Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier: WNFxUXFY2S55DPccQQIqe6YY9sMExJSY4kPtqvzJj+o=
Subject key identifier: 79:1C:AE:08:84:F4:02:C4:81:8A:EA:E9:FE:45:79:F6:7B:2E:7D:77
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial: 019CA9B3AF517DB5135604D0FEB2CB86BDD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number: 0544
Signing time: Sun 01 Mar 2026 14:00:51 +0000
Manifest this update: Sun 01 Mar 2026 14:00:51 +0000
Manifest next update: Mon 02 Mar 2026 14:00:51 +0000
Files and hashes: 1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: n2qofX2DN5iZzx6Mq7qepkjyqaFWOI7U7Q9D/ISi850=)
2: JKxruJrsyQODEt0lo_2igVlEBhw.roa (hash: 2Ldq4wJQTMkIcJXiRtPhwdIrKaep4MniRxTOmuYmXUs=)
3: UrR8he9LeX1_n_grB04eKjIEfn4.roa (hash: 6VYM1BE9h3lSboPJRgPSxyvYhSPFOMNMfzzxqBF3w0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:af:51:7d:b5:13:56:04:d0:fe:b2:cb:86:bd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Validity
Not Before: Mar 1 14:00:51 2026 GMT
Not After : Mar 2 14:00:51 2026 GMT
Subject: CN=791cae0884f402c4818aeae9fe4579f67b2e7d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:68:b6:49:40:86:9b:83:cd:30:ee:1d:f1:b6:
60:f5:0e:59:bf:3d:3c:81:a7:7c:23:26:5d:dc:f8:
98:a4:50:2b:c7:b6:93:6c:9c:9b:14:52:e3:55:8c:
96:bc:80:a9:22:62:e6:16:41:c9:7f:f5:28:cc:68:
b8:ba:a7:cf:4f:b4:fd:6c:51:97:d8:eb:b7:9b:df:
d1:5f:89:83:8a:62:f5:e5:fb:8a:2e:41:bd:3b:64:
99:46:1d:18:fb:04:c6:a8:ed:af:b6:e3:1b:9e:e9:
81:07:fd:79:8b:28:cb:4f:a9:df:fb:14:f2:ba:a6:
1e:0c:8f:b4:7f:96:d7:70:66:0a:58:3e:9b:52:d4:
7c:1d:15:cc:2e:21:d2:e8:d7:c9:fb:b5:9c:1f:48:
d8:6b:d0:34:40:d5:3f:d4:ca:48:2f:89:46:9d:95:
29:02:37:4d:03:fa:75:37:0a:cb:06:e5:15:6b:ca:
97:c3:40:d7:03:86:9a:06:0b:a1:24:b4:ac:dc:5b:
26:76:71:af:22:91:99:87:c2:67:a2:b4:3c:55:34:
dc:52:3f:41:83:ec:6b:b0:a9:63:3f:08:3d:34:e2:
86:86:a0:ed:8a:38:80:69:07:a9:68:dc:ed:3e:30:
5b:ec:a4:7a:a0:4e:f1:b6:c8:ca:9c:71:8f:44:4c:
0f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1C:AE:08:84:F4:02:C4:81:8A:EA:E9:FE:45:79:F6:7B:2E:7D:77
X509v3 Authority Key Identifier:
keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:08:ea:70:92:bc:d1:a8:59:39:4d:63:8c:fb:b9:0a:d4:c0:
10:40:04:6a:63:e4:f2:d1:42:84:7c:f4:65:75:8d:33:f3:ac:
71:d8:be:b4:29:9c:7e:e5:0a:4c:b3:fc:11:92:f2:aa:90:0d:
9c:51:90:d7:10:1b:ac:f7:20:ee:a0:c0:b5:f0:b2:b8:af:c8:
17:af:7f:a5:70:86:03:ed:65:85:42:3f:1f:b9:dc:fa:d3:12:
1f:8d:e8:00:d3:af:de:c3:ee:0d:65:5f:d3:6a:5a:32:69:01:
0e:c9:7b:66:0e:21:6c:f9:cc:b8:e2:0f:28:7d:4d:08:5b:6e:
13:c9:6b:54:e9:91:28:b6:9f:5b:7b:f3:c7:2f:a8:4b:f2:12:
59:f0:c9:9a:4b:56:2a:b5:85:36:cc:27:77:7d:8b:f4:22:e0:
22:35:6b:ee:4c:4a:3d:e9:b5:9d:63:29:ca:b3:9c:4b:ed:46:
8a:0d:22:cc:b4:1b:52:df:27:90:d8:2f:16:57:b6:bc:d9:57:
99:a8:d2:5d:6f:ac:91:8d:a0:13:35:27:64:5d:58:43:7a:98:
0b:83:4d:0c:6b:a2:05:ac:0d:89:b3:ba:62:fc:6d:b6:58:67:
37:89:73:ed:b2:38:f2:dd:12:82:b9:90:63:fc:5a:4a:75:ff:
83:c5:ae:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps69RfbUTVgTQ/rLLhr3ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MWM3ZDQ3NzE4YThhNGE5ZDhjNTBiMjYwODNlNzE4NTI1
YjZjMWIwHhcNMjYwMzAxMTQwMDUxWhcNMjYwMzAyMTQwMDUxWjAzMTEwLwYDVQQD
Eyg3OTFjYWUwODg0ZjQwMmM0ODE4YWVhZTlmZTQ1NzlmNjdiMmU3ZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9mi2SUCGm4PNMO4d8bZg9Q5Zvz08
gad8IyZd3PiYpFArx7aTbJybFFLjVYyWvICpImLmFkHJf/UozGi4uqfPT7T9bFGX
2Ou3m9/RX4mDimL15fuKLkG9O2SZRh0Y+wTGqO2vtuMbnumBB/15iyjLT6nf+xTy
uqYeDI+0f5bXcGYKWD6bUtR8HRXMLiHS6NfJ+7WcH0jYa9A0QNU/1MpIL4lGnZUp
AjdNA/p1NwrLBuUVa8qXw0DXA4aaBguhJLSs3FsmdnGvIpGZh8JnorQ8VTTcUj9B
g+xrsKljPwg9NOKGhqDtijiAaQepaNztPjBb7KR6oE7xtsjKnHGPREwPrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkcrgiE9ALEgYrq6f5FefZ7Ln13MB8GA1UdIwQY
MBaAFPQcfUdxiopKnYxQsmCD5xhSW2wbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUt
NjBiMmM5ODIxMDc4LzEvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUtNjBiMmM5ODIxMDc4
LzEvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQjqcJK8
0ahZOU1jjPu5CtTAEEAEamPk8tFChHz0ZXWNM/Oscdi+tCmcfuUKTLP8EZLyqpAN
nFGQ1xAbrPcg7qDAtfCyuK/IF69/pXCGA+1lhUI/H7nc+tMSH43oANOv3sPuDWVf
02paMmkBDsl7Zg4hbPnMuOIPKH1NCFtuE8lrVOmRKLafW3vzxy+oS/ISWfDJmktW
KrWFNswnd32L9CLgIjVr7kxKPem1nWMpyrOcS+1Gig0izLQbUt8nkNgvFle2vNlX
majSXW+skY2gEzUnZF1YQ3qYC4NNDGuiBawNibO6YvxttlhnN4lz7bI48t0SgrmQ
Y/xaSnX/g8Wu5A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:43:50 2026 by rpki-client