Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
File: T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json)
Hash identifier: o5KSWbTpRXeA4NbUKf/xHA9Mon3qT4yQ+5wAXq0/F0U=
Subject key identifier: 7D:95:6F:2A:A4:5C:A1:EE:2C:B5:7B:CA:5A:D5:84:96:28:64:DF:B1
Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
Certificate issuer: /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Certificate serial: 019CAC46BB546F8F956AE4A372ED874C0C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
Manifest number: 0735
Signing time: Mon 02 Mar 2026 02:00:42 +0000
Manifest this update: Mon 02 Mar 2026 02:00:42 +0000
Manifest next update: Tue 03 Mar 2026 02:00:42 +0000
Files and hashes: 1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: pS5IFu55LTIVasJ4lTv4cA3fzT5j/rb+Y2eO/2hvN0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:bb:54:6f:8f:95:6a:e4:a3:72:ed:87:4c:0c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Validity
Not Before: Mar 2 02:00:42 2026 GMT
Not After : Mar 3 02:00:42 2026 GMT
Subject: CN=7d956f2aa45ca1ee2cb57bca5ad584962864dfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:fb:40:a2:8b:21:e1:3c:8b:f6:23:04:b6:
fd:a1:da:ee:43:61:00:94:8c:5b:02:ac:39:5d:b0:
0d:88:61:75:c7:a6:a1:51:82:63:bf:6f:8a:12:e7:
39:03:63:00:9b:9a:c1:9a:46:ef:7c:dd:f1:ee:9c:
5b:e9:a9:85:e8:50:09:22:61:89:6b:67:84:4e:ea:
1f:53:95:30:05:de:b2:77:57:ac:cd:39:74:1b:98:
b9:4c:ae:68:ba:6f:db:53:5f:ca:a7:5a:e4:f1:66:
a7:11:fe:2e:00:8d:49:ea:5d:43:fe:9c:f8:fd:29:
b0:94:84:50:3d:e6:a3:12:48:10:d3:02:ca:1e:b9:
06:23:6b:49:77:22:2f:b0:28:83:0a:3f:e9:43:52:
83:7e:ef:20:cb:c7:28:e5:85:49:ad:95:6b:4b:a7:
fc:43:33:de:7d:ab:8d:7d:6b:cd:c6:24:53:06:d3:
d5:00:69:23:f0:f5:95:e3:c9:6c:b2:e1:d9:f1:ad:
44:3c:68:43:81:17:9e:a9:f5:29:e9:40:dd:cc:1d:
7f:d5:76:93:5a:bc:6a:d4:a0:5e:62:4a:00:85:46:
26:0a:24:46:e2:dd:54:6a:e4:52:29:21:da:e2:b4:
f6:df:cf:a0:fe:16:04:02:cf:77:62:95:ad:b5:ff:
5d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:95:6F:2A:A4:5C:A1:EE:2C:B5:7B:CA:5A:D5:84:96:28:64:DF:B1
X509v3 Authority Key Identifier:
keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:51:65:0e:12:70:9a:14:9c:d2:f8:96:9f:3c:01:e4:71:a4:
39:a9:cf:e3:21:54:a8:4d:a8:9c:50:17:77:5a:b8:8e:8b:3e:
5d:2e:f2:0f:9c:32:c4:a7:c2:4d:ca:71:75:e6:5c:04:bf:bb:
d6:3f:78:53:32:5a:d7:54:fa:df:f2:66:db:43:86:fa:4d:3b:
57:b6:dc:72:a7:cf:11:77:a0:a2:7c:da:8b:ff:37:c6:4a:5e:
b5:25:b3:fc:e5:a8:f2:75:09:f5:af:da:6a:88:c2:3a:e4:a2:
4c:a0:bf:d3:1e:06:83:cc:d5:ad:9b:22:ce:03:1b:b1:e7:8b:
e1:cd:ee:82:0e:2f:1c:b6:77:83:a4:94:b3:1f:29:68:6c:d8:
7c:52:9c:a9:4f:80:47:77:73:95:b5:15:0a:62:4c:48:bd:7f:
0b:e2:0c:da:31:15:53:ec:95:9b:4a:7e:91:29:5b:61:0b:fd:
8c:10:a5:e1:3a:79:f4:eb:c7:16:12:a4:62:f6:5d:a4:6e:92:
3d:bf:93:ac:62:50:f2:88:9b:e6:71:23:9c:cf:63:aa:48:b9:
5c:47:bb:21:5a:d4:3c:52:f8:89:82:62:93:a9:6f:2c:ba:e0:
1a:8e:ed:28:b8:11:b7:55:60:33:bd:26:06:49:f5:60:48:b0:
b5:e3:6c:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRrtUb4+VauSjcu2HTAxHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZDZiN2QwYTYzMDM1N2JjM2MxZTBjZGRhMDZkY2E4OGEz
NDYzZWMwHhcNMjYwMzAyMDIwMDQyWhcNMjYwMzAzMDIwMDQyWjAzMTEwLwYDVQQD
Eyg3ZDk1NmYyYWE0NWNhMWVlMmNiNTdiY2E1YWQ1ODQ5NjI4NjRkZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWn7QKKLIeE8i/YjBLb9odruQ2EA
lIxbAqw5XbANiGF1x6ahUYJjv2+KEuc5A2MAm5rBmkbvfN3x7pxb6amF6FAJImGJ
a2eETuofU5UwBd6yd1eszTl0G5i5TK5oum/bU1/Kp1rk8WanEf4uAI1J6l1D/pz4
/SmwlIRQPeajEkgQ0wLKHrkGI2tJdyIvsCiDCj/pQ1KDfu8gy8co5YVJrZVrS6f8
QzPefauNfWvNxiRTBtPVAGkj8PWV48lssuHZ8a1EPGhDgReeqfUp6UDdzB1/1XaT
Wrxq1KBeYkoAhUYmCiRG4t1UauRSKSHa4rT238+g/hYEAs93YpWttf9d4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2VbyqkXKHuLLV7ylrVhJYoZN+xMB8GA1UdIwQY
MBaAFE/Wt9CmMDV7w8HgzdoG3KiKNGPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9mZjMxZjAtNzk2MC00ZGYxLTk4ODUt
ZDMxNDZiZmNkZGZmLzEvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9mZjMxZjAtNzk2MC00ZGYxLTk4ODUtZDMxNDZiZmNkZGZm
LzEvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVFlDhJw
mhSc0viWnzwB5HGkOanP4yFUqE2onFAXd1q4jos+XS7yD5wyxKfCTcpxdeZcBL+7
1j94UzJa11T63/Jm20OG+k07V7bccqfPEXegonzai/83xkpetSWz/OWo8nUJ9a/a
aojCOuSiTKC/0x4Gg8zVrZsizgMbseeL4c3ugg4vHLZ3g6SUsx8paGzYfFKcqU+A
R3dzlbUVCmJMSL1/C+IM2jEVU+yVm0p+kSlbYQv9jBCl4Tp59OvHFhKkYvZdpG6S
Pb+TrGJQ8oib5nEjnM9jqki5XEe7IVrUPFL4iYJik6lvLLrgGo7tKLgRt1VgM70m
Bkn1YEiwteNsVw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:39 2026 by rpki-client