Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
File: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft (raw, json)
Hash identifier: REDbpzfb6TEZWJ140Sojtib2wfSDqFrusYPhMQNivyY=
Subject key identifier: 4F:69:EC:E3:5F:C7:27:1E:C9:AA:D7:73:F9:3B:F3:A2:D9:26:F6:19
Authority key identifier: F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
Certificate issuer: /CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Certificate serial: 019CAC7DE18EB248D9F6D4DB6677FD00459E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
Manifest number: 046A
Signing time: Mon 02 Mar 2026 03:00:56 +0000
Manifest this update: Mon 02 Mar 2026 03:00:56 +0000
Manifest next update: Tue 03 Mar 2026 03:00:56 +0000
Files and hashes: 1: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl (hash: TBekxx7IrCdY1iB+3Z+4G/VA1xulOtYs+bOpEUuaIvM=)
2: Z5Bt0mcpjuYCBhTBe_0r3j_HEOE.roa (hash: CQtnMCBgc31J7ELcq2ticHIWUxTxloi8VsRDj7ga9wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:e1:8e:b2:48:d9:f6:d4:db:66:77:fd:00:45:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Validity
Not Before: Mar 2 03:00:56 2026 GMT
Not After : Mar 3 03:00:56 2026 GMT
Subject: CN=4f69ece35fc7271ec9aad773f93bf3a2d926f619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9b:b5:2e:df:a5:f0:df:cc:aa:cf:19:2e:f9:
cf:b3:a3:0a:fb:61:fa:64:b9:df:45:10:2f:97:71:
69:4c:db:1b:3e:cb:19:b3:fa:c7:60:c3:50:e3:eb:
22:fe:61:31:84:61:b5:c4:2b:69:59:5d:c5:70:9d:
28:8b:e6:6f:6b:6b:5d:11:46:63:d1:08:ab:2d:ca:
d1:23:9a:4c:0b:ee:e4:d5:1a:3f:39:c5:bd:0b:36:
65:e2:44:37:09:d8:01:b9:7e:c3:10:6e:4f:fb:19:
b3:77:05:9f:e1:d2:ac:e5:4b:34:2d:27:c0:91:82:
44:2f:a5:da:31:18:00:3f:b4:1c:71:bd:75:4a:13:
4f:6f:f4:1a:ab:d6:fc:57:52:c7:69:3a:4f:ba:de:
17:bb:e2:7e:3a:09:bb:83:a7:af:a5:14:a0:5f:2d:
59:28:64:bd:70:5b:27:6c:8c:8c:34:c2:a0:15:ed:
3b:77:12:b3:b6:02:4b:d4:3e:4a:34:b2:c9:30:78:
9f:89:0d:97:c4:29:2b:a1:fc:05:04:1a:2a:05:3d:
6f:99:cc:36:fc:38:fa:05:2a:1b:21:8e:c7:53:10:
7b:71:85:49:2e:1a:e5:06:f7:df:26:b5:5a:a8:cd:
24:6f:4a:bc:34:f8:87:d6:06:1e:31:90:e8:28:1a:
c1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:69:EC:E3:5F:C7:27:1E:C9:AA:D7:73:F9:3B:F3:A2:D9:26:F6:19
X509v3 Authority Key Identifier:
keyid:F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d3:c5:20:43:51:68:31:b9:dd:c0:d7:d6:48:9b:d9:9b:03:
e6:35:f2:3f:ef:5c:d5:96:91:71:e8:38:b6:41:af:a5:41:33:
6a:18:91:ef:3c:bc:fa:39:7f:20:aa:1c:c0:74:e7:3a:57:23:
9d:90:87:fa:57:9a:83:47:2b:d2:42:df:c5:42:77:8c:2c:c9:
4f:81:13:a3:32:12:e3:19:55:16:28:28:3d:7d:cb:c6:95:44:
b2:2a:b1:25:70:60:95:e5:ea:8c:37:43:a0:40:25:9a:1e:41:
70:be:4b:7f:84:67:fe:3c:07:1d:c7:ca:f8:a5:50:db:e9:45:
e2:78:ab:34:57:db:71:85:5e:7b:8c:9c:d0:e6:f8:5c:e1:ad:
0f:c2:10:8a:2c:24:c0:9a:57:07:bc:90:60:f2:43:e1:75:37:
eb:3a:ac:cc:67:83:88:dc:a1:be:e7:26:23:b4:89:9b:10:e4:
18:a8:00:af:0d:a8:8f:1d:b5:ec:60:e3:a0:31:7d:62:0e:6c:
87:e5:a9:b1:38:06:ff:2f:93:e9:8d:b2:78:d6:2a:24:42:91:
49:f5:ea:14:09:32:1c:2a:2c:d0:97:59:5f:fa:6c:74:44:01:
ba:c4:34:0b:7b:0a:e8:22:7e:8f:16:bb:7b:6c:e3:8e:9e:26:
c3:63:a7:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfeGOskjZ9tTbZnf9AEWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWZiMjRjZTY3YzIxMTI5N2IwNjVjNjdmMWI4MjA5Yjk5
NDRiMGYwHhcNMjYwMzAyMDMwMDU2WhcNMjYwMzAzMDMwMDU2WjAzMTEwLwYDVQQD
Eyg0ZjY5ZWNlMzVmYzcyNzFlYzlhYWQ3NzNmOTNiZjNhMmQ5MjZmNjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5u1Lt+l8N/Mqs8ZLvnPs6MK+2H6
ZLnfRRAvl3FpTNsbPssZs/rHYMNQ4+si/mExhGG1xCtpWV3FcJ0oi+Zva2tdEUZj
0QirLcrRI5pMC+7k1Ro/OcW9CzZl4kQ3CdgBuX7DEG5P+xmzdwWf4dKs5Us0LSfA
kYJEL6XaMRgAP7Qccb11ShNPb/Qaq9b8V1LHaTpPut4Xu+J+Ogm7g6evpRSgXy1Z
KGS9cFsnbIyMNMKgFe07dxKztgJL1D5KNLLJMHifiQ2XxCkrofwFBBoqBT1vmcw2
/Dj6BSobIY7HUxB7cYVJLhrlBvffJrVaqM0kb0q8NPiH1gYeMZDoKBrBUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9p7ONfxyceyarXc/k786LZJvYZMB8GA1UdIwQY
MBaAFPafskzmfCESl7Blxn8bggm5lEsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zZTZiMjYtYTE0Ni00MmNmLTgyZjMt
OWU1MTM4ZTEyMGM5LzEvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zZTZiMjYtYTE0Ni00MmNmLTgyZjMtOWU1MTM4ZTEyMGM5
LzEvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9PFIENR
aDG53cDX1kib2ZsD5jXyP+9c1ZaRceg4tkGvpUEzahiR7zy8+jl/IKocwHTnOlcj
nZCH+leag0cr0kLfxUJ3jCzJT4ETozIS4xlVFigoPX3LxpVEsiqxJXBgleXqjDdD
oEAlmh5BcL5Lf4Rn/jwHHcfK+KVQ2+lF4nirNFfbcYVee4yc0Ob4XOGtD8IQiiwk
wJpXB7yQYPJD4XU36zqszGeDiNyhvucmI7SJmxDkGKgArw2ojx217GDjoDF9Yg5s
h+WpsTgG/y+T6Y2yeNYqJEKRSfXqFAkyHCos0JdZX/psdEQBusQ0C3sK6CJ+jxa7
e2zjjp4mw2OnpA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:04 2026 by rpki-client