Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier: rSlJSTWeEsRB/M2UG800/5R+XHa65MijQCsLUjNoYlU=
Subject key identifier: BE:38:3E:9C:FE:4C:87:AA:ED:92:4F:36:17:15:41:30:AF:22:49:E8
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 01A0E99B7EE65FE7751C0D544656B263677D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number: 1194
Signing time: Mon 28 Sep 2026 20:01:16 +0000
Manifest this update: Mon 28 Sep 2026 20:01:16 +0000
Manifest next update: Tue 29 Sep 2026 20:01:16 +0000
Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: dG3hTVeW9Sljq/+dlW9/4V6KF258nq96yI9SwfwRSBA=)
2: i1q-5ppGHZKen0mg4iu01mYnQM0.roa (hash: sIuyBrADQrDmfb4gofoZhceJ2ljMvz5t7ov19sRqXKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9b:7e:e6:5f:e7:75:1c:0d:54:46:56:b2:63:67:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: Sep 28 20:01:16 2026 GMT
Not After : Sep 29 20:01:16 2026 GMT
Subject: CN=be383e9cfe4c87aaed924f3617154130af2249e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8f:52:c0:dc:77:62:80:34:a5:e9:6b:6f:23:
9b:fc:b1:e4:6d:34:27:8d:16:a9:09:3d:57:a5:e1:
da:bc:6f:6e:21:3e:bc:50:21:4f:da:74:23:c8:ba:
bb:ca:f9:e3:53:ad:bd:44:fc:1c:d6:7a:86:2d:45:
07:d7:ec:43:38:fc:96:d2:53:34:dc:08:83:f3:fb:
46:e9:b7:bd:58:86:6d:e3:cc:47:4f:a5:13:06:c7:
a9:ca:54:d7:72:e9:99:a1:25:d9:a9:2a:2c:fa:61:
26:33:7f:69:8b:41:49:b3:aa:c3:cc:4f:fd:3f:81:
cd:ee:89:1e:26:d7:b9:8e:58:74:98:35:bf:63:80:
b7:50:e4:ce:10:f8:f5:11:b7:b3:c7:85:c1:54:81:
d7:2d:ca:1f:e2:5c:7a:f0:b2:30:9a:0f:e0:17:8e:
e9:77:7b:8e:9e:78:2a:37:e1:94:60:db:d9:db:41:
a9:67:5f:f6:a6:74:82:d9:4a:c1:ec:e0:ce:2d:ae:
db:57:e3:96:3c:ba:be:df:f5:ac:6b:42:11:3b:ff:
af:33:a1:52:e3:7e:7c:b0:62:35:cb:7d:32:56:43:
44:84:a6:60:e6:14:d0:87:de:d9:66:33:34:86:28:
c8:28:d8:53:80:36:22:12:0c:f7:60:4f:2b:5d:05:
6d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:38:3E:9C:FE:4C:87:AA:ED:92:4F:36:17:15:41:30:AF:22:49:E8
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:64:28:5d:2c:81:62:db:63:2b:4e:20:76:33:45:dc:d5:32:
1e:5a:80:1f:28:08:27:c5:b8:89:8c:62:4e:13:d2:62:62:93:
5c:d4:cd:72:a6:43:87:8d:d5:a4:1d:36:7d:08:e9:06:8b:d8:
bc:0e:81:03:e0:b5:98:dd:d1:87:2f:e4:22:b9:3f:81:9c:44:
68:d9:97:eb:c3:a1:d5:96:c3:7a:3b:ff:c0:f6:8b:a7:f7:96:
ee:4f:7c:89:68:e4:10:ed:2e:7a:92:df:97:43:0c:11:b1:d4:
85:23:cb:a1:0d:16:93:39:7d:e9:78:de:28:26:7e:0c:44:02:
a9:84:eb:99:a3:57:c9:f2:ee:55:58:4b:f5:7e:38:9f:84:44:
c8:58:4c:a2:e3:07:25:0d:3b:f9:79:dd:3b:4b:48:ed:77:9c:
d9:20:ee:89:8b:d9:24:13:93:a7:d0:09:3a:bf:7d:5a:3a:f1:
3e:e2:70:1b:80:3a:8f:33:22:cf:90:75:dc:94:7b:88:b8:76:
a9:43:9d:60:2b:9a:a5:81:fc:11:e6:66:f0:c4:7e:f5:74:b5:
99:6c:5e:ad:79:4d:e5:92:cf:93:eb:cc:30:53:fc:57:5d:94:
22:20:ab:72:53:9a:29:3a:d8:e4:72:99:7c:b8:5b:a9:61:a5:
f7:99:5e:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpm37mX+d1HA1URlayY2d9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTQxOWUzNzAwYTM2YmEyYjAzOTA2YzlmOGY0ZDJkZmQ4
NDgwNzAwHhcNMjYwOTI4MjAwMTE2WhcNMjYwOTI5MjAwMTE2WjAzMTEwLwYDVQQD
EyhiZTM4M2U5Y2ZlNGM4N2FhZWQ5MjRmMzYxNzE1NDEzMGFmMjI0OWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY9SwNx3YoA0pelrbyOb/LHkbTQn
jRapCT1XpeHavG9uIT68UCFP2nQjyLq7yvnjU629RPwc1nqGLUUH1+xDOPyW0lM0
3AiD8/tG6be9WIZt48xHT6UTBsepylTXcumZoSXZqSos+mEmM39pi0FJs6rDzE/9
P4HN7okeJte5jlh0mDW/Y4C3UOTOEPj1Ebezx4XBVIHXLcof4lx68LIwmg/gF47p
d3uOnngqN+GUYNvZ20GpZ1/2pnSC2UrB7ODOLa7bV+OWPLq+3/Wsa0IRO/+vM6FS
4358sGI1y30yVkNEhKZg5hTQh97ZZjM0hijIKNhTgDYiEgz3YE8rXQVt6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL44Ppz+TIeq7ZJPNhcVQTCvIknoMB8GA1UdIwQY
MBaAFPZUGeNwCja6KwOQbJ+PTS39hIBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYt
ZDRiNzIzZWQ3ODFjLzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYtZDRiNzIzZWQ3ODFj
LzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2QoXSyB
YttjK04gdjNF3NUyHlqAHygIJ8W4iYxiThPSYmKTXNTNcqZDh43VpB02fQjpBovY
vA6BA+C1mN3Rhy/kIrk/gZxEaNmX68Oh1ZbDejv/wPaLp/eW7k98iWjkEO0uepLf
l0MMEbHUhSPLoQ0Wkzl96XjeKCZ+DEQCqYTrmaNXyfLuVVhL9X44n4REyFhMouMH
JQ07+XndO0tI7Xec2SDuiYvZJBOTp9AJOr99WjrxPuJwG4A6jzMiz5B13JR7iLh2
qUOdYCuapYH8EeZm8MR+9XS1mWxerXlN5ZLPk+vMMFP8V12UIiCrclOaKTrY5HKZ
fLhbqWGl95le9Q==
-----END CERTIFICATE-----
Generated at Tue Sep 29 00:41:54 2026 by rpki-client