Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File: 9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier: oCu1udIUN4XTCJ0aHeFpSexSbG8qXUQG7ASHLKzYF+Y=
Subject key identifier: 81:F0:AD:2D:34:B7:D5:6A:B3:7E:A8:47:D8:8A:7A:80:07:45:A3:32
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer: /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial: 019CACB584A921C61308220B0E2761CD4085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number: 0F24
Signing time: Mon 02 Mar 2026 04:01:42 +0000
Manifest this update: Mon 02 Mar 2026 04:01:42 +0000
Manifest next update: Tue 03 Mar 2026 04:01:42 +0000
Files and hashes: 1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: Y54T++qmrOrJCF7DcmPSuKCuKv5StHQHHViEdRgfOKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:84:a9:21:c6:13:08:22:0b:0e:27:61:cd:40:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Validity
Not Before: Mar 2 04:01:42 2026 GMT
Not After : Mar 3 04:01:42 2026 GMT
Subject: CN=81f0ad2d34b7d56ab37ea847d88a7a800745a332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:6d:92:df:c9:01:a1:e2:8a:f9:ef:77:42:
63:11:32:61:bc:62:d4:cc:e2:03:c4:60:81:ef:50:
f3:f0:77:61:bf:52:42:0c:4c:6f:72:73:cc:96:58:
38:53:de:82:db:65:3e:3b:c1:8e:83:cf:55:80:ce:
70:d6:0d:cf:d1:a6:1a:b9:e9:be:72:ee:af:cd:f0:
09:98:29:76:7d:09:3a:59:15:7d:91:55:1e:8f:64:
44:8a:fe:67:83:31:b0:b6:ab:ca:3b:3b:2a:33:3e:
74:e5:76:83:fc:07:96:9f:92:30:51:85:38:f9:3f:
94:21:be:da:6e:b3:44:11:ec:93:eb:41:84:0e:25:
d1:e2:ab:1c:91:d2:b3:11:ea:88:c1:ef:79:5f:e2:
5f:28:f6:bf:73:b5:1b:ec:22:f4:1f:ac:14:5e:b7:
29:76:fa:d3:ad:6c:eb:b3:b2:e5:b1:a3:2e:3a:9c:
fe:ec:53:f9:b4:37:56:a4:fd:63:59:fe:b9:e1:d8:
ac:3b:92:4c:fc:1c:54:ba:0c:54:08:17:3a:b9:ae:
44:8a:92:4f:55:16:ca:29:37:7a:35:2a:c2:49:60:
a1:f7:ff:ca:2a:85:f9:9b:12:4e:ea:f1:60:2c:f5:
31:1e:58:71:c7:8d:6b:0b:4d:04:3a:85:12:1e:29:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F0:AD:2D:34:B7:D5:6A:B3:7E:A8:47:D8:8A:7A:80:07:45:A3:32
X509v3 Authority Key Identifier:
keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b6:dc:01:ef:58:96:97:2f:bf:79:c9:10:f1:ec:96:da:ed:
f8:c2:a2:d6:af:81:6d:00:36:ad:a1:5c:7d:e7:38:ef:82:12:
16:fd:f8:27:71:af:cb:6a:f7:67:eb:c3:3c:02:73:55:d8:95:
b2:5d:0a:3a:e9:75:b1:f1:08:61:8e:1d:4a:d9:c6:0c:7c:69:
bb:ae:e5:b6:7d:54:d9:ef:7f:7a:3e:6c:19:dd:b0:4c:2c:f6:
e4:b5:31:82:bb:20:cd:4d:c6:34:44:af:0b:f8:b9:64:fe:86:
51:bf:2d:06:fc:cd:ac:5a:37:da:73:ce:de:cb:e8:13:e8:54:
8c:6e:8f:8f:ca:f0:00:cd:b8:04:2a:ea:5c:c8:0a:bf:3c:e3:
34:5d:34:ad:ad:68:df:03:ec:0d:50:f9:80:57:ae:ab:e7:79:
b0:78:0c:9e:df:25:e9:af:75:08:7c:b1:2b:79:71:bf:ca:a0:
84:be:00:95:df:22:6f:12:b0:28:4a:d7:1b:6e:36:59:68:9b:
0b:42:c4:1e:65:4e:46:3e:12:f5:80:9e:46:49:8e:08:86:23:
8d:1d:e1:97:03:52:41:70:c9:23:0e:40:da:6c:ff:77:48:12:
58:f6:65:f8:46:8b:55:42:28:5e:95:bf:d0:cb:bf:e4:30:5c:
0e:c2:c2:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystYSpIcYTCCILDidhzUCFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1OGY4MGQyM2E5ZDhhZWQ0ZmUzMTFmNzIyMjA5Yzk1ZGE5
YWFkNDYwHhcNMjYwMzAyMDQwMTQyWhcNMjYwMzAzMDQwMTQyWjAzMTEwLwYDVQQD
Eyg4MWYwYWQyZDM0YjdkNTZhYjM3ZWE4NDdkODhhN2E4MDA3NDVhMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MFtkt/JAaHiivnvd0JjETJhvGLU
zOIDxGCB71Dz8Hdhv1JCDExvcnPMllg4U96C22U+O8GOg89VgM5w1g3P0aYauem+
cu6vzfAJmCl2fQk6WRV9kVUej2REiv5ngzGwtqvKOzsqMz505XaD/AeWn5IwUYU4
+T+UIb7abrNEEeyT60GEDiXR4qsckdKzEeqIwe95X+JfKPa/c7Ub7CL0H6wUXrcp
dvrTrWzrs7LlsaMuOpz+7FP5tDdWpP1jWf654disO5JM/BxUugxUCBc6ua5EipJP
VRbKKTd6NSrCSWCh9//KKoX5mxJO6vFgLPUxHlhxx41rC00EOoUSHimAswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHwrS00t9Vqs36oR9iKeoAHRaMyMB8GA1UdIwQY
MBaAFPWPgNI6nYrtT+MR9yIgnJXamq1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVktQTBqcWRpdTFQNHhIM0lpQ2NsZHFhclVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZGRhZjAtN2UwMy00NWMxLTgxMjkt
YjI3MmE3OTgwNmYxLzEvOVktQTBqcWRpdTFQNHhIM0lpQ2NsZHFhclVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ZGRhZjAtN2UwMy00NWMxLTgxMjktYjI3MmE3OTgwNmYx
LzEvOVktQTBqcWRpdTFQNHhIM0lpQ2NsZHFhclVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArbcAe9Y
lpcvv3nJEPHsltrt+MKi1q+BbQA2raFcfec474ISFv34J3Gvy2r3Z+vDPAJzVdiV
sl0KOul1sfEIYY4dStnGDHxpu67ltn1U2e9/ej5sGd2wTCz25LUxgrsgzU3GNESv
C/i5ZP6GUb8tBvzNrFo32nPO3svoE+hUjG6Pj8rwAM24BCrqXMgKvzzjNF00ra1o
3wPsDVD5gFeuq+d5sHgMnt8l6a91CHyxK3lxv8qghL4Ald8ibxKwKErXG242WWib
C0LEHmVORj4S9YCeRkmOCIYjjR3hlwNSQXDJIw5A2mz/d0gSWPZl+EaLVUIoXpW/
0Mu/5DBcDsLCVQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:21 2026 by rpki-client