Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier: rn6B9UQfCqhrLKccAfcOZco8j+v8Ptn7JwYyH68UF7A=
Subject key identifier: 54:49:F2:27:3F:68:E6:0C:45:C9:A9:3B:D5:0A:05:CA:F2:8B:C6:B0
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial: 019CAD2247866B2A86DB83BD3736B296A0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number: 1589
Signing time: Mon 02 Mar 2026 06:00:30 +0000
Manifest this update: Mon 02 Mar 2026 06:00:30 +0000
Manifest next update: Tue 03 Mar 2026 06:00:30 +0000
Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: iL9v1HKW3pmMKzgsZduPiqxnQ2t0fNJwAYTP42Z1dFQ=)
2: _1jwukIhOCi8MpxTLw5Kv601c_s.roa (hash: 0/3KAxQZwAWnmzvMwd4pIg6xUGZxILgfs+mT+10r3v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:47:86:6b:2a:86:db:83:bd:37:36:b2:96:a0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Validity
Not Before: Mar 2 06:00:30 2026 GMT
Not After : Mar 3 06:00:30 2026 GMT
Subject: CN=5449f2273f68e60c45c9a93bd50a05caf28bc6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:bc:3f:f5:8b:0c:6a:32:be:ee:1c:78:f9:
0b:e9:8e:d2:0e:53:b5:51:69:14:a8:5a:b5:f0:02:
56:8c:c3:83:35:75:e3:ff:9c:39:ab:ce:e8:d6:e1:
76:4c:ed:d3:2c:90:70:ac:fc:72:a1:e7:bb:9f:39:
51:8d:c4:8f:0d:69:4a:34:4a:b6:89:4b:3e:ea:11:
1f:22:11:47:1a:77:16:a7:42:23:71:f4:19:3a:3a:
d6:1d:07:0a:94:e3:43:59:2f:ce:02:e2:bc:73:c9:
a7:6e:19:03:6a:60:25:2d:12:61:1d:09:79:e6:ad:
5f:33:63:8c:18:fa:98:f5:1e:1a:1b:75:77:5b:6a:
d6:ab:a6:28:17:df:f9:0e:f9:cf:a5:22:88:d3:41:
60:74:9f:05:b9:d6:d8:91:16:f5:9f:9a:90:b0:15:
62:46:98:f6:7a:a7:95:ca:f5:68:5b:19:9a:e6:8d:
72:53:a3:df:40:b5:21:e2:d8:b3:7d:90:5a:06:2a:
5c:5b:56:7a:36:9f:b4:ef:1c:27:89:6a:28:49:5e:
2d:91:2b:f4:28:ba:3f:60:fc:d4:41:a6:30:ef:e8:
67:b5:6b:ba:0b:b3:08:c3:c7:cb:6b:d5:3c:86:c0:
61:e4:75:ca:ff:f0:03:da:aa:f5:9f:e8:65:75:d6:
cd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:49:F2:27:3F:68:E6:0C:45:C9:A9:3B:D5:0A:05:CA:F2:8B:C6:B0
X509v3 Authority Key Identifier:
keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:7d:18:e5:81:85:8a:4a:0a:18:30:b5:27:e0:31:b2:49:3e:
ba:89:19:7f:1b:dd:2e:cc:13:12:7a:1a:65:47:07:99:e2:39:
72:1f:a4:75:6c:19:ce:c8:02:bc:51:66:e9:d1:6f:78:8d:a9:
d1:2b:8e:04:ce:c5:0f:40:fe:81:28:15:6c:a8:8d:29:38:10:
9b:8c:1c:a8:1a:60:c0:81:20:f6:23:e2:5f:79:17:e8:e2:53:
4a:54:ce:d7:cd:3d:09:33:86:79:a0:12:aa:c4:30:0c:b0:e7:
1a:9d:ce:64:e0:d5:4d:d5:05:ee:25:89:5e:df:ab:d5:51:12:
78:92:82:b2:fa:d9:57:18:0e:8e:c5:72:e2:a4:80:e9:b6:4f:
32:cd:31:15:4b:62:fa:23:82:01:f5:4b:c9:10:bb:9d:f5:99:
3f:9b:d0:cd:e3:5e:32:59:fe:1a:22:74:79:78:31:61:27:6b:
66:eb:e9:9f:2c:85:c0:8b:0b:e2:82:6f:9e:49:86:3d:23:98:
32:2c:62:17:22:bd:cf:d5:fe:5f:a7:a4:4f:3e:41:4c:38:a8:
fe:83:a3:a1:5e:3d:71:d3:31:f6:a2:22:f1:1e:a2:42:e3:a8:
f1:c1:de:fd:1e:e3:d9:56:b9:c2:90:24:51:6a:ee:9a:e9:e5:
ba:2f:d3:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIkeGayqG24O9NzaylqDgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWY0NmE0MTM0MTk0ZTcyNDIzZDU3MmExYjY2ZDRhOWQy
ZTRjMTMwHhcNMjYwMzAyMDYwMDMwWhcNMjYwMzAzMDYwMDMwWjAzMTEwLwYDVQQD
Eyg1NDQ5ZjIyNzNmNjhlNjBjNDVjOWE5M2JkNTBhMDVjYWYyOGJjNmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXm8P/WLDGoyvu4cePkL6Y7SDlO1
UWkUqFq18AJWjMODNXXj/5w5q87o1uF2TO3TLJBwrPxyoee7nzlRjcSPDWlKNEq2
iUs+6hEfIhFHGncWp0IjcfQZOjrWHQcKlONDWS/OAuK8c8mnbhkDamAlLRJhHQl5
5q1fM2OMGPqY9R4aG3V3W2rWq6YoF9/5DvnPpSKI00FgdJ8FudbYkRb1n5qQsBVi
Rpj2eqeVyvVoWxma5o1yU6PfQLUh4tizfZBaBipcW1Z6Np+07xwniWooSV4tkSv0
KLo/YPzUQaYw7+hntWu6C7MIw8fLa9U8hsBh5HXK//AD2qr1n+hlddbN0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRJ8ic/aOYMRcmpO9UKBcryi8awMB8GA1UdIwQY
MBaAFNLvRqQTQZTnJCPVcqG2bUqdLkwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82NDUzYzQtNjY4Ny00ZWY5LTlmZGMt
YTg4YmI3ODA1YjA5LzEvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82NDUzYzQtNjY4Ny00ZWY5LTlmZGMtYTg4YmI3ODA1YjA5
LzEvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw30Y5YGF
ikoKGDC1J+Axskk+uokZfxvdLswTEnoaZUcHmeI5ch+kdWwZzsgCvFFm6dFveI2p
0SuOBM7FD0D+gSgVbKiNKTgQm4wcqBpgwIEg9iPiX3kX6OJTSlTO1809CTOGeaAS
qsQwDLDnGp3OZODVTdUF7iWJXt+r1VESeJKCsvrZVxgOjsVy4qSA6bZPMs0xFUti
+iOCAfVLyRC7nfWZP5vQzeNeMln+GiJ0eXgxYSdrZuvpnyyFwIsL4oJvnkmGPSOY
MixiFyK9z9X+X6ekTz5BTDio/oOjoV49cdMx9qIi8R6iQuOo8cHe/R7j2Va5wpAk
UWrumunlui/T2A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:43 2026 by rpki-client