Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
File: 9uGk5drZ5MwU4BaRDsS2adXjq5w.mft (raw, json)
Hash identifier: slRH4Iyj7AQz3IuwN6GJeZkYziZ/b/WVlNCX5bPD78s=
Subject key identifier: 49:FF:9E:48:74:FD:10:4A:4D:E4:EC:1F:CD:EE:FB:9F:2E:47:CF:50
Authority key identifier: F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
Certificate issuer: /CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Certificate serial: 019CA86A2F0CAD8824BBD990DA6B3273C5CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
Manifest number: 62
Signing time: Sun 01 Mar 2026 08:00:56 +0000
Manifest this update: Sun 01 Mar 2026 08:00:56 +0000
Manifest next update: Mon 02 Mar 2026 08:00:56 +0000
Files and hashes: 1: 9uGk5drZ5MwU4BaRDsS2adXjq5w.crl (hash: 5rxjr+JjQFGxsq1D5PCG8utilsJCKiMcmpQesu3SqpM=)
2: H_uYynhuG6l8wZqNzHCCCngrv6I.asa (hash: cNBW9xKMdJGhXlb3YQvmEsKCGDZEJR6jaSu58wTwgns=)
3: SRCK7Ufu64KsijFRcRFiAbmnlfM.roa (hash: r3tIqkepOEqyJpInWtiArXc2WfvA20Y21WU/4jD8OPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:2f:0c:ad:88:24:bb:d9:90:da:6b:32:73:c5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Validity
Not Before: Mar 1 08:00:56 2026 GMT
Not After : Mar 2 08:00:56 2026 GMT
Subject: CN=49ff9e4874fd104a4de4ec1fcdeefb9f2e47cf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:c3:af:3d:5f:65:54:a7:04:55:00:cd:21:
ce:11:5b:08:5c:98:2d:fa:1b:55:44:62:27:bd:02:
9e:a6:4d:e5:bf:35:af:a0:ad:23:4d:47:9f:53:78:
26:9e:e2:06:3c:5f:c7:2b:a4:fb:42:fb:f0:98:4f:
a6:b9:83:7f:9e:02:1a:b1:b4:22:db:f3:98:0e:a9:
fa:3c:75:00:a4:55:e6:58:82:b8:25:68:e2:ad:9e:
6a:0e:a5:77:5c:e9:ef:21:64:32:16:ed:09:84:f2:
e0:b2:6b:34:c0:63:60:99:e0:21:e5:de:68:02:2d:
fb:a7:22:a6:64:3a:a7:9f:55:7c:ef:ce:61:38:59:
01:8c:58:e6:17:05:88:ed:4d:35:9e:8e:08:4a:4a:
f9:1d:ce:ff:f4:56:30:92:35:42:01:1f:54:f0:e7:
83:61:0a:ab:8b:61:04:0a:60:d6:05:76:3d:c5:3b:
99:50:26:e7:08:7c:b3:70:4a:98:46:b7:6c:e3:68:
57:72:03:16:f4:cb:74:7c:df:d0:cf:89:41:06:63:
32:10:b3:3b:98:ee:f9:73:01:45:53:c3:d1:0f:a2:
ae:88:35:85:ac:11:67:9a:cc:7d:46:05:f7:57:24:
c7:b7:a5:81:c3:89:0b:85:a8:03:89:12:30:17:dc:
03:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FF:9E:48:74:FD:10:4A:4D:E4:EC:1F:CD:EE:FB:9F:2E:47:CF:50
X509v3 Authority Key Identifier:
keyid:F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:22:3c:3f:1e:5f:c5:46:39:c4:71:4c:4a:ab:11:0d:e2:6d:
