Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
File: 9mKtW4G4BxPe0-__RCmfzXZfKrE.mft (raw, json)
Hash identifier: BR7+PqHeqLN+hENUkbRwkI52jRJnM5K+IGxYc3d4F9U=
Subject key identifier: D2:ED:25:EC:B1:CE:DC:E8:54:2A:DC:C4:B2:6D:A6:6A:A0:6D:E7:18
Authority key identifier: F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1
Certificate issuer: /CN=f662ad5b81b80713ded3efff44299fcd765f2ab1
Certificate serial: 019CA90F22211616856F979837FB1F58AAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
Manifest number: 01B7
Signing time: Sun 01 Mar 2026 11:01:06 +0000
Manifest this update: Sun 01 Mar 2026 11:01:06 +0000
Manifest next update: Mon 02 Mar 2026 11:01:06 +0000
Files and hashes: 1: 9mKtW4G4BxPe0-__RCmfzXZfKrE.crl (hash: bHMIv4aTbMdy+4giuQ60ETNV6F3eYB0Sl0I47U8+QII=)
2: jO3T1-EOvm7phVXV6edT90rIeh0.asa (hash: 6/Ul++o9f4AGDv6T10uaHtnXB8UK/eOuxrUr++EWOSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0f:22:21:16:16:85:6f:97:98:37:fb:1f:58:aa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f662ad5b81b80713ded3efff44299fcd765f2ab1
Validity
Not Before: Mar 1 11:01:06 2026 GMT
Not After : Mar 2 11:01:06 2026 GMT
Subject: CN=d2ed25ecb1cedce8542adcc4b26da66aa06de718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:9d:a1:38:8d:b2:3b:38:54:25:b2:25:c7:
e2:6b:78:3f:ae:2b:cb:cf:7e:30:09:ff:72:65:12:
0f:b4:f2:17:51:6b:9b:c1:db:0e:0b:fa:fb:21:85:
2d:aa:96:6e:8c:39:1a:08:20:cc:3a:dd:09:01:7d:
7a:81:48:0c:87:58:19:1a:e0:95:52:6e:1d:29:c0:
35:b5:85:b6:03:32:4c:0f:8c:d9:2a:2c:a4:1e:56:
0e:50:ba:e2:1e:77:c9:2c:39:b7:79:fd:b9:47:7d:
b4:7a:8a:70:22:13:45:f5:d3:7c:da:06:f4:b6:3d:
21:21:2d:a9:a4:42:3a:09:98:c8:fd:33:6a:ef:39:
0a:b6:c5:cd:5e:48:bb:9d:e3:5a:41:cb:b3:6c:e3:
51:60:68:d2:65:3a:d3:94:4c:99:e5:9c:d0:2b:b9:
22:50:84:52:6f:9e:05:fd:e2:13:36:12:0d:ae:d0:
42:bf:1d:8f:fc:f8:49:7a:52:69:1e:bf:ac:23:d4:
2d:cc:c2:c6:3f:ae:15:b8:0b:80:4e:18:2f:60:7c:
eb:08:6c:60:dd:5d:85:60:23:49:13:46:14:39:4a:
f1:91:61:dc:0d:64:ad:af:d8:ee:6c:bb:85:06:2d:
20:0e:23:16:42:45:b2:8f:98:a2:f3:cb:ca:77:76:
aa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:ED:25:EC:B1:CE:DC:E8:54:2A:DC:C4:B2:6D:A6:6A:A0:6D:E7:18
X509v3 Authority Key Identifier:
keyid:F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:82:62:5b:51:1d:37:87:e9:98:d2:b0:37:40:9a:b6:de:12:
e0:f9:6e:80:ad:77:84:1e:ac:7d:3d:27:f9:9a:26:43:7b:15:
