Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
File: 9VW6bis9tVIdvHBipYwW3aG58i0.mft (raw, json)
Hash identifier: zoPZpooWzDsTQbT7HX+8Z3a90f6MUIQNM4aGoitRAL0=
Subject key identifier: 15:70:68:7D:83:61:0A:43:20:56:D0:57:E3:02:A1:46:91:CB:AD:55
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 019CAB3427D9FA5238AEAE2A0DCCB637D1B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
Manifest number: 0607
Signing time: Sun 01 Mar 2026 21:00:47 +0000
Manifest this update: Sun 01 Mar 2026 21:00:47 +0000
Manifest next update: Mon 02 Mar 2026 21:00:47 +0000
Files and hashes: 1: 9VW6bis9tVIdvHBipYwW3aG58i0.crl (hash: Ot+vf1w+gs5YFfVVzbjdYz8Vh+nAjJSM2T/s58Ij+Pc=)
2: cyWhzyh3zLHJFuzJ5qvmESBkuxg.roa (hash: nSoHpM2xTBolqQJtZsO8W8SsMxuMlo/mxOm1BoRL8ec=)
3: zlPMF36fK507KHhaEr_DLJ54RXA.roa (hash: kLxUmeXAHI9feHJRDQlAlUFvp1o7+yM0NCeSQpcomMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:27:d9:fa:52:38:ae:ae:2a:0d:cc:b6:37:d1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: Mar 1 21:00:47 2026 GMT
Not After : Mar 2 21:00:47 2026 GMT
Subject: CN=1570687d83610a432056d057e302a14691cbad55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2a:ce:01:52:6f:c2:b6:20:23:68:a2:6c:d2:
41:75:9e:8d:c9:3f:1c:bc:4e:f7:ac:a4:72:ef:ac:
ad:8c:11:dc:bc:10:58:1b:8f:78:5a:c8:b5:92:bd:
26:a8:75:53:0d:29:ad:01:28:19:c7:51:d7:1f:96:
ca:20:89:f4:0f:54:bf:f4:7a:a8:15:f1:58:75:22:
9d:eb:06:57:74:ca:38:6c:09:15:03:c5:e6:b3:51:
d4:9e:ad:ba:c3:a0:8b:df:2c:9f:82:49:61:6a:10:
d5:c7:6c:6c:2b:f7:33:10:f8:c7:fd:07:16:46:b9:
cc:c9:81:63:f7:d3:70:0f:64:ac:2e:c4:5a:a2:dd:
d0:85:3e:41:33:bd:a7:8a:37:00:bf:4d:e0:3d:3d:
2f:31:ab:0a:40:ab:c1:7e:9f:cf:25:4f:4a:c1:36:
89:1e:32:0d:f6:be:38:b6:b8:0f:4c:e9:b8:2f:7d:
3c:da:a2:a0:ff:f1:e3:80:c0:e1:1c:c3:db:26:67:
c8:45:05:f2:16:10:62:e8:e7:c6:61:e4:90:13:57:
af:0a:25:aa:f6:2a:55:38:56:c8:85:0a:b3:c0:72:
4c:68:bb:06:98:a7:fa:45:28:1c:13:d8:db:69:a4:
0a:1d:f5:23:f4:e9:7a:50:3e:32:18:3b:0e:b2:70:
95:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:70:68:7D:83:61:0A:43:20:56:D0:57:E3:02:A1:46:91:CB:AD:55
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a8:c9:3b:bb:83:ea:0d:a5:fc:b5:27:1b:aa:3f:50:de:67:
e0:b3:3e:56:14:34:65:09:6f:17:cc:98:d4:5a:0d:94:b2:95:
f1:7e:97:b1:05:bc:d7:f9:eb:6c:2c:80:d1:a5:5b:80:7a:cf:
