
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
File: c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft (raw, json)
Hash identifier: siUwTsV1fqM4vukZl52MsQ8qPwB+nCYZidZrtsdRk/4=
Subject key identifier: 73:3B:97:63:CD:42:E5:DF:77:34:7D:03:29:4D:7C:8D:65:80:93:9B
Authority key identifier: 73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D
Certificate issuer: /CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
Certificate serial: 019CA86AB259C07A1CD460636121D294C737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
Manifest number: F1
Signing time: Sun 01 Mar 2026 08:01:30 +0000
Manifest this update: Sun 01 Mar 2026 08:01:30 +0000
Manifest next update: Mon 02 Mar 2026 08:01:30 +0000
Files and hashes: 1: EINzrIURAAo22BLwl6OL1a5UpOQ.roa (hash: 1AY0ijx+5mYwFZJR82o+YM6Bv37eLoS0OW/kHJNuh9g=)
2: Vfdkg8JrR_-oYTXKpv3ZFvZLNaQ.roa (hash: 82rQspqFd2g83fOxBmYcG9w9D8+bzZnPWvE6hsAaX0o=)
3: c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl (hash: KTJOj9NlggXW1Iyezuo4y5+LvZU7GOvkC7fgNn+FRZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:b2:59:c0:7a:1c:d4:60:63:61:21:d2:94:c7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
Validity
Not Before: Mar 1 08:01:30 2026 GMT
Not After : Mar 2 08:01:30 2026 GMT
Subject: CN=733b9763cd42e5df77347d03294d7c8d6580939b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:5c:ce:c7:ac:76:2b:9f:00:de:e1:76:4a:
c2:4a:f9:0a:70:e8:45:fb:c5:17:6d:9f:22:05:30:
35:44:d4:52:10:a3:ad:fb:37:2d:5a:a3:90:74:ca:
66:37:32:da:22:78:ec:17:db:e7:8f:5b:97:46:12:
22:ee:0b:3f:ae:1d:80:1c:5e:c6:15:0d:5d:e5:0d:
74:50:8b:be:b6:0e:16:43:0f:96:50:31:e2:0d:39:
11:f3:e2:83:81:aa:8d:5f:13:18:64:75:ec:2d:b7:
9d:95:0e:9c:75:70:cb:73:b0:9a:34:74:c8:ca:af:
0f:c3:8d:2f:2b:b1:6d:5c:13:40:94:f3:60:08:c5:
8e:50:8b:43:16:99:0f:c1:56:52:89:dd:d4:7f:45:
a0:41:ef:66:07:f7:a9:7f:1c:58:b0:d0:12:e0:36:
04:df:86:11:32:d7:99:b2:ef:a8:78:39:27:b3:49:
43:72:43:7e:a7:eb:d9:de:e7:49:4b:25:2b:8a:da:
a6:fb:64:50:2f:58:fd:64:5d:29:1d:de:76:e8:b5:
c5:0c:c8:64:81:88:c5:dc:d3:f5:ab:af:e4:be:d2:
61:cc:5c:38:8c:7c:10:55:44:21:7d:5e:0e:b0:a6:
78:4d:bc:02:ac:58:e6:e9:af:d6:4e:41:6f:fb:24:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3B:97:63:CD:42:E5:DF:77:34:7D:03:29:4D:7C:8D:65:80:93:9B
X509v3 Authority Key Identifier:
keyid:73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:65:a4:9f:09:c6:c0:31:2d:78:d3:21:a8:53:3d:87:ec:34:
