:3e:12:98:48:50:56:85:e9:
66:0a:22:f3:18:85:ba:57:cb:8b:4a:6f:05:7d:c0:
81:b8:8a:da:d7:69:1a:25:54:0b:52:87:e8:61:b1:
c8:ca:5c:fe:c3:9b:a4:82:1d:45:58:13:65:16:17:
b3:69:ac:df:31:3c:1e:1a:2a:bb:82:dd:ca:55:0c:
9b:df:e2:7b:a5:6a:8e:ce:53:9c:27:31:9f:ca:26:
e7:e1:25:9f:45:d4:cf:c8:60:e1:d9:ff:b1:0d:92:
05:80:a3:d2:13:40:d3:1f:5e:1d:2b:8e:2c:e0:0c:
3c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:59:3F:E2:A5:AC:74:D7:1E:35:E3:07:C6:D6:14:A0:A8:15:C4:82
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:35:92:67:90:28:3c:b0:90:6c:8b:02:e8:d0:dd:20:da:5e:
ff:0b:90:c8:2b:8e:1d:4f:92:14:92:ee:94:02:6c:df:f4:8c:
10:b1:34:ac:52:4f:e8:91:70:61:ee:f5:57:56:89:d2:ca:db:
85:97:9d:34:ce:23:d3:1a:14:a4:cd:03:9f:b0:7f:32:47:80:
ac:9a:27:cd:3b:7a:a8:27:30:d2:49:6e:53:0a:c4:ef:1c:c9:
18:1d:d8:a8:05:87:9c:f6:70:fc:b8:4e:ec:66:e4:4a:57:0b:
9d:b9:8e:b3:2b:ab:d6:54:ae:43:f3:8c:e0:8a:b0:0f:fd:b3:
63:2f:a0:7b:09:38:55:17:8e:f8:44:a4:61:f4:18:6f:db:5d:
f1:48:4f:18:64:14:c1:c8:4f:9c:e1:6d:ab:80:13:0c:82:a1:
f2:90:f4:16:a4:36:f8:21:02:f3:db:43:fe:c3:12:15:5b:77:
8f:e6:4e:60:fb:db:46:1b:69:77:78:ae:7e:b8:08:01:b0:b7:
01:06:9c:8a:42:37:56:bf:3e:36:94:1f:2e:ac:a0:7d:75:bb:
4a:5b:42:03:bd:46:7b:fe:f8:16:9d:0c:fb:0b:da:2f:36:a3:
3c:f1:30:75:76:69:25:c3:0f:a5:a4:9f:76:83:0f:67:c9:1f:
00:3a:4d:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06wQlhfaCQlPuf4pSfDcGtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODk3ZmRiZGM3ZDI1MDhkZmNkMTRjZmY2MDBhZDQzYjky
NzkyNGIwHhcNMjYwMzI5MTgwMDIyWhcNMjYwMzMwMTgwMDIyWjAzMTEwLwYDVQQD
EyhiOTU5M2ZlMmE1YWM3NGQ3MWUzNWUzMDdjNmQ2MTRhMGE4MTVjNDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21+05T9kXN0t/M3hs25O+14MY1rF
TDc7W0m96oaQ9D1mODId1DirS68HnbwoJfQLHH0MOaxJv9sB0LpNqpBLY1vCwhR9
dfX49vWr0LLplPC8dgQvjqB5/kVuYQ5sKC2pIYOVdQn/efXZ3qcnbqw/fez9OzuZ
4iBibey2rqtY5vtKsGOTV2luUUd+RoYCPhKYSFBWhelmCiLzGIW6V8uLSm8FfcCB
uIra12kaJVQLUofoYbHIylz+w5ukgh1FWBNlFhezaazfMTweGiq7gt3KVQyb3+J7
pWqOzlOcJzGfyibn4SWfRdTPyGDh2f+xDZIFgKPSE0DTH14dK44s4Aw8EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlZP+KlrHTXHjXjB8bWFKCoFcSCMB8GA1UdIwQY
MBaAFPSJf9vcfSUI380Uz/YArUO5J5JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEt
OTRjNmY3NDRkZTQ2LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEtOTRjNmY3NDRkZTQ2
LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDWSZ5Ao
PLCQbIsC6NDdINpe/wuQyCuOHU+SFJLulAJs3/SMELE0rFJP6JFwYe71V1aJ0srb
hZedNM4j0xoUpM0Dn7B/MkeArJonzTt6qCcw0kluUwrE7xzJGB3YqAWHnPZw/LhO
7GbkSlcLnbmOsyur1lSuQ/OM4IqwD/2zYy+gewk4VReO+ESkYfQYb9td8UhPGGQU
wchPnOFtq4ATDIKh8pD0FqQ2+CEC89tD/sMSFVt3j+ZOYPvbRhtpd3iufrgIAbC3
AQacikI3Vr8+NpQfLqygfXW7SltCA71Ge/74Fp0M+wvaLzajPPEwdXZpJcMPpaSf
doMPZ8kfADpNYg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:20:52 2026 by rpki-client