Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
File: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json)
Hash identifier: HH+pyOhHQLBEG4CUH7xUuBQdb1UApVNMGGCK6rt2S+E=
Subject key identifier: 7D:F2:1D:A6:E9:CF:4E:50:C2:81:0E:9B:5F:9C:C8:41:C5:F6:8C:4A
Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
Certificate issuer: /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Certificate serial: 019CAA8FDFB4803DD351C399C60D4BBD330B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
Manifest number: 07C7
Signing time: Sun 01 Mar 2026 18:01:21 +0000
Manifest this update: Sun 01 Mar 2026 18:01:21 +0000
Manifest next update: Mon 02 Mar 2026 18:01:21 +0000
Files and hashes: 1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: nMK/4IMG1cNih8OY44Cd6gx7Pxleuq2LarML4rYIyik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:df:b4:80:3d:d3:51:c3:99:c6:0d:4b:bd:33:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Validity
Not Before: Mar 1 18:01:21 2026 GMT
Not After : Mar 2 18:01:21 2026 GMT
Subject: CN=7df21da6e9cf4e50c2810e9b5f9cc841c5f68c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:aa:71:0f:80:5c:91:f6:54:ba:5b:2f:26:
7c:bd:13:05:bf:6c:af:a7:f2:1b:88:4f:8d:7b:4e:
42:f0:ca:7e:ca:fb:0b:60:b2:1b:b8:3d:cb:45:0c:
bc:14:cf:81:11:2f:ea:f3:dd:52:91:a4:18:7a:22:
73:c2:7d:43:71:07:bc:d5:7b:64:14:3f:fc:a6:42:
ff:f8:f4:ed:40:3b:ad:94:28:28:02:73:9f:2a:6d:
8a:2c:fb:66:fc:e8:e6:e5:01:3d:33:11:e9:d1:5e:
86:2d:15:18:84:97:5f:f0:f6:64:c3:d6:d9:f9:68:
da:b1:38:f4:59:d0:44:64:5f:19:42:7f:e8:61:bb:
a0:21:f4:92:31:5a:72:f8:37:b2:b2:82:75:a8:44:
aa:ce:11:6c:4a:79:3e:15:a7:96:ba:a3:c3:a6:66:
9c:51:69:5f:f6:5a:2b:90:1a:a1:3e:68:4a:8a:7d:
90:f3:26:55:a9:4e:64:37:35:86:d4:05:85:69:d1:
31:e7:e0:31:31:05:1b:bb:e1:a0:bf:ba:77:57:1a:
40:e8:29:e9:21:d4:b3:02:0c:fe:a4:d8:9c:37:a4:
bd:38:36:2f:6c:4b:85:7f:e9:57:57:ed:12:cc:93:
d8:08:d3:f2:21:14:6b:fd:21:4c:5a:bc:26:71:65:
b8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F2:1D:A6:E9:CF:4E:50:C2:81:0E:9B:5F:9C:C8:41:C5:F6:8C:4A
X509v3 Authority Key Identifier:
keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fd:96:61:5f:1b:2b:19:d2:33:1a:bb:5d:74:75:f7:38:99:
32:ba:a0:6d:30:dc:a8:16:d6:d0:20:ff:de:3a:8f:17:7f:c7:
19:4d:aa:70:a2:f0:ab:69:92:e1:ff:68:a5:5a:d7:a0:7a:d3:
50:4b:e8:11:d7:d5:89:eb:da:d1:0b:60:77:9c:65:4a:bd:a7:
14:a1:3d:0f:c0:a8:87:a7:19:0b:f8:5e:cb:1b:b2:91:19:10:
84:da:9a:a8:35:89:d4:72:5f:d7:5b:87:6a:18:51:da:b7:b3:
77:93:d2:ea:e3:b4:7d:8e:70:51:bd:e2:91:29:cd:17:07:1b:
94:49:dc:ea:24:ef:5a:2f:8b:87:a4:59:52:5f:9f:41:2a:7f:
5a:f9:a2:8f:90:06:e1:08:84:6d:45:c0:b3:b2:06:3e:31:b7:
5c:d6:a5:f7:92:c7:0b:d4:98:b6:2a:cb:0d:21:c8:a8:95:93:
01:c5:9b:b2:7d:ac:cb:c5:43:a6:64:f6:45:c7:01:ec:dc:39:
6a:e6:5f:5f:3d:92:02:4f:32:9b:67:65:d4:48:74:7e:ec:a8:
44:1f:41:57:7e:12:6a:c5:70:8a:fa:48:f9:09:dd:a8:e3:56:
3a:3f:2c:4a:10:0b:1f:bb:00:76:c5:07:91:3c:56:40:5d:8b:
ed:1d:cc:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj9+0gD3TUcOZxg1LvTMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MzkxY2ZkMjhiMDdlNmE5ZTFjYTMyNTZjZGI4MjAxN2Iy
YjU2MjEwHhcNMjYwMzAxMTgwMTIxWhcNMjYwMzAyMTgwMTIxWjAzMTEwLwYDVQQD
Eyg3ZGYyMWRhNmU5Y2Y0ZTUwYzI4MTBlOWI1ZjljYzg0MWM1ZjY4YzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOeqcQ+AXJH2VLpbLyZ8vRMFv2yv
p/IbiE+Ne05C8Mp+yvsLYLIbuD3LRQy8FM+BES/q891SkaQYeiJzwn1DcQe81Xtk
FD/8pkL/+PTtQDutlCgoAnOfKm2KLPtm/Ojm5QE9MxHp0V6GLRUYhJdf8PZkw9bZ
+WjasTj0WdBEZF8ZQn/oYbugIfSSMVpy+DeysoJ1qESqzhFsSnk+FaeWuqPDpmac
UWlf9lorkBqhPmhKin2Q8yZVqU5kNzWG1AWFadEx5+AxMQUbu+Ggv7p3VxpA6Cnp
IdSzAgz+pNicN6S9ODYvbEuFf+lXV+0SzJPYCNPyIRRr/SFMWrwmcWW45wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3yHabpz05QwoEOm1+cyEHF9oxKMB8GA1UdIwQY
MBaAFPQ5HP0osH5qnhyjJWzbggF7K1YhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iNmVhM2UtY2M5MS00OGJmLTg2YmMt
ZTVhOWJhOGY1NmFlLzEvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9iNmVhM2UtY2M5MS00OGJmLTg2YmMtZTVhOWJhOGY1NmFl
LzEvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfP2WYV8b
KxnSMxq7XXR19ziZMrqgbTDcqBbW0CD/3jqPF3/HGU2qcKLwq2mS4f9opVrXoHrT
UEvoEdfVieva0Qtgd5xlSr2nFKE9D8Coh6cZC/heyxuykRkQhNqaqDWJ1HJf11uH
ahhR2rezd5PS6uO0fY5wUb3ikSnNFwcblEnc6iTvWi+Lh6RZUl+fQSp/Wvmij5AG
4QiEbUXAs7IGPjG3XNal95LHC9SYtirLDSHIqJWTAcWbsn2sy8VDpmT2RccB7Nw5
auZfXz2SAk8ym2dl1Eh0fuyoRB9BV34SasVwivpI+QndqONWOj8sShALH7sAdsUH
kTxWQF2L7R3MNA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:59 2026 by rpki-client