Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
File: 9bulXh8L-GE-qbu-KXooGzyDgYA.mft (raw, json)
Hash identifier: mEl3NedJk+4fKDkJVPUJ6wC1k1GtuRqJCkhgJpkzZhk=
Subject key identifier: 6C:70:F2:76:AA:A3:95:73:32:74:83:87:F8:8D:B6:A4:87:7F:3C:13
Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
Certificate issuer: /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Certificate serial: 019CAEDA470B52A9B797D03A91D098225CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 14:01:06 +0000
Manifest this update: Mon 02 Mar 2026 14:01:06 +0000
Manifest next update: Tue 03 Mar 2026 14:01:06 +0000
Files and hashes: 1: 9bulXh8L-GE-qbu-KXooGzyDgYA.crl (hash: CudfuGB/41TUcTr/zg8hppLAMJSXERUOlKWCPu9Df24=)
2: sB9rgefHa3sSt6ZYnW1BwCOgmaU.roa (hash: svJIfKZ/TOmm8xXRzXlM/7QXfhtfTNna41fpYKpF970=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:47:0b:52:a9:b7:97:d0:3a:91:d0:98:22:5c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Validity
Not Before: Mar 2 14:01:06 2026 GMT
Not After : Mar 3 14:01:06 2026 GMT
Subject: CN=6c70f276aaa3957332748387f88db6a4877f3c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:e0:73:48:cb:89:cd:e6:be:9a:7b:ff:b6:
26:ad:49:9e:52:a0:97:52:73:78:63:0e:ff:4d:14:
a6:c9:67:5a:ab:2f:68:74:45:1a:4f:5c:a8:a9:01:
15:4e:39:6f:a9:d1:24:20:cb:fa:93:12:d7:e1:9a:
17:12:99:d3:74:0d:3a:d9:4e:89:e5:9d:16:0b:66:
dc:b6:cd:d8:31:2d:59:c1:77:2d:0c:9a:12:75:56:
84:8e:2c:b5:c6:43:2f:3f:e5:7c:7d:5c:76:ba:7a:
9a:99:d1:1d:53:f0:53:15:f2:54:1e:54:df:f9:d8:
43:0a:6f:6b:51:91:21:1d:f0:d3:77:da:25:18:13:
53:c3:39:d7:ea:90:b9:d0:e5:34:66:fa:26:c2:04:
16:96:ee:b7:a2:17:00:87:31:f3:52:ce:5d:17:03:
2d:44:00:4a:62:ce:10:b2:b1:85:51:ff:39:08:63:
ce:2d:0e:9f:6f:c6:f3:e9:06:04:72:6a:bd:14:b5:
4c:f8:e1:18:9c:34:f7:e2:c4:42:c1:dc:10:fd:50:
c4:70:08:4c:88:51:a5:da:4d:b1:33:cd:4c:ba:5d:
8d:d2:6a:4d:a0:83:6f:c7:ee:38:47:80:46:95:3f:
62:d3:1e:a4:c0:72:75:d8:66:fc:47:0e:16:2e:05:
41:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:70:F2:76:AA:A3:95:73:32:74:83:87:F8:8D:B6:A4:87:7F:3C:13
X509v3 Authority Key Identifier:
keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ab:5b:5f:96:50:c2:ae:30:d4:96:4e:c9:f8:a1:9d:6f:10:
56:19:6e:86:90:40:d3:b1:52:5f:23:dd:89:81:1d:42:6e:c3:
51:03:fa:17:41:a8:3a:8a:d8:91:7c:fa:0d:a4:6e:ea:7a:d8:
cc:0f:85:0f:af:5f:3f:7b:6e:ba:b4:4f:3c:99:f5:7b:0a:23:
d0:38:60:e4:4d:97:19:ee:cc:9f:8b:5f:03:ca:b3:dd:5f:35:
e4:b3:f4:65:32:eb:0b:40:16:42:53:c9:d5:4e:97:1f:b1:6c:
10:40:e1:db:60:d9:32:4c:32:f2:ed:09:be:6c:b2:43:77:04:
69:b5:85:90:ca:c3:06:8e:a0:8a:50:f2:57:5d:d2:88:3d:6a:
53:14:6e:5b:b6:3f:81:2b:d1:b2:c3:69:00:d0:fb:c7:5d:1c:
75:c8:3b:fe:94:5f:21:f5:d0:43:37:b7:45:84:58:45:97:38:
5d:72:dc:f4:df:9e:ef:b6:40:7d:b6:b8:ba:4a:92:b7:d6:29:
71:f4:17:06:0a:35:9c:5c:76:03:fc:bd:fd:cf:27:89:2f:cf:
e7:81:0f:b1:13:6f:14:d2:e9:ad:c7:8a:93:d3:4c:a5:fe:7d:
99:30:bc:4f:62:3b:df:2a:9c:48:62:35:9e:3c:37:d7:8d:08:
64:59:47:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyu2kcLUqm3l9A6kdCYIlzgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YmJhNTVlMWYwYmY4NjEzZWE5YmJiZTI5N2EyODFiM2M4
MzgxODAwHhcNMjYwMzAyMTQwMTA2WhcNMjYwMzAzMTQwMTA2WjAzMTEwLwYDVQQD
Eyg2YzcwZjI3NmFhYTM5NTczMzI3NDgzODdmODhkYjZhNDg3N2YzYzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWPgc0jLic3mvpp7/7YmrUmeUqCX
UnN4Yw7/TRSmyWdaqy9odEUaT1yoqQEVTjlvqdEkIMv6kxLX4ZoXEpnTdA062U6J
5Z0WC2bcts3YMS1ZwXctDJoSdVaEjiy1xkMvP+V8fVx2unqamdEdU/BTFfJUHlTf
+dhDCm9rUZEhHfDTd9olGBNTwznX6pC50OU0ZvomwgQWlu63ohcAhzHzUs5dFwMt
RABKYs4QsrGFUf85CGPOLQ6fb8bz6QYEcmq9FLVM+OEYnDT34sRCwdwQ/VDEcAhM
iFGl2k2xM81Mul2N0mpNoINvx+44R4BGlT9i0x6kwHJ12Gb8Rw4WLgVB5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxw8naqo5VzMnSDh/iNtqSHfzwTMB8GA1UdIwQY
MBaAFPW7pV4fC/hhPqm7vil6KBs8g4GAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xN2NjNGEtMjkyYy00ZDUwLThkM2Ut
ZjViOTdjMGYwZjI0LzEvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8xN2NjNGEtMjkyYy00ZDUwLThkM2UtZjViOTdjMGYwZjI0
LzEvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6tbX5ZQ
wq4w1JZOyfihnW8QVhluhpBA07FSXyPdiYEdQm7DUQP6F0GoOorYkXz6DaRu6nrY
zA+FD69fP3tuurRPPJn1ewoj0Dhg5E2XGe7Mn4tfA8qz3V815LP0ZTLrC0AWQlPJ
1U6XH7FsEEDh22DZMkwy8u0JvmyyQ3cEabWFkMrDBo6gilDyV13SiD1qUxRuW7Y/
gSvRssNpAND7x10cdcg7/pRfIfXQQze3RYRYRZc4XXLc9N+e77ZAfba4ukqSt9Yp
cfQXBgo1nFx2A/y9/c8niS/P54EPsRNvFNLprceKk9NMpf59mTC8T2I73yqcSGI1
njw3140IZFlH6g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:26:09 2026 by rpki-client