Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
File: 9kixVYLTS9UXCp3RO4EyW6uuXjo.mft (raw, json)
Hash identifier: QYtfDZ8fZgpvXez7Lh3hvT1HLN4quqQfWzBLwfBirkg=
Subject key identifier: 76:97:B2:8B:55:0A:8F:5F:60:A6:B7:D3:90:AF:3E:BC:37:1A:B6:79
Authority key identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
Certificate issuer: /CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Certificate serial: 019CAAC67DBEDB4D44B40E72116F096374F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:00 +0000
Manifest this update: Sun 01 Mar 2026 19:01:00 +0000
Manifest next update: Mon 02 Mar 2026 19:01:00 +0000
Files and hashes: 1: 9kixVYLTS9UXCp3RO4EyW6uuXjo.crl (hash: aofjq2a3tZ1e5ETDWBxISqCij1Np1vFVRZeJ54D8QR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:7d:be:db:4d:44:b4:0e:72:11:6f:09:63:74:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Validity
Not Before: Mar 1 19:01:00 2026 GMT
Not After : Mar 2 19:01:00 2026 GMT
Subject: CN=7697b28b550a8f5f60a6b7d390af3ebc371ab679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:fb:bc:c0:88:89:40:9c:53:6d:72:3a:b8:
00:a1:39:b2:01:f0:81:13:6a:c7:0b:d0:85:bd:2d:
5a:ce:b7:6e:48:5b:a6:56:ca:b4:25:fe:76:57:38:
0b:5e:0f:03:aa:7d:20:89:a1:72:ef:79:85:bd:0b:
58:60:cf:c6:23:84:09:34:83:08:c6:16:fa:e1:d6:
75:f1:d1:74:aa:22:e6:63:01:fa:e8:88:d2:fd:1a:
37:63:cb:ff:46:cd:df:eb:ed:d9:4c:9f:b8:14:60:
72:77:82:fa:66:93:cf:c9:5d:5a:d5:8f:74:c5:37:
27:7f:4f:05:ce:bf:a7:cb:fc:c4:b6:56:a3:d0:aa:
71:a4:2d:4e:c4:3e:4f:f1:3b:7d:fb:41:89:f9:e7:
de:51:8e:e1:31:88:84:22:47:e3:2d:0a:1c:6b:99:
a3:11:28:d3:12:5b:15:2a:52:c2:01:1d:4a:84:73:
b9:de:74:84:2f:d3:5e:23:86:61:82:a8:4c:86:73:
84:29:8a:d7:dc:a8:cc:f7:47:19:7a:86:ee:26:2e:
5c:3f:9c:af:a1:1f:ff:91:52:c7:fa:79:a6:de:33:
4f:c7:fd:f2:af:8f:2d:32:47:5c:5f:90:67:ed:26:
d9:2b:87:3f:39:7d:36:4e:29:d8:ef:3a:89:1c:9f:
d4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:97:B2:8B:55:0A:8F:5F:60:A6:B7:D3:90:AF:3E:BC:37:1A:B6:79
X509v3 Authority Key Identifier:
keyid:F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:24:b7:aa:1e:ac:e5:33:3d:70:28:3f:c2:16:b9:40:f8:28:
ae:1e:6e:d9:3b:6a:07:61:65:10:b4:3c:4d:36:0d:ed:78:67:
45:81:55:01:14:3e:60:cd:4f:dc:2f:e2:be:5d:9f:43:a9:e8:
52:aa:d0:7a:6a:2e:7c:3c:c8:3c:90:b4:0d:46:95:e5:c9:bc:
c3:94:e7:41:ef:1f:28:d9:2a:78:88:6b:fb:e7:b3:74:2f:fe:
7a:a0:ab:fb:6b:e4:58:b4:ee:86:6d:b6:0b:57:b1:50:35:fd:
33:34:1d:4b:89:a1:56:f8:00:26:3b:bf:ef:0c:c0:47:16:2d:
f6:a8:1e:7f:46:4b:42:a4:94:36:30:18:5e:5b:56:1c:89:44:
21:11:6f:e7:61:52:80:9c:aa:5d:b9:f5:3c:6c:b6:6b:aa:f6:
7b:f6:a9:da:2f:0d:e9:a6:7d:b8:44:61:df:41:f9:36:c3:f2:
01:18:01:22:db:37:dd:5f:0b:ad:86:84:e8:69:92:2f:fa:22:
da:30:7a:d1:4a:13:20:4a:94:85:97:85:11:d5:b9:1b:8f:2b:
08:4b:98:b4:cd:ca:fc:3e:99:b3:88:fc:07:6f:55:f6:a8:ff:
4f:c4:c7:bb:31:2c:b0:72:47:82:b7:8a:bf:53:a8:2a:c6:d6:
16:cb:00:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxn2+201EtA5yEW8JY3T3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NDhiMTU1ODJkMzRiZDUxNzBhOWRkMTNiODEzMjViYWJh
ZTVlM2EwHhcNMjYwMzAxMTkwMTAwWhcNMjYwMzAyMTkwMTAwWjAzMTEwLwYDVQQD
Eyg3Njk3YjI4YjU1MGE4ZjVmNjBhNmI3ZDM5MGFmM2ViYzM3MWFiNjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzef7vMCIiUCcU21yOrgAoTmyAfCB
E2rHC9CFvS1azrduSFumVsq0Jf52VzgLXg8Dqn0giaFy73mFvQtYYM/GI4QJNIMI
xhb64dZ18dF0qiLmYwH66IjS/Ro3Y8v/Rs3f6+3ZTJ+4FGByd4L6ZpPPyV1a1Y90
xTcnf08Fzr+ny/zEtlaj0KpxpC1OxD5P8Tt9+0GJ+efeUY7hMYiEIkfjLQoca5mj
ESjTElsVKlLCAR1KhHO53nSEL9NeI4ZhgqhMhnOEKYrX3KjM90cZeobuJi5cP5yv
oR//kVLH+nmm3jNPx/3yr48tMkdcX5Bn7SbZK4c/OX02TinY7zqJHJ/U+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaXsotVCo9fYKa305CvPrw3GrZ5MB8GA1UdIwQY
MBaAFPZIsVWC00vVFwqd0TuBMlurrl46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWtpeFZZTFRTOVVYQ3AzUk80RXlXNnV1WGpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kOGY2NzItNTM5Zi00MDFkLTlkYzct
NjI3OTliOTAyMzFiLzEvOWtpeFZZTFRTOVVYQ3AzUk80RXlXNnV1WGpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9kOGY2NzItNTM5Zi00MDFkLTlkYzctNjI3OTliOTAyMzFi
LzEvOWtpeFZZTFRTOVVYQ3AzUk80RXlXNnV1WGpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICS3qh6s
5TM9cCg/wha5QPgorh5u2TtqB2FlELQ8TTYN7XhnRYFVARQ+YM1P3C/ivl2fQ6no
UqrQemoufDzIPJC0DUaV5cm8w5TnQe8fKNkqeIhr++ezdC/+eqCr+2vkWLTuhm22
C1exUDX9MzQdS4mhVvgAJju/7wzARxYt9qgef0ZLQqSUNjAYXltWHIlEIRFv52FS
gJyqXbn1PGy2a6r2e/ap2i8N6aZ9uERh30H5NsPyARgBIts33V8LrYaE6GmSL/oi
2jB60UoTIEqUhZeFEdW5G48rCEuYtM3K/D6Zs4j8B29V9qj/T8THuzEssHJHgreK
v1OoKsbWFssA/w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:54 2026 by rpki-client