7e:ec:17:2b:41:22:4b:37:90:cc:36:18:f5:f9:48:40:5a:57:
55:70:8e:d4:f2:62:d1:3a:72:fc:8c:6f:67:8a:33:9a:be:8d:
64:a4:2b:1c:ec:01:12:16:9c:31:c8:07:77:27:a9:db:b4:f8:
9f:a2:f5:79:71:c3:79:71:72:33:8a:56:d4:ea:02:72:ac:c6:
9c:93:42:a4:d4:3e:57:09:7f:d9:4b:1d:23:a0:e4:35:13:0e:
c9:61:51:21:e0:d6:ba:59:ba:40:7a:a6:62:e7:2f:5e:3b:81:
a4:40:58:0a:fa:8c:98:53:cd:d0:59:66:a5:45:50:a7:ea:06:
42:54:c9:69:51:c6:f6:02:f1:7f:e5:d3:1a:8a:18:0b:9a:63:
11:bb:f2:a2:c8:13:84:83:d9:c1:5a:2a:ce:b3:17:6f:64:45:
0b:57:7f:87:85:3c:ab:78:e4:b1:b9:fb:bd:c1:ae:05:26:34:
0a:c9:55:06:06:a2:ca:3d:69:8c:7f:ac:f6:bb:ee:d6:69:3a:
fe:dd:36:e0:f9:69:ca:97:d8:67:2e:b5:65:7b:09:f9:16:65:
bc:e5:9d:e6:c0:76:5d:7f:51:a0:53:0b:f8:a0:d5:80:b2:0a:
6e:0c:b4:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyoai8MrYgku9mQ2msyc8XPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZTFhNGU1ZGFkOWU0Y2MxNGUwMTY5MTBlYzRiNjY5ZDVl
M2FiOWMwHhcNMjYwMzAxMDgwMDU2WhcNMjYwMzAyMDgwMDU2WjAzMTEwLwYDVQQD
Eyg0OWZmOWU0ODc0ZmQxMDRhNGRlNGVjMWZjZGVlZmI5ZjJlNDdjZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6DDrz1fZVSnBFUAzSHOEVsIXJgt
+htVRGInvQKepk3lvzWvoK0jTUefU3gmnuIGPF/HK6T7QvvwmE+muYN/ngIasbQi
2/OYDqn6PHUApFXmWIK4JWjirZ5qDqV3XOnvIWQyFu0JhPLgsms0wGNgmeAh5d5o
Ai37pyKmZDqnn1V8785hOFkBjFjmFwWI7U01no4ISkr5Hc7/9FYwkjVCAR9U8OeD
YQqri2EECmDWBXY9xTuZUCbnCHyzcEqYRrds42hXcgMW9Mt0fN/Qz4lBBmMyELM7
mO75cwFFU8PRD6KuiDWFrBFnmsx9RgX3VyTHt6WBw4kLhagDiRIwF9wD1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEn/nkh0/RBKTeTsH83u+58uR89QMB8GA1UdIwQY
MBaAFPbhpOXa2eTMFOAWkQ7EtmnV46ucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXVHazVkclo1TXdVNEJhUkRzUzJhZFhqcTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85NzZkZjItMjg5Yi00YzY1LTgyNDct
YWYzNGU4M2I5MWI2LzEvOXVHazVkclo1TXdVNEJhUkRzUzJhZFhqcTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85NzZkZjItMjg5Yi00YzY1LTgyNDctYWYzNGU4M2I5MWI2
LzEvOXVHazVkclo1TXdVNEJhUkRzUzJhZFhqcTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSI8Px5f
xUY5xHFMSqsRDeJtfuwXK0EiSzeQzDYY9flIQFpXVXCO1PJi0Tpy/IxvZ4ozmr6N
ZKQrHOwBEhacMcgHdyep27T4n6L1eXHDeXFyM4pW1OoCcqzGnJNCpNQ+Vwl/2Usd
I6DkNRMOyWFRIeDWulm6QHqmYucvXjuBpEBYCvqMmFPN0FlmpUVQp+oGQlTJaVHG
9gLxf+XTGooYC5pjEbvyosgThIPZwVoqzrMXb2RFC1d/h4U8q3jksbn7vcGuBSY0
CslVBgaiyj1pjH+s9rvu1mk6/t024PlpypfYZy61ZXsJ+RZlvOWd5sB2XX9RoFML
+KDVgLIKbgy0Zg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:13 2026 by rpki-client