59:76:ef:b1:18:9f:39:87:5e:ea:93:05:cb:ba:78:c3:6f:aa:
c2:c9:00:fb:a8:bf:1e:dd:32:fb:8f:98:24:7d:c7:0d:ae:8e:
2f:b6:5f:85:36:8a:4e:21:51:4a:c3:3c:67:57:67:c6:a0:03:
9e:ec:3e:54:6a:c5:9a:ba:39:f6:f4:25:f8:88:bb:cb:4c:bb:
45:cb:6d:82:f2:eb:a6:53:b5:b8:56:eb:36:a6:67:6c:62:ed:
f2:a5:a0:cd:23:b3:5f:49:ff:e7:49:c0:62:c4:43:84:dd:96:
3d:e9:e9:69:26:37:8c:40:25:7d:bb:c3:9f:69:6d:9f:69:b8:
8c:5c:7e:8d:2e:fa:24:b0:04:d8:6d:f8:a0:2d:04:c4:8b:17:
b8:e0:2c:25:91:4f:0f:cb:8b:42:2b:00:e9:35:c6:ec:cb:9c:
ee:88:d5:5b:eb:e7:aa:d7:ca:de:56:fd:f3:76:57:c5:c3:24:
a6:52:c2:83:5e:a9:6b:8b:2c:d1:66:c1:e1:14:da:98:f4:4a:
19:de:db:85:f3:f6:56:43:37:58:70:e3:d2:02:3c:87:a2:fc:
d9:25:dd:0c:1c:c1:b9:09:b6:0f:5b:5f:3d:48:98:0a:9f:6e:
29:b6:c9:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyoarJZwHoc1GBjYSHSlMc3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZDkxY2RjYzBjMWIzNjNiNDliZmMzYzJhYzU4ZTkzMDAy
ZGYwN2QwHhcNMjYwMzAxMDgwMTMwWhcNMjYwMzAyMDgwMTMwWjAzMTEwLwYDVQQD
Eyg3MzNiOTc2M2NkNDJlNWRmNzczNDdkMDMyOTRkN2M4ZDY1ODA5MzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4BczsesdiufAN7hdkrCSvkKcOhF
+8UXbZ8iBTA1RNRSEKOt+zctWqOQdMpmNzLaInjsF9vnj1uXRhIi7gs/rh2AHF7G
FQ1d5Q10UIu+tg4WQw+WUDHiDTkR8+KDgaqNXxMYZHXsLbedlQ6cdXDLc7CaNHTI
yq8Pw40vK7FtXBNAlPNgCMWOUItDFpkPwVZSid3Uf0WgQe9mB/epfxxYsNAS4DYE
34YRMteZsu+oeDkns0lDckN+p+vZ3udJSyUritqm+2RQL1j9ZF0pHd526LXFDMhk
gYjF3NP1q6/kvtJhzFw4jHwQVUQhfV4OsKZ4TbwCrFjm6a/WTkFv+yT0LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHM7l2PNQuXfdzR9AylNfI1lgJObMB8GA1UdIwQY
MBaAFHPZHNzAwbNjtJv8PCrFjpMALfB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzlrYzNNREJzMk8wbV93OEtzV09rd0F0OEgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi82YzgyN2UtYjAzMS00Njc1LWIzNDgt
YjE1NTI0MDliNmQxLzEvYzlrYzNNREJzMk8wbV93OEtzV09rd0F0OEgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi82YzgyN2UtYjAzMS00Njc1LWIzNDgtYjE1NTI0MDliNmQx
LzEvYzlrYzNNREJzMk8wbV93OEtzV09rd0F0OEgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmWknwnG
wDEteNMhqFM9h+w0WXbvsRifOYde6pMFy7p4w2+qwskA+6i/Ht0y+4+YJH3HDa6O
L7ZfhTaKTiFRSsM8Z1dnxqADnuw+VGrFmro59vQl+Ii7y0y7RcttgvLrplO1uFbr
NqZnbGLt8qWgzSOzX0n/50nAYsRDhN2WPenpaSY3jEAlfbvDn2ltn2m4jFx+jS76
JLAE2G34oC0ExIsXuOAsJZFPD8uLQisA6TXG7Muc7ojVW+vnqtfK3lb983ZXxcMk
plLCg16pa4ss0WbB4RTamPRKGd7bhfP2VkM3WHDj0gI8h6L82SXdDBzBuQm2D1tf
PUiYCp9uKbbJSg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:20:55 2026 by rpki-client