Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier: ylbZXFwgMDzQmukFB+FxtjxEiO3wNDMDc4yswVw3RAU=
Subject key identifier: AD:8D:77:69:C0:85:3C:3E:43:8A:81:79:F6:BA:B1:F0:13:D8:9E:77
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer: /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial: 019D37C0DCC643DD4479E4148CB07B44873F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number: 0C70
Signing time: Sun 29 Mar 2026 04:01:19 +0000
Manifest this update: Sun 29 Mar 2026 04:01:19 +0000
Manifest next update: Mon 30 Mar 2026 04:01:19 +0000
Files and hashes: 1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: 795899DZI1pjwMZC0SbJDe7SXiee0Gxp+BQDMQeiaF4=)
2: sIunFd-UhDIY2he6578HnH9KYM4.roa (hash: cM+uL/KniFpxQyhA1SMW/C3f3nO1DxP+MeewVaQ/1Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:dc:c6:43:dd:44:79:e4:14:8c:b0:7b:44:87:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Validity
Not Before: Mar 29 04:01:19 2026 GMT
Not After : Mar 30 04:01:19 2026 GMT
Subject: CN=ad8d7769c0853c3e438a8179f6bab1f013d89e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b5:4b:e5:60:5e:54:e5:8d:ef:7f:63:d1:79:
39:e6:4a:db:9d:05:0a:60:2a:85:51:93:bc:57:5c:
e4:d4:7b:aa:fa:16:8f:a1:87:60:78:26:fd:c5:ee:
93:d9:a0:a6:7c:38:4f:05:62:81:1f:26:ef:8a:79:
b9:65:58:7c:00:5c:94:1c:5c:4a:29:fe:93:60:fa:
97:a3:bc:f5:b3:f5:3d:4b:f4:4e:31:e9:ba:2c:ac:
2f:cf:a9:78:c0:16:10:64:0f:43:5c:93:2b:f9:86:
91:41:dc:20:77:b8:25:79:f2:d4:1c:c5:2c:82:8d:
25:15:36:dd:94:bc:5c:0d:61:92:11:06:5d:0b:2e:
dc:65:6a:06:d4:ff:2a:6f:7f:ed:c6:5f:b4:62:53:
eb:8f:23:28:4f:95:91:56:43:25:a8:0f:c9:47:fe:
64:9f:25:f3:ec:43:e0:f0:77:60:49:e2:33:42:6e:
c3:df:58:7c:3a:0c:34:01:9d:77:f9:90:b4:e9:d8:
60:31:6c:4e:35:33:e5:95:35:79:03:75:10:31:7c:
d1:92:86:7a:8a:1e:0e:c9:2b:aa:58:b1:dc:2a:a9:
0d:6a:33:6f:f0:e9:b6:e3:f3:fe:65:6b:2d:31:98:
73:39:95:63:40:b9:81:1c:5d:62:f7:7e:8f:a5:43:
10:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8D:77:69:C0:85:3C:3E:43:8A:81:79:F6:BA:B1:F0:13:D8:9E:77
X509v3 Authority Key Identifier:
keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9d:04:34:97:b6:36:41:85:bb:9e:d6:75:0d:53:15:ec:c0:
56:ce:1b:b4:c4:7f:d4:82:3c:93:1e:0e:48:13:22:78:37:e2:
1a:7c:9f:f9:cd:cc:51:1e:7c:96:a6:e6:3e:15:1e:e7:10:2b:
4f:80:92:84:7c:b9:35:a1:64:17:af:f0:a3:07:e5:35:f4:0a:
9c:9d:08:fb:0d:23:45:a9:4b:d5:d1:09:64:44:42:94:40:4c:
73:8c:4b:e2:9c:49:8b:eb:46:b7:6f:d1:40:69:ca:1a:c4:d7:
bc:08:14:5b:b1:7f:6a:c9:d1:66:f5:cf:1d:c9:b5:fa:5b:c1:
c6:cf:8d:a5:b9:a6:22:42:91:fc:73:9a:6a:46:94:6a:4e:b4:
42:05:0d:d4:29:85:ab:d4:88:34:13:1f:a5:62:2a:00:85:05:
8f:d0:65:55:ad:0e:a6:5f:e6:73:e0:df:95:7c:bb:5c:6d:56:
e0:34:07:9c:7d:54:3c:45:b3:37:7e:84:c6:d6:81:7b:b0:a2:
dd:4c:0f:59:9c:29:4b:87:1d:91:84:69:db:f8:57:dd:84:6a:
35:15:1f:fc:26:cf:33:cf:c1:7a:b7:b5:ac:06:c5:4b:b6:e2:
c7:92:80:d3:1c:13:ee:48:6c:43:10:f8:21:48:a0:80:59:65:
aa:28:12:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wNzGQ91EeeQUjLB7RIc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NTdjMDIwY2RjMjJiNjhkYTI2YTQ2OWY2ZmZhNmI0NDgz
NzBkMWQwHhcNMjYwMzI5MDQwMTE5WhcNMjYwMzMwMDQwMTE5WjAzMTEwLwYDVQQD
EyhhZDhkNzc2OWMwODUzYzNlNDM4YTgxNzlmNmJhYjFmMDEzZDg5ZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bVL5WBeVOWN739j0Xk55krbnQUK
YCqFUZO8V1zk1Huq+haPoYdgeCb9xe6T2aCmfDhPBWKBHybvinm5ZVh8AFyUHFxK
Kf6TYPqXo7z1s/U9S/ROMem6LKwvz6l4wBYQZA9DXJMr+YaRQdwgd7glefLUHMUs
go0lFTbdlLxcDWGSEQZdCy7cZWoG1P8qb3/txl+0YlPrjyMoT5WRVkMlqA/JR/5k
nyXz7EPg8HdgSeIzQm7D31h8Ogw0AZ13+ZC06dhgMWxONTPllTV5A3UQMXzRkoZ6
ih4OySuqWLHcKqkNajNv8Om24/P+ZWstMZhzOZVjQLmBHF1i936PpUMQBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2Nd2nAhTw+Q4qBefa6sfAT2J53MB8GA1UdIwQY
MBaAFPRXwCDNwito2iakafb/prRINw0dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAt
N2JhZmQ0M2U3ODYyLzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAtN2JhZmQ0M2U3ODYy
LzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJ0ENJe2
NkGFu57WdQ1TFezAVs4btMR/1II8kx4OSBMieDfiGnyf+c3MUR58lqbmPhUe5xAr
T4CShHy5NaFkF6/wowflNfQKnJ0I+w0jRalL1dEJZERClEBMc4xL4pxJi+tGt2/R
QGnKGsTXvAgUW7F/asnRZvXPHcm1+lvBxs+NpbmmIkKR/HOaakaUak60QgUN1CmF
q9SINBMfpWIqAIUFj9BlVa0Opl/mc+DflXy7XG1W4DQHnH1UPEWzN36ExtaBe7Ci
3UwPWZwpS4cdkYRp2/hX3YRqNRUf/CbPM8/Bere1rAbFS7bix5KA0xwT7khsQxD4
IUiggFllqigSMQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:39 2026 by rpki-client