Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/80b2eb-130b-43fb-8d01-db14ce84c0cd/1/N9hCIZddCjB-NmvwADTVClKoxF8.mft
File: N9hCIZddCjB-NmvwADTVClKoxF8.mft (raw, json)
Hash identifier: 0AYLT/PdGHSw5ATPiI8yubdAeIA8EXSbvy/ZjqGHyxY=
Subject key identifier: FB:38:E3:4F:FD:A2:F7:82:C9:E1:1B:AD:9B:3A:03:38:23:FC:98:B3
Authority key identifier: 37:D8:42:21:97:5D:0A:30:7E:36:6B:F0:00:34:D5:0A:52:A8:C4:5F
Certificate issuer: /CN=37d84221975d0a307e366bf00034d50a52a8c45f
Certificate serial: 01A15176C0DF8087E27FF9332EBB886C34DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9hCIZddCjB-NmvwADTVClKoxF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/80b2eb-130b-43fb-8d01-db14ce84c0cd/1/N9hCIZddCjB-NmvwADTVClKoxF8.mft
Manifest number: A9
Signing time: Mon 19 Oct 2026 00:01:39 +0000
Manifest this update: Mon 19 Oct 2026 00:01:39 +0000
Manifest next update: Tue 20 Oct 2026 00:01:39 +0000
Files and hashes: 1: N9hCIZddCjB-NmvwADTVClKoxF8.crl (hash: 0aKVpGw+dLVQeXJoNVngf5EqVatXNX+bFyyMP4iQwxo=)
2: yydRHEjd2WtC18vukTFppaTTLNU.roa (hash: 1vERawjhslPRoZFsXdKGU2ou3zXbN1/dEo3YYFo9NAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/80b2eb-130b-43fb-8d01-db14ce84c0cd/1/N9hCIZddCjB-NmvwADTVClKoxF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/80b2eb-130b-43fb-8d01-db14ce84c0cd/1/N9hCIZddCjB-NmvwADTVClKoxF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9hCIZddCjB-NmvwADTVClKoxF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:76:c0:df:80:87:e2:7f:f9:33:2e:bb:88:6c:34:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d84221975d0a307e366bf00034d50a52a8c45f
Validity
Not Before: Oct 19 00:01:39 2026 GMT
Not After : Oct 20 00:01:39 2026 GMT
Subject: CN=fb38e34ffda2f782c9e11bad9b3a033823fc98b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:b9:c4:eb:3d:ae:a5:b4:d7:5e:47:c5:12:
da:81:c9:2d:eb:a7:20:3a:d3:05:64:6c:b6:ff:c6:
c6:bb:59:87:b0:7d:0c:cc:e6:a1:18:88:82:4f:d2:
01:29:2a:88:70:52:49:f6:e1:1d:f5:e1:b5:83:3d:
18:7f:da:4b:7c:21:2d:02:60:43:f6:97:7e:11:95:
97:f7:54:37:89:d5:05:75:0d:14:49:e7:4b:16:ab:
f8:62:b8:72:a9:da:49:d8:23:72:30:77:32:ff:cc:
53:72:8b:81:14:58:26:fc:f8:7b:8e:16:03:68:1b:
a2:07:f5:52:f2:2a:e7:0b:d3:c1:7e:a9:6d:57:45:
d2:87:4b:a3:ad:b8:9f:7e:a3:c3:cf:13:f0:8f:50:
f4:ce:2d:f3:aa:30:b4:fe:14:7c:6f:79:34:c0:fa:
91:90:80:37:3f:0a:51:fd:01:fe:39:be:29:06:c2:
7f:29:1e:23:88:41:f7:3e:39:ba:7e:22:73:30:eb:
be:0a:5d:db:65:b0:56:1b:a2:0f:61:4a:45:6b:e6:
e7:4a:44:a6:34:9d:e4:b0:bc:5f:1a:78:54:58:d8:
d0:50:07:97:66:ac:0d:4b:35:26:79:2a:66:4f:23:
57:93:65:50:f6:ca:0b:1e:dc:3a:fc:df:c1:ff:58:
4a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:38:E3:4F:FD:A2:F7:82:C9:E1:1B:AD:9B:3A:03:38:23:FC:98:B3
X509v3 Authority Key Identifier:
