Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: TJRVHcmySK1EmXpesJ5SU7asF+uSTnkF1qLn1L8Z+u8=
Subject key identifier: D4:46:D9:A0:FB:74:5D:7C:67:EC:8D:12:5A:6B:49:4E:56:1B:A2:26
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 019CAC7E5E100E019D72D49DFC8B168E37DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 0930
Signing time: Mon 02 Mar 2026 03:01:28 +0000
Manifest this update: Mon 02 Mar 2026 03:01:28 +0000
Manifest next update: Tue 03 Mar 2026 03:01:28 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: eScore0rUpNBEOZaIHky89dkWju4bOqNJWcY/c3Pcyk=)
2: umIyQ32hARkovH7pXTjPbQsyUAw.roa (hash: Vykeq8JG9Smu2I4EYLNs8vno3gc9BXMxlVVP02kGN2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:5e:10:0e:01:9d:72:d4:9d:fc:8b:16:8e:37:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Mar 2 03:01:28 2026 GMT
Not After : Mar 3 03:01:28 2026 GMT
Subject: CN=d446d9a0fb745d7c67ec8d125a6b494e561ba226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:c6:75:c5:d7:05:6a:7d:6c:b0:3c:79:6b:
f3:ba:1e:fd:b4:43:ca:4a:bf:be:5e:a5:ac:22:de:
86:3c:ad:d3:bd:9b:7b:e0:78:25:c9:ae:1c:62:d5:
36:e6:ff:7d:c2:77:62:89:48:8f:3d:64:87:ca:37:
e2:c3:08:b1:8d:d3:63:6d:2c:11:3b:c3:d9:0a:b5:
d0:33:87:11:1e:c4:03:18:a9:ec:26:ad:cc:17:63:
34:1e:16:d4:3c:c2:0f:23:0a:81:f7:5e:60:07:d5:
08:c1:52:87:e2:c0:da:5a:75:d6:d3:03:42:d9:76:
0a:c8:12:eb:7a:7b:63:67:ce:9e:5f:0d:17:8b:4e:
48:40:93:7f:f5:fe:ca:55:e9:f0:81:42:35:b5:ae:
45:e2:fe:4b:52:1f:fa:8f:03:23:f8:e4:b8:6c:16:
63:ed:f1:a8:49:af:c0:b7:b5:b8:70:77:3a:2b:f7:
8d:eb:47:7d:ef:25:6f:e2:0c:be:6c:9d:7f:6a:a4:
22:e9:cd:86:0f:b3:56:1b:af:87:51:ff:42:50:ba:
3d:6d:0c:69:42:13:e7:5f:22:0b:6d:c2:d4:e6:77:
e9:bc:fd:a3:a1:1b:b5:eb:9b:12:9f:bb:6b:d2:0a:
4f:0c:1a:04:8a:ab:ed:bc:ff:cc:a8:2c:c1:78:90:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:46:D9:A0:FB:74:5D:7C:67:EC:8D:12:5A:6B:49:4E:56:1B:A2:26
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2c:31:73:26:34:1d:ac:e1:80:18:2b:f2:b7:2c:f4:f1:0b:
c3:d4:50:2d:74:dd:fb:2f:52:9d:86:ef:48:26:48:fc:a6:51:
7c:2c:a5:e9:8e:c4:d4:88:3f:9d:23:f3:c6:2a:e5:da:20:dc:
29:c5:a2:b6:e2:c6:6b:05:c4:6a:93:d4:5e:18:73:a5:be:7b:
c8:b4:ea:ba:c5:14:35:72:9e:c3:c2:ef:0f:1a:28:f8:29:e1:
fc:21:39:5d:c4:05:dd:11:0d:9d:78:03:d7:12:74:f8:e1:77:
76:14:72:72:94:df:5d:b6:97:38:8f:31:31:a9:55:6d:90:0d:
02:bb:83:db:a9:6e:b7:81:48:79:b5:bd:4b:4c:f1:d4:87:e7:
79:8d:9d:1e:2e:7c:25:c3:c8:2f:02:3a:dd:ab:86:53:3d:53:
83:a4:8e:b8:6f:fd:0e:1e:12:27:da:e8:e9:eb:81:a9:73:f0:
46:be:33:62:ea:e9:04:94:8d:15:f8:83:a4:af:0f:88:19:7d:
e1:81:35:e9:ab:65:fd:d6:77:57:79:b1:29:07:aa:13:92:ba:
d9:6d:8b:b0:d6:94:f0:57:cf:bc:de:7a:17:ea:e8:57:ed:75:
27:b4:d3:23:99:3e:0c:5e:a4:1f:9d:fa:8c:88:5f:26:f4:aa:
17:70:0b:d5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZysfl4QDgGdctSd/IsWjjfbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhY2Y1ZTFlOTI4ODg2MDc4MGQxMmUzNGE0YWQzYjQwZDk4
NDgzZmMwHhcNMjYwMzAyMDMwMTI4WhcNMjYwMzAzMDMwMTI4WjAzMTEwLwYDVQQD
EyhkNDQ2ZDlhMGZiNzQ1ZDdjNjdlYzhkMTI1YTZiNDk0ZTU2MWJhMjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuirGdcXXBWp9bLA8eWvzuh79tEPK
Sr++XqWsIt6GPK3TvZt74Hglya4cYtU25v99wndiiUiPPWSHyjfiwwixjdNjbSwR
O8PZCrXQM4cRHsQDGKnsJq3MF2M0HhbUPMIPIwqB915gB9UIwVKH4sDaWnXW0wNC
2XYKyBLrentjZ86eXw0Xi05IQJN/9f7KVenwgUI1ta5F4v5LUh/6jwMj+OS4bBZj
7fGoSa/At7W4cHc6K/eN60d97yVv4gy+bJ1/aqQi6c2GD7NWG6+HUf9CULo9bQxp
QhPnXyILbcLU5nfpvP2joRu165sSn7tr0gpPDBoEiqvtvP/MqCzBeJCCaQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNRG2aD7dF18Z+yNElprSU5WG6ImMB8GA1UdIwQY
MBaAFPrPXh6SiIYHgNEuNKStO0DZhIP8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zOWVIcEtJaGdlQTBTNDBwSzA3UU5tRWdfdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvMzljNjIyLTQ4NjctNGZiMy04ZWY3
LTVkMjdmOWRiZWQ2Ni8xLzEtczllSHBLSWhnZUEwUzQwcEswN1FObUVnX3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY3LzM5YzYyMi00ODY3LTRmYjMtOGVmNy01ZDI3ZjlkYmVk
NjYvMS8xLXM5ZUhwS0loZ2VBMFM0MHBLMDdRTm1FZ193LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSwx
cyY0HazhgBgr8rcs9PELw9RQLXTd+y9SnYbvSCZI/KZRfCyl6Y7E1Ig/nSPzxirl
2iDcKcWituLGawXEapPUXhhzpb57yLTqusUUNXKew8LvDxoo+Cnh/CE5XcQF3REN
nXgD1xJ0+OF3dhRycpTfXbaXOI8xMalVbZANAruD26lut4FIebW9S0zx1IfneY2d
Hi58JcPILwI63auGUz1Tg6SOuG/9Dh4SJ9ro6euBqXPwRr4zYurpBJSNFfiDpK8P
iBl94YE16atl/dZ3V3mxKQeqE5K62W2LsNaU8FfPvN56F+roV+11J7TTI5k+DF6k
H536jIhfJvSqF3AL1Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:00 2026 by rpki-client