Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File: 9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier: Hlv18C8SasGFT+6rNeuPpkBMhKDSVwsE7BhpfdgyDZw=
Subject key identifier: F1:E1:07:3A:62:50:3B:AF:77:0E:B8:F2:B2:46:0D:84:D4:1B:1A:C9
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial: 019CAAC726069D6138E49313115C18976C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 19:01:43 +0000
Manifest this update: Sun 01 Mar 2026 19:01:43 +0000
Manifest next update: Mon 02 Mar 2026 19:01:43 +0000
Files and hashes: 1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: J/k2UEpZBKaFGTCxqXXYnJR9ZJ6X0uwRR7bPnZV2VyA=)
2: C4r9_4LMNZyXrJrExvRTXCrazjo.roa (hash: I0l1JrLTqSKZ4rSbNS1J06hQR75J/+SJ8by7D4fg+Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:26:06:9d:61:38:e4:93:13:11:5c:18:97:6c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
Validity
Not Before: Mar 1 19:01:43 2026 GMT
Not After : Mar 2 19:01:43 2026 GMT
Subject: CN=f1e1073a62503baf770eb8f2b2460d84d41b1ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:f9:3a:d4:04:dd:c9:cd:ad:27:41:2c:a8:
c1:27:18:90:53:2c:f9:a7:ff:7a:13:b7:c5:5b:29:
ee:9f:7b:45:95:66:62:b3:63:b1:63:74:d8:6a:ba:
98:ae:ee:fb:ad:ca:c3:ea:25:c8:05:b3:14:20:45:
70:05:61:86:85:92:6a:8b:c1:98:3b:e8:23:61:ee:
d7:1f:f0:3a:b2:41:e7:48:e8:01:b9:7d:78:06:3f:
35:c2:15:a5:22:ac:9b:b8:63:af:f0:86:d3:6b:0e:
db:00:28:b4:de:35:43:56:90:70:88:ae:39:20:65:
bb:7f:27:57:cd:51:a7:c6:2b:43:82:64:f6:8b:35:
4a:c8:03:80:4d:4f:89:55:95:16:47:58:dc:56:d9:
fb:28:41:d4:e8:d1:02:ba:d9:16:c8:e3:d7:39:ca:
f8:54:4c:04:64:c5:ca:c3:0e:df:24:28:05:ad:ea:
d0:2d:13:9d:ae:55:a4:f7:74:c4:cb:e2:49:54:7e:
5e:70:d6:12:23:ab:a0:86:2d:56:8d:b4:58:2b:91:
93:76:27:e1:9a:64:14:95:41:86:48:d7:80:d3:9b:
58:13:5e:25:81:74:f2:96:12:b0:59:97:55:5e:db:
44:75:9e:03:c5:19:40:5f:fc:82:e7:54:a5:93:dc:
d0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E1:07:3A:62:50:3B:AF:77:0E:B8:F2:B2:46:0D:84:D4:1B:1A:C9
X509v3 Authority Key Identifier:
keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0b:27:62:a7:c9:03:ee:26:1c:f8:da:51:57:2d:eb:d0:16:
c4:d6:d1:0f:5a:20:86:06:7e:7a:33:72:c3:53:6d:4c:8d:f0:
a6:31:45:99:b2:ca:eb:0e:79:c8:7e:83:bc:22:dc:14:a0:81:
5d:07:e8:b1:4c:c1:fb:aa:d0:97:bf:88:d7:e2:e1:00:97:de:
8a:3d:4f:19:02:bb:35:fd:ba:2d:99:83:05:10:63:b5:ef:42:
b4:12:a0:99:a6:a0:cf:d5:a3:4b:f8:54:23:dd:3f:fa:67:58:
83:f3:6d:14:2c:cd:30:37:dd:50:51:fb:56:8f:d6:fe:11:ec:
12:4a:ab:d2:44:77:c7:54:81:2f:22:d1:10:dc:fe:ad:35:e1:
6a:b2:42:a9:48:dc:bb:21:6f:36:f4:7b:39:c3:c1:bf:7d:08:
69:32:70:b8:bb:0d:90:b2:66:ec:8c:2a:a8:d7:99:02:fe:44:
57:be:9a:73:54:3e:6a:fb:94:de:b5:b6:28:c7:cb:be:ed:00:
41:c3:07:60:58:c4:20:d6:1c:2f:b8:20:aa:67:26:51:e3:2e:
84:b3:2e:5a:42:4e:73:4f:b4:65:72:84:ba:6f:2c:64:53:66:
02:75:85:64:ee:f7:cf:69:9f:79:f9:9c:ef:c6:14:3c:8a:c1:
20:9b:d3:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxyYGnWE45JMTEVwYl2x+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTAxOGZkZGZkNDIyNTE3YzMwNjllNzU2NTg2NTdiNDBl
NzM2MDEwHhcNMjYwMzAxMTkwMTQzWhcNMjYwMzAyMTkwMTQzWjAzMTEwLwYDVQQD
EyhmMWUxMDczYTYyNTAzYmFmNzcwZWI4ZjJiMjQ2MGQ4NGQ0MWIxYWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA35OtQE3cnNrSdBLKjBJxiQUyz5
p/96E7fFWynun3tFlWZis2OxY3TYarqYru77rcrD6iXIBbMUIEVwBWGGhZJqi8GY
O+gjYe7XH/A6skHnSOgBuX14Bj81whWlIqybuGOv8IbTaw7bACi03jVDVpBwiK45
IGW7fydXzVGnxitDgmT2izVKyAOATU+JVZUWR1jcVtn7KEHU6NECutkWyOPXOcr4
VEwEZMXKww7fJCgFrerQLROdrlWk93TEy+JJVH5ecNYSI6ughi1WjbRYK5GTdifh
mmQUlUGGSNeA05tYE14lgXTylhKwWZdVXttEdZ4DxRlAX/yC51Slk9zQ5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHhBzpiUDuvdw648rJGDYTUGxrJMB8GA1UdIwQY
MBaAFPTgGP3f1CJRfDBp51ZYZXtA5zYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9BWV9kX1VJbEY4TUdublZsaGxlMERuTmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hZDZmNWYtNTNiNS00ZTA3LTk0YjQt
NzBmOTRkNWVlNWZjLzEvOU9BWV9kX1VJbEY4TUdublZsaGxlMERuTmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9hZDZmNWYtNTNiNS00ZTA3LTk0YjQtNzBmOTRkNWVlNWZj
LzEvOU9BWV9kX1VJbEY4TUdublZsaGxlMERuTmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgsnYqfJ
A+4mHPjaUVct69AWxNbRD1oghgZ+ejNyw1NtTI3wpjFFmbLK6w55yH6DvCLcFKCB
XQfosUzB+6rQl7+I1+LhAJfeij1PGQK7Nf26LZmDBRBjte9CtBKgmaagz9WjS/hU
I90/+mdYg/NtFCzNMDfdUFH7Vo/W/hHsEkqr0kR3x1SBLyLRENz+rTXharJCqUjc
uyFvNvR7OcPBv30IaTJwuLsNkLJm7IwqqNeZAv5EV76ac1Q+avuU3rW2KMfLvu0A
QcMHYFjEINYcL7ggqmcmUeMuhLMuWkJOc0+0ZXKEum8sZFNmAnWFZO73z2mfefmc
78YUPIrBIJvTow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:21 2026 by rpki-client