keyid:37:D8:42:21:97:5D:0A:30:7E:36:6B:F0:00:34:D5:0A:52:A8:C4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9hCIZddCjB-NmvwADTVClKoxF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/80b2eb-130b-43fb-8d01-db14ce84c0cd/1/N9hCIZddCjB-NmvwADTVClKoxF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/80b2eb-130b-43fb-8d01-db14ce84c0cd/1/N9hCIZddCjB-NmvwADTVClKoxF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:da:0f:ba:85:a5:99:38:29:c4:b5:fa:46:42:a3:8d:95:7a:
9c:4c:ba:37:9e:87:d2:53:a4:a7:3f:23:ef:3f:a7:13:0d:3b:
92:67:76:76:03:65:b2:3a:c3:38:d3:12:f3:da:df:29:90:96:
af:e9:bd:09:6e:b2:be:c5:b1:2e:36:0a:86:44:ce:b7:55:4a:
c1:c5:30:16:ea:f2:67:42:69:80:d4:4e:21:e7:7e:13:a4:61:
2b:c0:34:39:4a:be:32:28:ef:ea:da:11:4b:3b:a6:f8:bb:ca:
a8:72:c7:20:a5:28:fc:1e:eb:ac:82:70:c0:7e:52:81:29:8c:
ff:63:63:87:d2:8f:51:f4:61:7d:7c:ab:2c:0e:2c:2d:f9:82:
cd:da:f3:26:f0:6c:88:dc:7d:18:57:8c:da:47:2d:25:80:94:
07:7c:91:85:e7:10:c6:d4:73:95:8d:99:96:77:ad:80:6f:96:
1b:59:e8:d1:76:1f:0b:d4:e7:bf:a2:4a:3b:34:97:4c:3e:41:
63:61:7b:60:4d:d7:a2:ad:15:9c:0e:1c:2c:3d:b1:37:69:e2:
94:c2:f9:ec:75:5d:36:eb:f3:eb:6c:d0:17:be:5c:7f:28:45:
14:31:ad:93:6b:87:b0:6b:82:16:6a:21:55:c6:1f:46:4e:e1:
06:80:4a:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFRdsDfgIfif/kzLruIbDTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZDg0MjIxOTc1ZDBhMzA3ZTM2NmJmMDAwMzRkNTBhNTJh
OGM0NWYwHhcNMjYxMDE5MDAwMTM5WhcNMjYxMDIwMDAwMTM5WjAzMTEwLwYDVQQD
EyhmYjM4ZTM0ZmZkYTJmNzgyYzllMTFiYWQ5YjNhMDMzODIzZmM5OGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQy5xOs9rqW0115HxRLagckt66cg
OtMFZGy2/8bGu1mHsH0MzOahGIiCT9IBKSqIcFJJ9uEd9eG1gz0Yf9pLfCEtAmBD
9pd+EZWX91Q3idUFdQ0USedLFqv4YrhyqdpJ2CNyMHcy/8xTcouBFFgm/Ph7jhYD
aBuiB/VS8irnC9PBfqltV0XSh0ujrbiffqPDzxPwj1D0zi3zqjC0/hR8b3k0wPqR
kIA3PwpR/QH+Ob4pBsJ/KR4jiEH3Pjm6fiJzMOu+Cl3bZbBWG6IPYUpFa+bnSkSm
NJ3ksLxfGnhUWNjQUAeXZqwNSzUmeSpmTyNXk2VQ9soLHtw6/N/B/1hKUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPs440/9oveCyeEbrZs6Azgj/JizMB8GA1UdIwQY
MBaAFDfYQiGXXQowfjZr8AA01QpSqMRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjloQ0laZGRDakItTm12d0FEVFZDbEtveEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84MGIyZWItMTMwYi00M2ZiLThkMDEt
ZGIxNGNlODRjMGNkLzEvTjloQ0laZGRDakItTm12d0FEVFZDbEtveEY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS84MGIyZWItMTMwYi00M2ZiLThkMDEtZGIxNGNlODRjMGNk
LzEvTjloQ0laZGRDakItTm12d0FEVFZDbEtveEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9oPuoWl
mTgpxLX6RkKjjZV6nEy6N56H0lOkpz8j7z+nEw07kmd2dgNlsjrDONMS89rfKZCW
r+m9CW6yvsWxLjYKhkTOt1VKwcUwFuryZ0JpgNROIed+E6RhK8A0OUq+Mijv6toR
Szum+LvKqHLHIKUo/B7rrIJwwH5SgSmM/2Njh9KPUfRhfXyrLA4sLfmCzdrzJvBs
iNx9GFeM2kctJYCUB3yRhecQxtRzlY2ZlnetgG+WG1no0XYfC9Tnv6JKOzSXTD5B
Y2F7YE3Xoq0VnA4cLD2xN2nilML57HVdNuvz62zQF75cfyhFFDGtk2uHsGuCFmoh
VcYfRk7hBoBKEA==
-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:19 2026 by rpki-client