Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier: DN8LgUucP6ZHNcF6ZIm0rXyKnYZW3FF92zxovurO+Ts=
Subject key identifier: DB:C5:F7:97:8A:29:28:17:06:6F:7A:81:B4:1C:DD:60:62:C9:21:7F
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial: 019CACB4B6C55B55B334A5A0C91A4342D574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 04:00:50 +0000
Manifest this update: Mon 02 Mar 2026 04:00:50 +0000
Manifest next update: Tue 03 Mar 2026 04:00:50 +0000
Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: KPVgJtmHk5JSSh4XD636KYDXSVGF6c99VMVlqW55sSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:b6:c5:5b:55:b3:34:a5:a0:c9:1a:43:42:d5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Validity
Not Before: Mar 2 04:00:50 2026 GMT
Not After : Mar 3 04:00:50 2026 GMT
Subject: CN=dbc5f7978a292817066f7a81b41cdd6062c9217f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:8d:d2:67:87:2f:6c:bd:83:12:aa:36:33:
9b:8b:ea:0e:8b:20:6d:53:04:f6:f3:81:f9:56:22:
f6:2a:9c:07:62:78:2d:21:86:ae:55:52:d3:25:93:
92:95:95:5a:b3:6b:23:22:9a:d9:50:32:aa:53:6e:
67:d6:ce:5c:96:1e:95:2d:08:b9:3e:65:7c:e9:c4:
bc:c9:c6:b8:cf:b7:57:d5:d3:ff:58:2d:a2:f7:72:
e7:65:ce:17:c8:01:aa:ae:43:d7:bd:30:57:63:e0:
95:4b:95:31:c2:40:e3:db:56:40:ae:3c:6b:4e:20:
00:c8:c9:2f:b3:08:e0:58:f3:23:e9:47:f0:fa:9d:
0e:d3:d7:e3:53:2f:47:fc:9e:bb:ab:77:ac:d2:0d:
1f:45:1b:8f:6e:08:84:fe:09:40:15:ad:1d:0d:7d:
e7:38:77:3e:8e:c7:7c:1a:fb:78:fb:7f:e1:b4:ad:
95:31:94:37:52:bf:ad:77:50:98:71:31:8f:43:fb:
1b:48:2d:a8:4f:37:01:6e:d2:47:e1:d4:b4:e6:4d:
0e:2d:25:44:64:00:6b:b8:38:16:f4:3a:2b:f1:c4:
0e:bc:a5:5c:a1:c1:f6:e3:28:70:ab:70:39:27:1e:
82:f2:27:b2:e7:98:f8:df:51:c9:bb:71:ae:e7:e2:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C5:F7:97:8A:29:28:17:06:6F:7A:81:B4:1C:DD:60:62:C9:21:7F
X509v3 Authority Key Identifier:
keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c5:b4:b6:41:cc:99:76:3b:e8:2a:ee:90:c5:2b:5b:03:f1:
9e:4e:12:f8:68:d8:5c:b9:f1:3b:e1:f3:6b:e4:a4:e9:4e:20:
02:e3:90:24:db:8d:ac:50:fd:f1:eb:2a:36:c4:0d:e9:ea:54:
fb:dd:2c:5e:e2:10:4e:60:b1:ab:d8:ed:31:bd:9c:fc:f0:dc:
fa:29:24:2a:55:a9:c5:bb:d7:f8:99:54:a5:70:19:f6:ad:5b:
06:3d:f4:c6:2e:27:2d:41:bd:8d:48:ac:1c:e9:c8:e3:4b:1d:
3e:2d:f1:85:7f:52:0d:fc:b3:04:27:84:c7:c5:e0:1e:da:7b:
65:e7:f6:18:17:95:b7:ca:47:8d:c4:a6:12:82:de:3f:4b:fb:
98:91:e8:d8:1d:0a:f6:11:13:4c:82:bf:b5:08:2b:50:fb:08:
5c:df:79:15:b3:d5:f5:85:8f:ed:27:1b:9f:09:77:f9:bf:4e:
ca:b5:bc:dd:fd:86:2d:ad:e3:67:b3:48:b6:b5:51:f4:aa:bf:
dd:67:09:95:ec:e2:e3:6d:ff:52:d6:ac:5e:ff:c8:48:59:21:
5d:fa:47:6a:35:51:10:df:0a:8d:88:08:c3:c1:b6:bd:99:cb:
1f:41:03:fd:af:09:7b:9a:70:c6:0c:d2:e1:31:a4:ce:19:c7:
f5:5e:09:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystLbFW1WzNKWgyRpDQtV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MjQ3NWIwNjRkZThhODlmMTUwM2VhZWZjN2Q3MmFkY2Nm
MzhhMTYwHhcNMjYwMzAyMDQwMDUwWhcNMjYwMzAzMDQwMDUwWjAzMTEwLwYDVQQD
EyhkYmM1Zjc5NzhhMjkyODE3MDY2ZjdhODFiNDFjZGQ2MDYyYzkyMTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhiN0meHL2y9gxKqNjObi+oOiyBt
UwT284H5ViL2KpwHYngtIYauVVLTJZOSlZVas2sjIprZUDKqU25n1s5clh6VLQi5
PmV86cS8yca4z7dX1dP/WC2i93LnZc4XyAGqrkPXvTBXY+CVS5UxwkDj21ZArjxr
TiAAyMkvswjgWPMj6Ufw+p0O09fjUy9H/J67q3es0g0fRRuPbgiE/glAFa0dDX3n
OHc+jsd8Gvt4+3/htK2VMZQ3Ur+td1CYcTGPQ/sbSC2oTzcBbtJH4dS05k0OLSVE
ZABruDgW9Dor8cQOvKVcocH24yhwq3A5Jx6C8iey55j431HJu3Gu5+Jx0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvF95eKKSgXBm96gbQc3WBiySF/MB8GA1UdIwQY
MBaAFPckdbBk3oqJ8VA+rvx9cq3M84oWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85MGYzNmUtZDM4Zi00ZWU5LWFjZWIt
MjgzMjBhNWMwNzdiLzEvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy85MGYzNmUtZDM4Zi00ZWU5LWFjZWItMjgzMjBhNWMwNzdi
LzEvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMW0tkHM
mXY76CrukMUrWwPxnk4S+GjYXLnxO+Hza+Sk6U4gAuOQJNuNrFD98esqNsQN6epU
+90sXuIQTmCxq9jtMb2c/PDc+ikkKlWpxbvX+JlUpXAZ9q1bBj30xi4nLUG9jUis
HOnI40sdPi3xhX9SDfyzBCeEx8XgHtp7Zef2GBeVt8pHjcSmEoLeP0v7mJHo2B0K
9hETTIK/tQgrUPsIXN95FbPV9YWP7Scbnwl3+b9OyrW83f2GLa3jZ7NItrVR9Kq/
3WcJlezi423/UtasXv/ISFkhXfpHajVREN8KjYgIw8G2vZnLH0ED/a8Je5pwxgzS
4TGkzhnH9V4Jrw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:22 2026 by rpki-client