Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
File: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft (raw, json)
Hash identifier: 5zNLEJOqaMtr94JqCIjCak542t4x/TxlpWDWqCn6ma4=
Subject key identifier: 9B:DF:DE:B2:F2:EF:67:58:5C:7A:BB:79:7C:7E:93:81:7D:03:54:67
Authority key identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
Certificate issuer: /CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Certificate serial: 019D3AC12717C3B2815CA9C251BB031C72F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
Manifest number: 0CDB
Signing time: Sun 29 Mar 2026 18:00:30 +0000
Manifest this update: Sun 29 Mar 2026 18:00:30 +0000
Manifest next update: Mon 30 Mar 2026 18:00:30 +0000
Files and hashes: 1: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl (hash: ovQrWqRwyX9BEtOhx18rlGynN5EezZi20n1Ydr0FRTc=)
2: uvizS4ukuC_gEdKACqyA3QErVlg.roa (hash: 7ZQzxgJlvYq7/1nZi/aQGYcGnnJ6bHEVEWXvW9zSYP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:27:17:c3:b2:81:5c:a9:c2:51:bb:03:1c:72:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Validity
Not Before: Mar 29 18:00:30 2026 GMT
Not After : Mar 30 18:00:30 2026 GMT
Subject: CN=9bdfdeb2f2ef67585c7abb797c7e93817d035467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:3a:db:2a:c7:24:76:79:f2:07:dd:43:e8:
d5:91:52:ed:bf:45:84:8b:86:0f:f1:57:35:f2:8d:
83:aa:44:05:5b:2d:50:19:54:ac:fe:ac:aa:fc:8c:
86:d1:fb:d6:de:9a:98:8a:22:06:32:bb:7a:1a:b7:
3d:b4:25:92:8b:3a:8e:87:a0:57:05:c5:d1:77:3c:
db:4b:67:b1:71:b8:c0:39:60:99:35:5d:5d:fa:ef:
fa:21:2f:2d:88:27:b3:99:26:9e:ff:1c:dd:f2:0b:
50:9f:de:e6:3e:68:47:31:bd:18:0c:7c:22:e1:60:
16:03:c7:fb:ed:82:30:d6:f9:e3:a4:92:65:74:7f:
f7:e9:2c:c1:d8:3d:3f:95:8a:1b:96:62:5e:e1:ff:
0b:12:93:69:d2:47:f7:2f:2c:11:29:59:ca:c2:69:
3a:ad:01:3a:f6:5d:5e:c2:48:74:f7:21:56:d7:7f:
39:73:48:e0:df:c7:97:92:a7:0a:e0:4d:f4:3a:a4:
9c:78:9d:07:48:37:ce:56:c1:96:26:7f:74:20:ef:
3f:31:f0:90:3a:c2:d9:98:06:c3:64:ab:89:17:36:
5e:01:19:ed:9d:5b:c0:ad:b3:04:22:e8:3b:5b:56:
e1:f6:4e:1f:5e:ed:60:d1:f6:43:ae:3f:d7:fb:d7:
29:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DF:DE:B2:F2:EF:67:58:5C:7A:BB:79:7C:7E:93:81:7D:03:54:67
X509v3 Authority Key Identifier:
keyid:F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3a:8e:25:f6:7f:98:b6:b9:19:5c:00:d1:4b:f6:c0:bc:a5:
23:78:ef:4c:a6:08:7e:83:2f:e5:a9:d4:24:df:56:e7:a2:34:
24:41:52:b0:ae:e5:90:04:ed:3d:11:32:26:4a:b9:f4:e8:8e:
17:66:7f:ae:90:13:02:d0:82:79:d7:e9:e6:c5:14:53:dc:c8:
bd:32:f2:e4:1e:76:7b:b8:a8:82:bf:8d:95:71:2a:f0:fe:d0:
6b:04:76:c4:1d:c5:fc:60:ef:73:c3:84:33:44:8f:06:90:bf:
56:d7:a7:13:91:8b:b2:88:9b:eb:27:cb:72:fc:80:ec:8f:1f:
cd:c6:15:5a:d7:db:94:ad:da:73:c9:fd:86:0a:61:84:32:18:
ad:1c:f1:94:47:82:8b:8c:3e:79:40:30:ba:22:da:e7:7f:6d:
69:f1:b5:6d:10:0b:89:43:fd:54:71:74:f3:fe:bf:2c:f9:95:
3d:e4:f6:24:bc:7d:0b:9c:fb:61:95:90:17:ac:28:b6:24:03:
8c:42:e7:ab:13:72:38:8a:61:27:dd:a0:20:fe:b5:31:35:75:
44:76:45:63:c8:3e:d2:a4:6f:18:d8:23:5f:96:5c:d0:46:c3:
0e:cb:5c:fc:d0:36:f5:a1:e9:03:03:9e:4f:46:07:f0:84:8d:
77:e1:58:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06wScXw7KBXKnCUbsDHHLxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZmFjMmMyMWIyZGJjODEyZGQyNWQxY2I3OWMzZmJhNTQx
OWU1OTMwHhcNMjYwMzI5MTgwMDMwWhcNMjYwMzMwMTgwMDMwWjAzMTEwLwYDVQQD
Eyg5YmRmZGViMmYyZWY2NzU4NWM3YWJiNzk3YzdlOTM4MTdkMDM1NDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymI62yrHJHZ58gfdQ+jVkVLtv0WE
i4YP8Vc18o2DqkQFWy1QGVSs/qyq/IyG0fvW3pqYiiIGMrt6Grc9tCWSizqOh6BX
BcXRdzzbS2excbjAOWCZNV1d+u/6IS8tiCezmSae/xzd8gtQn97mPmhHMb0YDHwi
4WAWA8f77YIw1vnjpJJldH/36SzB2D0/lYoblmJe4f8LEpNp0kf3LywRKVnKwmk6
rQE69l1ewkh09yFW1385c0jg38eXkqcK4E30OqSceJ0HSDfOVsGWJn90IO8/MfCQ
OsLZmAbDZKuJFzZeARntnVvArbMEIug7W1bh9k4fXu1g0fZDrj/X+9cpFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvf3rLy72dYXHq7eXx+k4F9A1RnMB8GA1UdIwQY
MBaAFPf6wsIbLbyBLdJdHLecP7pUGeWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOV9yQ3doc3R2SUV0MGwwY3Q1d191bFFaNVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82YWY2YjItNTc4Yy00YTI1LWEyY2Mt
ZmZhZDRmYjBhNzEzLzEvOV9yQ3doc3R2SUV0MGwwY3Q1d191bFFaNVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS82YWY2YjItNTc4Yy00YTI1LWEyY2MtZmZhZDRmYjBhNzEz
LzEvOV9yQ3doc3R2SUV0MGwwY3Q1d191bFFaNVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzqOJfZ/
mLa5GVwA0Uv2wLylI3jvTKYIfoMv5anUJN9W56I0JEFSsK7lkATtPREyJkq59OiO
F2Z/rpATAtCCedfp5sUUU9zIvTLy5B52e7iogr+NlXEq8P7QawR2xB3F/GDvc8OE
M0SPBpC/VtenE5GLsoib6yfLcvyA7I8fzcYVWtfblK3ac8n9hgphhDIYrRzxlEeC
i4w+eUAwuiLa539tafG1bRALiUP9VHF08/6/LPmVPeT2JLx9C5z7YZWQF6wotiQD
jELnqxNyOIphJ92gIP61MTV1RHZFY8g+0qRvGNgjX5Zc0EbDDstc/NA29aHpAwOe
T0YH8ISNd+FYzw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:11 2026 by rpki-client