Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: L/etTEjd+u3dhtAvsKZWx+gxiSTvTzHM05AEt48CyPM=
Subject key identifier: FA:7F:D3:45:B7:57:24:F8:6D:39:FA:F9:22:12:A5:21:A1:CC:0F:6A
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 019CA8D81ED11009350A32CDD5CE54DF63BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 10:01:01 +0000
Manifest this update: Sun 01 Mar 2026 10:01:01 +0000
Manifest next update: Mon 02 Mar 2026 10:01:01 +0000
Files and hashes: 1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: JwgybjXRQLLzRjQwq7FjXcTj5KfwV4brQW8VvNmg6FQ=)
2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:1e:d1:10:09:35:0a:32:cd:d5:ce:54:df:63:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Mar 1 10:01:01 2026 GMT
Not After : Mar 2 10:01:01 2026 GMT
Subject: CN=fa7fd345b75724f86d39faf92212a521a1cc0f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:3d:14:cb:a6:e3:3e:79:e9:9b:5d:c3:d6:
92:df:16:b8:c8:82:75:82:50:5f:87:d9:0a:b8:6f:
c2:ee:93:5f:29:f3:db:d5:03:7b:bc:4d:70:3d:f4:
c8:c5:45:eb:97:d8:4f:3c:74:bf:1e:4f:5d:5d:7c:
fc:3b:f0:d2:d1:6f:97:da:bc:6e:a3:5f:ea:8c:3e:
2a:3d:c7:13:00:d3:1c:92:c8:7c:a7:bc:a8:7f:43:
aa:ff:cc:c0:00:e5:49:5e:f1:26:ae:77:a4:b8:c4:
5d:e3:18:21:13:3e:42:3c:0e:47:94:36:cc:4f:56:
07:0a:22:4b:7b:ee:68:f0:26:05:84:12:fd:f7:5d:
e3:eb:96:c5:77:ca:ea:0e:a1:d0:08:db:bd:cc:7e:
60:06:a8:3c:58:f6:6e:77:9b:c9:e3:d1:8f:05:c1:
fe:cb:8e:b3:dc:4d:e9:eb:d7:ad:7f:ba:33:6d:96:
8e:ca:8d:79:6c:cf:87:ca:fc:a2:ac:05:fc:43:42:
4a:e7:d1:d6:a0:72:66:b1:76:a8:e5:5e:81:b5:ea:
43:af:c1:66:87:3e:c5:21:40:ba:5a:b8:6f:5a:c1:
93:43:bd:cc:8e:1c:a2:8b:8a:74:c2:ae:d4:45:02:
b3:93:ad:35:7f:b0:