Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File: 9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier: izIgxI/AFM1DASTYQ7OozC0xXw7o/XO8PPP/YjNRl2c=
Subject key identifier: C1:90:00:5C:E4:66:BD:95:F8:C0:50:5C:B9:4D:6F:AA:55:F7:6A:C2
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer: /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial: 019CADC78F6C1F4E05AD3E4A5DF7050FA57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number: 1583
Signing time: Mon 02 Mar 2026 09:01:02 +0000
Manifest this update: Mon 02 Mar 2026 09:01:02 +0000
Manifest next update: Tue 03 Mar 2026 09:01:02 +0000
Files and hashes: 1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: tZDslZd6mv7OUsqXvoEQHv19w72bgMw5d5tdCfdJgOM=)
2: mEgDM3l5c0LrVuCqn477ft25k3w.roa (hash: KJ2JP42lCHcxJukTZAz4D69v5GnFU1eWXwSmVHNVnQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:8f:6c:1f:4e:05:ad:3e:4a:5d:f7:05:0f:a5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f501b9e20616d686b405da906afa597635063640
Validity
Not Before: Mar 2 09:01:02 2026 GMT
Not After : Mar 3 09:01:02 2026 GMT
Subject: CN=c190005ce466bd95f8c0505cb94d6faa55f76ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bf:0c:c2:02:7f:64:ab:12:48:2c:cd:07:cf:
13:42:f6:74:19:31:ca:75:2e:20:a4:3f:f2:05:39:
2d:1f:61:d7:49:33:07:49:8a:19:41:9b:07:1c:1f:
e2:a5:55:35:2f:8d:d1:d5:7d:ca:cb:75:73:2a:4c:
71:91:12:c8:eb:ec:be:22:2e:7c:02:8f:f3:81:c7:
d8:08:06:d4:60:b7:6e:0a:2c:06:3a:c8:87:bc:51:
33:ab:19:f5:c8:77:c8:df:b2:2e:b9:f5:dd:bf:3f:
e4:49:78:64:cb:ed:d1:01:0c:b9:a7:40:1a:a7:31:
fc:ee:88:96:28:ec:d6:bb:da:87:32:28:13:fc:3a:
2f:7d:f6:ae:0f:c1:0c:3d:71:8f:66:ef:95:9f:92:
52:16:af:e7:af:e7:20:de:03:51:b3:6b:88:00:9e:
81:cf:52:66:aa:c4:ac:12:c1:b5:ea:83:bb:0c:f7:
d0:63:42:fc:dd:57:1f:98:3b:3f:93:70:c9:9e:77:
69:80:df:f1:c6:51:d2:05:9f:0c:7a:7b:60:cd:83:
bd:e9:48:8d:3b:76:bd:49:bf:3c:e1:b4:6c:c9:a7:
41:fd:81:b6:77:f5:a1:38:c6:49:0e:27:74:06:71:
fb:8c:4f:f3:f4:df:2b:b9:54:32:1a:f3:bf:5f:85:
6e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:90:00:5C:E4:66:BD:95:F8:C0:50:5C:B9:4D:6F:AA:55:F7:6A:C2
X509v3 Authority Key Identifier:
keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:84:d3:92:3a:3b:c8:11:80:ec:54:0e:c1:9d:6c:c8:fd:6e:
0d:91:e9:5d:32:06:df:52:fa:fc:e6:ed:fe:89:fd:ba:71:ad:
88:4b:63:00:30:09:8c:ad:be:3d:f8:32:12:05:fb:bc:9f:09:
d6:22:9a:f4:62:76:68:6c:2e:d2:65:78:78:64:80:14:59:74:
85:87:17:0c:2a:2e:f1:44:5b:fb:1a:fd:06:4c:19:fc:d8:fc:
1b:eb:04:10:fd:3a:93:17:c5:9c:9c:e9:d7:20:da:9c:ea:b7:
f5:77:1c:ec:7e:5b:f0:e3:bb:f5:ac:54:99:f1:4c:8f:83:6f:
24:d5:4d:f1:8d:55:2b:ba:4b:e2:b8:65:84:6f:88:a2:43:6c:
d5:53:a6:58:d2:5b:2b:0e:e3:30:a2:43:14:2c:5f:98:fa:59:
72:7b:49:71:47:4d:1e:42:45:ab:32:0c:38:01:93:1b:d8:ae:
23:41:4b:08:f6:fb:55:82:43:a0:37:8b:6f:30:bc:22:01:80:
af:6c:d0:ba:c7:48:a7:bc:6a:7c:cd:6f:80:0f:09:aa:69:c0:
53:e7:d3:87:12:a1:07:cb:b9:b6:22:17:c3:b3:0e:a4:5c:75:
05:7a:b9:e8:9d:9d:6d:0f:b8:13:4c:ab:ab:7e:fe:df:12:6e:
40:fa:0c:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx49sH04FrT5KXfcFD6V/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MDFiOWUyMDYxNmQ2ODZiNDA1ZGE5MDZhZmE1OTc2MzUw
NjM2NDAwHhcNMjYwMzAyMDkwMTAyWhcNMjYwMzAzMDkwMTAyWjAzMTEwLwYDVQQD
EyhjMTkwMDA1Y2U0NjZiZDk1ZjhjMDUwNWNiOTRkNmZhYTU1Zjc2YWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r8MwgJ/ZKsSSCzNB88TQvZ0GTHK
dS4gpD/yBTktH2HXSTMHSYoZQZsHHB/ipVU1L43R1X3Ky3VzKkxxkRLI6+y+Ii58
Ao/zgcfYCAbUYLduCiwGOsiHvFEzqxn1yHfI37IuufXdvz/kSXhky+3RAQy5p0Aa
pzH87oiWKOzWu9qHMigT/DovffauD8EMPXGPZu+Vn5JSFq/nr+cg3gNRs2uIAJ6B
z1JmqsSsEsG16oO7DPfQY0L83VcfmDs/k3DJnndpgN/xxlHSBZ8MentgzYO96UiN
O3a9Sb884bRsyadB/YG2d/WhOMZJDid0BnH7jE/z9N8ruVQyGvO/X4Vu/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGQAFzkZr2V+MBQXLlNb6pV92rCMB8GA1UdIwQY
MBaAFPUBueIGFtaGtAXakGr6WXY1BjZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83YWZjZTQtMjE4Yi00N2VkLTk1YWIt
NzVkNTg0M2FhNDg5LzEvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83YWZjZTQtMjE4Yi00N2VkLTk1YWItNzVkNTg0M2FhNDg5
LzEvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4TTkjo7
yBGA7FQOwZ1syP1uDZHpXTIG31L6/Obt/on9unGtiEtjADAJjK2+PfgyEgX7vJ8J
1iKa9GJ2aGwu0mV4eGSAFFl0hYcXDCou8URb+xr9BkwZ/Nj8G+sEEP06kxfFnJzp
1yDanOq39Xcc7H5b8OO79axUmfFMj4NvJNVN8Y1VK7pL4rhlhG+IokNs1VOmWNJb
Kw7jMKJDFCxfmPpZcntJcUdNHkJFqzIMOAGTG9iuI0FLCPb7VYJDoDeLbzC8IgGA
r2zQusdIp7xqfM1vgA8JqmnAU+fThxKhB8u5tiIXw7MOpFx1BXq56J2dbQ+4E0yr
q37+3xJuQPoMxA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:44:30 2026 by rpki-client