9f:f6:ff:73:60:44:a3:a5:ed:1b:53:12:f6:df:92:bd:47:4b:
46:ef:b0:f5:fd:53:5f:65:6c:cd:86:db:ec:50:00:50:5f:72:
2a:64:a7:38:45:5c:20:7d:24:32:4b:76:32:60:78:0d:33:ad:
c8:e9:53:60:da:56:f6:52:58:49:ed:17:a3:6a:eb:de:67:f2:
c5:16:46:58:17:f2:1d:9f:52:46:6a:7b:d7:2c:a8:ef:e9:c1:
96:bf:98:84:ae:af:2d:6b:bd:3f:f6:89:f9:08:5c:71:5e:90:
67:30:c9:81:54:40:d7:7a:1a:3e:c7:b6:6c:0c:e9:d3:0b:1d:
ee:81:49:ea:ed:03:a7:e9:7a:28:e6:f9:c5:cb:42:14:8c:84:
b4:8c:9e:29:ce:5b:c1:c4:5f:dc:99:f8:92:39:71:18:06:55:
f0:c5:4e:b1:1e:7e:8d:fc:20:8c:dd:28:34:3c:c3:66:93:c1:
2e:d3:c5:c6:ae:b8:81:07:25:71:41:69:ab:d3:e9:bb:6c:05:
82:d9:5d:87:25:ea:c2:a4:51:47:b6:2b:22:68:9a:8b:73:c8:
c9:71:aa:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypDyIhFhaFb5eYN/sfWKrwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NjJhZDViODFiODA3MTNkZWQzZWZmZjQ0Mjk5ZmNkNzY1
ZjJhYjEwHhcNMjYwMzAxMTEwMTA2WhcNMjYwMzAyMTEwMTA2WjAzMTEwLwYDVQQD
EyhkMmVkMjVlY2IxY2VkY2U4NTQyYWRjYzRiMjZkYTY2YWEwNmRlNzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV2doTiNsjs4VCWyJcfia3g/rivL
z34wCf9yZRIPtPIXUWubwdsOC/r7IYUtqpZujDkaCCDMOt0JAX16gUgMh1gZGuCV
Um4dKcA1tYW2AzJMD4zZKiykHlYOULriHnfJLDm3ef25R320eopwIhNF9dN82gb0
tj0hIS2ppEI6CZjI/TNq7zkKtsXNXki7neNaQcuzbONRYGjSZTrTlEyZ5ZzQK7ki
UIRSb54F/eITNhINrtBCvx2P/PhJelJpHr+sI9QtzMLGP64VuAuAThgvYHzrCGxg
3V2FYCNJE0YUOUrxkWHcDWStr9jubLuFBi0gDiMWQkWyj5ii88vKd3aq7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLtJeyxztzoVCrcxLJtpmqgbecYMB8GA1UdIwQY
MBaAFPZirVuBuAcT3tPv/0Qpn812XyqxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW1LdFc0RzRCeFBlMC1fX1JDbWZ6WFpmS3JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80MDhhMzEtY2Q3ZS00NzlmLWJkMmEt
YTY2MGZhZWViMWUyLzEvOW1LdFc0RzRCeFBlMC1fX1JDbWZ6WFpmS3JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80MDhhMzEtY2Q3ZS00NzlmLWJkMmEtYTY2MGZhZWViMWUy
LzEvOW1LdFc0RzRCeFBlMC1fX1JDbWZ6WFpmS3JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYJiW1Ed
N4fpmNKwN0Catt4S4PlugK13hB6sfT0n+ZomQ3sVn/b/c2BEo6XtG1MS9t+SvUdL
Ru+w9f1TX2VszYbb7FAAUF9yKmSnOEVcIH0kMkt2MmB4DTOtyOlTYNpW9lJYSe0X
o2rr3mfyxRZGWBfyHZ9SRmp71yyo7+nBlr+YhK6vLWu9P/aJ+QhccV6QZzDJgVRA
13oaPse2bAzp0wsd7oFJ6u0Dp+l6KOb5xctCFIyEtIyeKc5bwcRf3Jn4kjlxGAZV
8MVOsR5+jfwgjN0oNDzDZpPBLtPFxq64gQclcUFpq9Ppu2wFgtldhyXqwqRRR7Yr
Imiai3PIyXGqKg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:14:33 2026 by rpki-client