94:b9:69:2e:f8:f7:23:e9:28:7c:47:d3:8a:01:70:5a:dd:f1:
60:bb:92:ff:2e:bc:1c:6a:a2:52:79:75:07:4f:e5:fc:61:b4:
6b:e8:d5:e0:51:22:46:0f:0e:e2:34:47:a1:e3:50:02:22:bf:
ab:d2:5e:92:44:5c:79:26:8c:5e:5e:61:d3:f8:23:74:73:c2:
e8:e1:cf:32:e1:be:b6:71:d5:df:e3:c3:0c:8b:e1:cf:7d:6a:
fd:c1:7c:35:a3:3d:7b:24:2c:a9:a6:f6:84:5c:a1:a3:5b:9b:
54:f9:ee:08:5b:98:3a:13:86:2b:6a:f7:2f:5b:13:72:20:55:
92:41:7d:7d:b2:1b:46:c2:3e:06:89:f9:08:bb:11:17:f3:a3:
19:33:a0:38:b6:87:f3:5e:b1:5c:df:c9:6c:9f:c2:e2:26:06:
d0:61:68:3d:2d:95:8d:8e:8b:83:34:58:66:95:98:78:4d:63:
c4:37:0a:0b:5a:15:2b:23:ae:6d:be:02:db:0c:42:91:fa:10:
3d:42:92:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNCfZ+lI4rq4qDcy2N9G5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NTViYTZlMmIzZGI1NTIxZGJjNzA2MmE1OGMxNmRkYTFi
OWYyMmQwHhcNMjYwMzAxMjEwMDQ3WhcNMjYwMzAyMjEwMDQ3WjAzMTEwLwYDVQQD
EygxNTcwNjg3ZDgzNjEwYTQzMjA1NmQwNTdlMzAyYTE0NjkxY2JhZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SrOAVJvwrYgI2iibNJBdZ6NyT8c
vE73rKRy76ytjBHcvBBYG494Wsi1kr0mqHVTDSmtASgZx1HXH5bKIIn0D1S/9Hqo
FfFYdSKd6wZXdMo4bAkVA8Xms1HUnq26w6CL3yyfgklhahDVx2xsK/czEPjH/QcW
RrnMyYFj99NwD2SsLsRaot3QhT5BM72nijcAv03gPT0vMasKQKvBfp/PJU9KwTaJ
HjIN9r44trgPTOm4L3082qKg//HjgMDhHMPbJmfIRQXyFhBi6OfGYeSQE1evCiWq
9ipVOFbIhQqzwHJMaLsGmKf6RSgcE9jbaaQKHfUj9Ol6UD4yGDsOsnCVRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVwaH2DYQpDIFbQV+MCoUaRy61VMB8GA1UdIwQY
MBaAFPVVum4rPbVSHbxwYqWMFt2hufItMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVZXNmJpczl0VklkdkhCaXBZd1czYUc1OGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMGVhYTktMzYyMC00YmI1LWI0MmYt
ZGI1MTI1ZGYzNGNkLzEvOVZXNmJpczl0VklkdkhCaXBZd1czYUc1OGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMGVhYTktMzYyMC00YmI1LWI0MmYtZGI1MTI1ZGYzNGNk
LzEvOVZXNmJpczl0VklkdkhCaXBZd1czYUc1OGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKjJO7uD
6g2l/LUnG6o/UN5n4LM+VhQ0ZQlvF8yY1FoNlLKV8X6XsQW81/nrbCyA0aVbgHrP
lLlpLvj3I+kofEfTigFwWt3xYLuS/y68HGqiUnl1B0/l/GG0a+jV4FEiRg8O4jRH
oeNQAiK/q9JekkRceSaMXl5h0/gjdHPC6OHPMuG+tnHV3+PDDIvhz31q/cF8NaM9
eyQsqab2hFyho1ubVPnuCFuYOhOGK2r3L1sTciBVkkF9fbIbRsI+Bon5CLsRF/Oj
GTOgOLaH816xXN/JbJ/C4iYG0GFoPS2VjY6LgzRYZpWYeE1jxDcKC1oVKyOubb4C
2wxCkfoQPUKSjQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:43 2026 by rpki-client