Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier: PSNJRc8k0FlOJCAUQwlW+2FwjaX96/an6EqWh6YsFSs=
Subject key identifier: C3:AB:83:75:65:75:CB:33:06:0A:77:C5:FC:7F:53:B8:EB:4C:5B:CC
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer: /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial: 019CAA58B9F8F3BDBEB3EC72DEE6B65F3C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number: 0B5C
Signing time: Sun 01 Mar 2026 17:01:07 +0000
Manifest this update: Sun 01 Mar 2026 17:01:07 +0000
Manifest next update: Mon 02 Mar 2026 17:01:07 +0000
Files and hashes: 1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: NZtbjU2VVHj3TWkvU++teOkdjujrvN9fiI0lEafz4/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:b9:f8:f3:bd:be:b3:ec:72:de:e6:b6:5f:3c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
Validity
Not Before: Mar 1 17:01:07 2026 GMT
Not After : Mar 2 17:01:07 2026 GMT
Subject: CN=c3ab83756575cb33060a77c5fc7f53b8eb4c5bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:a6:e0:b7:70:01:fc:00:33:2e:dd:09:94:
2d:76:08:0a:20:66:6c:b2:73:db:49:2f:45:9d:af:
cc:a8:f0:9c:4f:a9:00:bc:d2:fc:bb:b7:3f:5d:db:
74:cc:c2:b4:97:e6:79:82:73:d2:20:4b:5b:ed:6b:
81:6e:8a:58:b6:76:16:17:bd:12:af:47:08:62:5b:
77:29:36:69:fa:65:32:35:6a:f7:d0:ba:ed:0e:56:
d7:79:c6:f8:90:68:21:95:0b:33:7c:03:a7:35:db:
15:5f:5e:a9:ef:c0:83:20:51:90:30:1f:d7:f7:e6:
e2:b1:17:e8:de:44:35:66:12:d2:cd:87:88:af:30:
48:9d:e1:17:26:10:bd:5e:45:8c:7a:3a:b1:d8:3d:
60:94:f3:2c:8a:04:e9:cf:a1:70:9e:1b:5d:d8:c6:
b4:4b:ce:e8:2b:0c:fd:0b:f1:b5:c9:2e:f0:78:94:
5a:53:a1:89:7a:e9:23:cb:ba:b3:30:eb:cc:ec:a6:
e0:23:1f:d6:90:a1:d2:93:29:43:39:c8:63:83:f6:
7c:43:76:77:0c:76:c4:ed:fc:7b:f6:d3:15:00:27:
85:42:6b:e6:87:15:8f:2d:2e:4b:15:56:e2:8e:e7:
94:80:ec:ab:41:c1:08:0f:04:68:78:bc:50:f9:7a:
ed:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AB:83:75:65:75:CB:33:06:0A:77:C5:FC:7F:53:B8:EB:4C:5B:CC
X509v3 Authority Key Identifier:
keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:da:4b:34:47:03:6c:02:cd:1f:80:3e:f2:ad:a6:dc:a0:77:
19:fd:d8:fc:47:98:f5:8f:87:2d:ba:4d:d3:04:26:b5:a6:68:
18:f2:db:f5:6e:4e:b3:86:e3:c6:5b:7d:ca:ac:b3:b7:6b:4b:
aa:81:5f:45:9f:09:8e:53:86:9a:5d:51:3e:a9:5b:b6:15:80:
82:0f:25:d8:14:e0:d6:ea:8a:f5:7d:d2:b8:fc:11:16:9f:be:
62:67:68:b6:e5:7d:72:c2:14:22:43:0b:40:79:60:56:ba:9b:
7c:0e:d9:06:14:62:10:55:d0:f5:29:dd:c9:4e:ee:a8:67:45:
f8:27:c2:bd:60:4a:40:cb:62:60:01:ad:c0:22:92:71:6a:d7:
6d:98:66:25:33:f2:7c:d0:bc:9e:6c:48:a2:95:a4:74:00:b8:
9f:ca:97:0e:66:3e:be:aa:5d:03:e8:5c:77:c4:ae:cf:11:58:
78:25:61:bb:ed:38:08:71:25:a7:6a:2e:ef:61:0e:94:56:0d:
54:94:93:2a:3e:b4:d3:52:ca:5a:ff:04:81:54:01:c8:bd:3e:
3f:18:1f:4d:55:93:a1:28:f9:e4:89:c3:91:82:ed:9c:e6:ab:
b5:0d:42:e5:64:fd:49:a0:81:78:d7:20:85:d7:bc:14:40:e0:
45:c8:c3:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWLn4872+s+xy3ua2XzxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MjcyYWMwNDIzZmIwOTc1ODNjNjg3MjU2N2Q4NGNhZTQx
MGM4OWIwHhcNMjYwMzAxMTcwMTA3WhcNMjYwMzAyMTcwMTA3WjAzMTEwLwYDVQQD
EyhjM2FiODM3NTY1NzVjYjMzMDYwYTc3YzVmYzdmNTNiOGViNGM1YmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Iem4LdwAfwAMy7dCZQtdggKIGZs
snPbSS9Fna/MqPCcT6kAvNL8u7c/Xdt0zMK0l+Z5gnPSIEtb7WuBbopYtnYWF70S
r0cIYlt3KTZp+mUyNWr30LrtDlbXecb4kGghlQszfAOnNdsVX16p78CDIFGQMB/X
9+bisRfo3kQ1ZhLSzYeIrzBIneEXJhC9XkWMejqx2D1glPMsigTpz6Fwnhtd2Ma0
S87oKwz9C/G1yS7weJRaU6GJeukjy7qzMOvM7KbgIx/WkKHSkylDOchjg/Z8Q3Z3
DHbE7fx79tMVACeFQmvmhxWPLS5LFVbijueUgOyrQcEIDwRoeLxQ+XrtEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOrg3VldcszBgp3xfx/U7jrTFvMMB8GA1UdIwQY
MBaAFPQnKsBCP7CXWDxoclZ9hMrkEMibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83ZjJjZjItNDI5NC00M2Q2LWEzMjEt
NDdlZGRkZTJhMzcyLzEvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83ZjJjZjItNDI5NC00M2Q2LWEzMjEtNDdlZGRkZTJhMzcy
LzEvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNpLNEcD
bALNH4A+8q2m3KB3Gf3Y/EeY9Y+HLbpN0wQmtaZoGPLb9W5Os4bjxlt9yqyzt2tL
qoFfRZ8JjlOGml1RPqlbthWAgg8l2BTg1uqK9X3SuPwRFp++YmdotuV9csIUIkML
QHlgVrqbfA7ZBhRiEFXQ9SndyU7uqGdF+CfCvWBKQMtiYAGtwCKScWrXbZhmJTPy
fNC8nmxIopWkdAC4n8qXDmY+vqpdA+hcd8SuzxFYeCVhu+04CHElp2ou72EOlFYN
VJSTKj6001LKWv8EgVQByL0+PxgfTVWToSj55InDkYLtnOartQ1C5WT9SaCBeNcg
hde8FEDgRcjD7g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:23 2026 by rpki-client