Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
File: r9I8xVrurzN-23Pq4ltZCXoneEw.mft (raw, json)
Hash identifier: txfJze8+6jc3Mhp1JhxjTWRPizv0pzycxEm71rJIhJQ=
Subject key identifier: 0A:D1:E6:9F:73:F1:55:51:B5:AA:F2:99:CB:B8:8D:50:AA:9B:13:1C
Authority key identifier: AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
Certificate issuer: /CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Certificate serial: 019CADC79A92F3477ECED6BA1F4C5CC75565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 09:01:05 +0000
Manifest this update: Mon 02 Mar 2026 09:01:05 +0000
Manifest next update: Tue 03 Mar 2026 09:01:05 +0000
Files and hashes: 1: EgkLrTbqfCqKtc1_HO_4N3RqgDA.roa (hash: hSie2Ig7NXZ8GW1BlGvPkiht1lHg7Q/uBsfmB2XjW4k=)
2: r9I8xVrurzN-23Pq4ltZCXoneEw.crl (hash: 4/whiZPDQsSoQm7roDQWBvrJrKVIpxrzzQc4D5Q4yXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:9a:92:f3:47:7e:ce:d6:ba:1f:4c:5c:c7:55:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Validity
Not Before: Mar 2 09:01:05 2026 GMT
Not After : Mar 3 09:01:05 2026 GMT
Subject: CN=0ad1e69f73f15551b5aaf299cbb88d50aa9b131c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:54:93:72:ff:96:4b:12:84:b9:ab:68:55:
b1:da:6e:c7:78:51:90:9d:10:04:1d:c5:cb:d3:72:
9e:ba:b5:b7:8c:61:56:81:1d:43:e6:83:b7:ee:0e:
b9:c9:fe:09:c0:d6:45:9a:99:49:95:2a:43:75:ba:
29:e4:ba:09:53:01:08:c4:6c:21:f4:ae:be:6a:6b:
49:e5:a0:82:58:06:e5:13:ef:b3:e5:60:99:0a:8c:
81:61:90:b7:2f:59:00:a2:ef:8e:9d:ff:99:f2:17:
20:53:c7:cd:b8:fb:bc:f6:bb:77:8f:b5:37:a5:fd:
0e:1f:bc:41:26:e5:1e:41:3b:b4:d9:f6:ce:8e:09:
c8:a8:5a:d7:2e:6e:31:96:fb:81:6f:ee:fc:cf:37:
97:be:8b:09:90:d3:2a:04:e5:ff:69:79:47:25:76:
58:80:55:eb:65:1e:c1:4b:2c:13:ac:6b:70:9e:43:
d5:cc:e2:1c:cb:9a:e7:4b:b4:44:a9:f9:50:e5:46:
73:63:95:13:bd:43:ea:21:48:11:aa:ce:1b:e6:f8:
8c:6d:33:6e:a6:94:cb:dc:ad:c6:13:7d:be:54:90:
ed:af:7d:93:a2:3f:b0:af:6a:56:3c:3d:b8:6e:79:
1a:c4:97:9b:13:21:50:40:b6:32:ef:34:18:b2:c4:
ae:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D1:E6:9F:73:F1:55:51:B5:AA:F2:99:CB:B8:8D:50:AA:9B:13:1C
X509v3 Authority Key Identifier:
keyid:AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2d:1b:35:01:dc:d2:fd:b4:d5:2f:44:e9:89:df:6a:33:6c:
de:7d:68:8e:2d:8c:59:0a:c7:50:98:be:b6:65:05:0b:2c:0a:
5f:c8:36:d5:22:24:4f:50:cd:83:ed:fa:1d:c2:2b:1e:e9:d2:
