Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier: 7bGmJEMwyugKFQ/b0Kx2EYYRLzsF2nM7A7S6L1bdCb8=
Subject key identifier: 60:E6:1C:EE:9C:CC:9B:6B:CD:24:D0:5D:49:6F:AF:DF:C1:D6:66:42
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer: /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial: 019CAC0FDBCE6B4F48B973B205DE8C8F8BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number: 082B
Signing time: Mon 02 Mar 2026 01:00:46 +0000
Manifest this update: Mon 02 Mar 2026 01:00:46 +0000
Manifest next update: Tue 03 Mar 2026 01:00:46 +0000
Files and hashes: 1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: Lhz74mg9Nil8nCGsmTlBfMzOasxIYWr8E11gmZY0nHM=)
2: rHQdQwrAVRUi1O-wNwGNXoOAwg0.roa (hash: 99E6Pbyu+albbhKOZ1Sk3PoNSHlEGTIbABGjf0VzSBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:db:ce:6b:4f:48:b9:73:b2:05:de:8c:8f:8b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
Validity
Not Before: Mar 2 01:00:46 2026 GMT
Not After : Mar 3 01:00:46 2026 GMT
Subject: CN=60e61cee9ccc9b6bcd24d05d496fafdfc1d66642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d6:68:c0:2b:28:51:ae:63:bd:38:8a:ea:2f:
d3:16:e0:ef:72:6c:51:aa:c0:32:5b:f0:56:1f:61:
6f:74:08:f9:06:41:be:e2:d6:77:ba:53:76:4e:d6:
9c:a9:2e:a9:e6:fc:4a:25:33:d6:78:5d:dc:35:f5:
21:04:e4:39:b0:5e:1c:3c:14:47:bf:72:87:02:a2:
41:c4:ea:a8:e4:82:b3:bf:d7:da:f9:1f:7a:ad:d6:
d7:9f:5b:cf:ed:1e:ab:5b:d6:df:a5:77:5d:cd:48:
4a:c5:cd:b3:27:18:c6:a4:7f:3f:34:ea:92:4f:b7:
20:f8:75:60:c8:a7:7c:a2:74:c9:3e:08:6f:15:61:
22:46:b1:7f:09:8c:87:71:a0:7d:d3:fd:1e:84:e1:
e9:ca:c5:b0:ab:69:77:2c:29:d6:9c:76:5f:1f:c5:
a1:e0:09:49:35:20:ee:12:50:c2:90:6f:d5:b8:8b:
9c:9d:cd:0b:e9:60:8f:3c:82:9d:82:f6:64:ef:df:
00:9b:06:c3:ce:e3:70:ac:0f:83:ad:21:ef:95:0a:
70:af:55:28:c7:8c:5a:0a:62:65:10:7d:5a:23:84:
5a:42:3e:3c:ed:1c:72:01:a5:ee:95:34:ab:dc:6e:
e7:82:c3:2a:7b:19:34:73:8e:11:d0:76:03:03:cd:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E6:1C:EE:9C:CC:9B:6B:CD:24:D0:5D:49:6F:AF:DF:C1:D6:66:42
X509v3 Authority Key Identifier:
keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0d:2d:3b:fb:16:1e:1e:1d:83:7c:5a:ac:8f:82:28:b0:71:
e3:60:4b:5d:2e:34:25:57:45:62:d1:1e:4f:da:43:97:78:03:
24:67:f8:51:e9:ef:50:8c:78:96:7a:f0:8e:ed:eb:19:f0:96:
a8:4d:03:37:3f:e7:72:ae:ee:a6:f7:7b:dc:d4:c5:1f:b3:94:
a4:af:ce:f6:14:39:2c:25:90:f4:c7:38:6a:96:c1:db:f6:6a:
0d:cd:41:43:de:a8:66:4f:4a:df:4d:6f:8e:39:75:c9:ac:ba:
84:e2:ff:49:ce:d5:9a:d6:0c:24:45:e8:20:ef:81:67:23:5b:
fd:b0:3c:80:87:74:a9:3b:a4:39:25:3c:b7:b3:7c:30:fb:31:
3e:1f:73:e5:c5:7a:fe:83:5f:7e:3e:e3:a8:46:67:fe:0f:0b:
0d:09:64:61:b7:74:16:fa:fb:88:a2:3c:a6:a1:f1:8f:aa:5e:
ea:48:14:74:23:a7:c1:cd:1d:8e:bf:4d:99:7e:1b:09:54:fc:
58:63:c2:1e:37:40:ba:1d:e6:d7:dc:34:4e:e3:dc:c2:99:d9:
d9:cc:3e:aa:6c:8a:a0:fc:6a:ff:a1:8e:b7:71:72:3e:49:71:
a1:fc:d4:7d:8e:b2:33:2f:08:ad:2d:fd:49:da:61:a1:69:e4:
37:ee:60:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD9vOa09IuXOyBd6Mj4uxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MDk1MjhiODgyOGI0ZDgyNjM1NWUyYzUyMjM3ZDY0MjA3
MWNkNTQwHhcNMjYwMzAyMDEwMDQ2WhcNMjYwMzAzMDEwMDQ2WjAzMTEwLwYDVQQD
Eyg2MGU2MWNlZTljY2M5YjZiY2QyNGQwNWQ0OTZmYWZkZmMxZDY2NjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dZowCsoUa5jvTiK6i/TFuDvcmxR
qsAyW/BWH2FvdAj5BkG+4tZ3ulN2TtacqS6p5vxKJTPWeF3cNfUhBOQ5sF4cPBRH
v3KHAqJBxOqo5IKzv9fa+R96rdbXn1vP7R6rW9bfpXddzUhKxc2zJxjGpH8/NOqS
T7cg+HVgyKd8onTJPghvFWEiRrF/CYyHcaB90/0ehOHpysWwq2l3LCnWnHZfH8Wh
4AlJNSDuElDCkG/VuIucnc0L6WCPPIKdgvZk798AmwbDzuNwrA+DrSHvlQpwr1Uo
x4xaCmJlEH1aI4RaQj487RxyAaXulTSr3G7ngsMqexk0c44R0HYDA82VDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDmHO6czJtrzSTQXUlvr9/B1mZCMB8GA1UdIwQY
MBaAFPcJUouIKLTYJjVeLFIjfWQgcc1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEt
OWY3NGZhY2FlOGYxLzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEtOWY3NGZhY2FlOGYx
LzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQ0tO/sW
Hh4dg3xarI+CKLBx42BLXS40JVdFYtEeT9pDl3gDJGf4UenvUIx4lnrwju3rGfCW
qE0DNz/ncq7upvd73NTFH7OUpK/O9hQ5LCWQ9Mc4apbB2/ZqDc1BQ96oZk9K301v
jjl1yay6hOL/Sc7VmtYMJEXoIO+BZyNb/bA8gId0qTukOSU8t7N8MPsxPh9z5cV6
/oNffj7jqEZn/g8LDQlkYbd0Fvr7iKI8pqHxj6pe6kgUdCOnwc0djr9NmX4bCVT8
WGPCHjdAuh3m19w0TuPcwpnZ2cw+qmyKoPxq/6GOt3FyPklxofzUfY6yMy8IrS39
SdphoWnkN+5gkw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:35 2026 by rpki-client