Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File: 9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier: 4tpK33gyKewmRQdoRh7Iph2R+jxvfysoBoIsHJO1sv4=
Subject key identifier: 84:10:5B:D0:C5:AB:13:74:4B:83:22:B9:96:94:70:F8:18:93:73:EB
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 019D382DD6DCF0A9A4C90FA8CAE02DA2A623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number: 173F
Signing time: Sun 29 Mar 2026 06:00:21 +0000
Manifest this update: Sun 29 Mar 2026 06:00:21 +0000
Manifest next update: Mon 30 Mar 2026 06:00:21 +0000
Files and hashes: 1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: fsUC5uXBG+luB6UN+B5m+Z2k2TVk7gkMcK9Cb0pO+eM=)
2: ZZanlFxScyN4CQoGhBTQl2sVxVg.roa (hash: A34wmEZaQFDCuGsNd+TzvMoOwERkMP/gXQVur9pCPCA=)
3: pRFsySqGl0tFAUw52aDZNnq-uD0.roa (hash: w8jNvizOVr/p52jNZpTu/WC6lPFW3XL5WSYxYnBEKj4=)
4: xO0eawE2B1S0TKvBcaaGiQh0Ol0.roa (hash: dcuU5KhFuT+OtopOGBCq8QR05uFVdXywWZjFZcyGZgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d6:dc:f0:a9:a4:c9:0f:a8:ca:e0:2d:a2:a6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Mar 29 06:00:21 2026 GMT
Not After : Mar 30 06:00:21 2026 GMT
Subject: CN=84105bd0c5ab13744b8322b9969470f8189373eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:39:ea:b0:d4:71:1d:c7:09:68:26:2a:b0:
52:3c:54:6a:77:6b:a0:8b:78:0f:0a:e5:dc:d1:88:
e3:9f:55:b2:fb:c1:11:61:55:e5:d3:59:60:cc:42:
d9:e7:b1:2a:72:a2:f4:2b:78:7d:2e:af:a1:bc:5d:
fa:c0:bd:ca:fc:20:ca:9c:0e:c6:f4:84:9a:3a:e7:
dc:23:18:ad:84:8b:23:35:bd:a6:5d:a1:f9:ab:7c:
03:8a:15:00:c9:f1:ec:b1:9e:93:af:09:dd:83:03:
18:07:94:1d:4e:a0:e6:d4:a4:25:48:72:d1:fb:2a:
46:d8:9d:9c:c9:9e:8e:27:8c:cc:df:c2:b1:03:2c:
5b:3f:63:24:2c:ab:0b:bf:ef:b4:dd:ef:6a:dc:a9:
a9:90:ef:b3:3b:1e:e1:be:4a:70:44:07:3b:5c:85:
6d:57:4b:fe:e1:2f:1e:d5:ca:b9:5d:59:66:ee:c5:
7a:f7:90:e4:fc:a7:73:fa:4f:02:99:77:e9:1b:16:
6d:e0:bf:22:22:f4:fb:62:fc:57:d4:26:01:28:fe:
b6:24:a4:72:09:5b:36:e0:ad:18:66:1f:e3:23:f6:
c7:d2:a6:f7:18:88:68:c8:3f:33:4e:e5:4f:4e:df:
92:a4:17:82:62:a3:44:9e:d4:4c:0e:8a:a2:d3:bc:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:10:5B:D0:C5:AB:13:74:4B:83:22:B9:96:94:70:F8:18:93:73:EB
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:20:ee:e0:62:04:4b:db:e5:d3:69:f0:26:81:43:2d:ed:66:
b6:95:fe:4d:e6:bb:b6:92:db:cd:a6:04:e4:a3:89:e4:62:95:
b6:88:82:da:48:f1:33:c9:1b:eb:1b:d1:42:84:ca:df:22:69:
81:45:14:b9:bc:20:18:15:33:c8:bc:d7:1a:f5:70:89:aa:10:
eb:68:14:c1:6c:d1:6f:1e:90:1b:42:12:af:39:cf:f4:b2:49:
ec:43:b4:e4:39:ec:aa:0a:33:64:5b:2b:c2:c5:7a:5f:3d:07:
8b:62:37:fb:b7:fa:82:71:9b:50:65:ec:39:d2:d5:1c:49:b9:
d0:8b:71:7e:bf:72:3b:36:c0:2d:81:42:05:24:3f:d7:f1:8f:
3e:8e:f5:34:68:90:7b:55:f6:7e:b9:39:0f:46:82:96:66:f0:
6c:b6:3a:93:4e:2b:b4:a1:74:91:e7:6c:f0:1e:1a:fe:d5:e9:
47:a2:91:9e:dc:31:da:c5:49:cf:85:eb:43:2e:13:f4:bd:c3:
82:14:b6:53:de:79:8a:f6:42:cd:b9:cc:00:5f:49:44:ea:2f:
91:be:5a:77:34:48:0b:9d:7e:0a:cc:87:35:00:74:aa:b4:3b:
45:f4:e5:77:5f:29:03:05:e4:5e:6a:14:72:0b:c7:8a:a7:d6:
ae:23:ec:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Ldbc8KmkyQ+oyuAtoqYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NGFkNDVkMjJiNWYzY2YyZTcxY2UwYWMwMTA3NGI3Y2Qy
MWFjNTcwHhcNMjYwMzI5MDYwMDIxWhcNMjYwMzMwMDYwMDIxWjAzMTEwLwYDVQQD
Eyg4NDEwNWJkMGM1YWIxMzc0NGI4MzIyYjk5Njk0NzBmODE4OTM3M2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV456rDUcR3HCWgmKrBSPFRqd2ug
i3gPCuXc0Yjjn1Wy+8ERYVXl01lgzELZ57EqcqL0K3h9Lq+hvF36wL3K/CDKnA7G
9ISaOufcIxithIsjNb2mXaH5q3wDihUAyfHssZ6TrwndgwMYB5QdTqDm1KQlSHLR
+ypG2J2cyZ6OJ4zM38KxAyxbP2MkLKsLv++03e9q3KmpkO+zOx7hvkpwRAc7XIVt
V0v+4S8e1cq5XVlm7sV695Dk/Kdz+k8CmXfpGxZt4L8iIvT7YvxX1CYBKP62JKRy
CVs24K0YZh/jI/bH0qb3GIhoyD8zTuVPTt+SpBeCYqNEntRMDoqi07xfuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQQW9DFqxN0S4MiuZaUcPgYk3PrMB8GA1UdIwQY
MBaAFPZK1F0itfPPLnHOCsAQdLfNIaxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2Qt
Njk5YjIzNGZjNzhjLzEvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2QtNjk5YjIzNGZjNzhj
LzEvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuiDu4GIE
S9vl02nwJoFDLe1mtpX+Tea7tpLbzaYE5KOJ5GKVtoiC2kjxM8kb6xvRQoTK3yJp
gUUUubwgGBUzyLzXGvVwiaoQ62gUwWzRbx6QG0ISrznP9LJJ7EO05DnsqgozZFsr
wsV6Xz0Hi2I3+7f6gnGbUGXsOdLVHEm50Itxfr9yOzbALYFCBSQ/1/GPPo71NGiQ
e1X2frk5D0aClmbwbLY6k04rtKF0keds8B4a/tXpR6KRntwx2sVJz4XrQy4T9L3D
ghS2U955ivZCzbnMAF9JROovkb5adzRIC51+CsyHNQB0qrQ7RfTld18pAwXkXmoU
cgvHiqfWriPsQA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:31 2026 by rpki-client