18:15:7b:7b:ae:ed:57:6b:42:12:ab:2a:dd:0c:01:eb:39:5f:
45:aa:8d:c3:4d:20:a9:60:52:f8:74:77:f8:e7:6a:92:a4:89:
a5:d7:05:bb:4e:a6:99:81:db:fc:db:c8:b1:ab:a8:ce:8a:6d:
e7:05:25:83:96:18:ec:41:9c:cc:53:74:f4:16:89:3d:eb:4e:
0b:22:05:02:96:07:41:a8:31:9a:e7:b7:04:ee:a2:23:92:96:
9f:e2:43:76:61:a4:7a:69:14:42:c2:b2:43:2b:ad:23:e9:c8:
fb:38:34:c2:5a:ca:fe:67:06:5f:1f:89:a3:75:b2:5a:2d:3c:
e8:6f:18:dc:cb:74:36:28:af:62:78:95:df:2f:37:7c:05:3f:
65:65:1c:4d:19:c3:ea:22:cd:32:5f:e2:ee:6b:01:50:4e:be:
0f:f6:cd:71:2b:5f:9c:6f:47:ac:d8:7e:b3:a4:b4:83:13:aa:
e7:95:ee:e8:0b:db:da:d8:76:28:eb:df:1d:d4:ff:6e:d6:56:
6d:83:7b:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx5qS80d+zta6H0xcx1VlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZDIzY2M1NWFlZWFmMzM3ZWRiNzNlYWUyNWI1OTA5N2Ey
Nzc4NGMwHhcNMjYwMzAyMDkwMTA1WhcNMjYwMzAzMDkwMTA1WjAzMTEwLwYDVQQD
EygwYWQxZTY5ZjczZjE1NTUxYjVhYWYyOTljYmI4OGQ1MGFhOWIxMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JpUk3L/lksShLmraFWx2m7HeFGQ
nRAEHcXL03KeurW3jGFWgR1D5oO37g65yf4JwNZFmplJlSpDdbop5LoJUwEIxGwh
9K6+amtJ5aCCWAblE++z5WCZCoyBYZC3L1kAou+Onf+Z8hcgU8fNuPu89rt3j7U3
pf0OH7xBJuUeQTu02fbOjgnIqFrXLm4xlvuBb+78zzeXvosJkNMqBOX/aXlHJXZY
gFXrZR7BSywTrGtwnkPVzOIcy5rnS7REqflQ5UZzY5UTvUPqIUgRqs4b5viMbTNu
ppTL3K3GE32+VJDtr32Toj+wr2pWPD24bnkaxJebEyFQQLYy7zQYssSuKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArR5p9z8VVRtarymcu4jVCqmxMcMB8GA1UdIwQY
MBaAFK/SPMVa7q8zfttz6uJbWQl6J3hMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjlJOHhWcnVyek4tMjNQcTRsdFpDWG9uZUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81M2Y0NTgtNzYxYS00MzgyLTgyN2Mt
NDk0ZjA4YzIxNDk3LzEvcjlJOHhWcnVyek4tMjNQcTRsdFpDWG9uZUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy81M2Y0NTgtNzYxYS00MzgyLTgyN2MtNDk0ZjA4YzIxNDk3
LzEvcjlJOHhWcnVyek4tMjNQcTRsdFpDWG9uZUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoC0bNQHc
0v201S9E6YnfajNs3n1oji2MWQrHUJi+tmUFCywKX8g21SIkT1DNg+36HcIrHunS
GBV7e67tV2tCEqsq3QwB6zlfRaqNw00gqWBS+HR3+OdqkqSJpdcFu06mmYHb/NvI
sauozopt5wUlg5YY7EGczFN09BaJPetOCyIFApYHQagxmue3BO6iI5KWn+JDdmGk
emkUQsKyQyutI+nI+zg0wlrK/mcGXx+Jo3WyWi086G8Y3Mt0NiivYniV3y83fAU/
ZWUcTRnD6iLNMl/i7msBUE6+D/bNcStfnG9HrNh+s6S0gxOq55Xu6Avb2th2KOvf
HdT/btZWbYN72A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:52:41 2026 by rpki-client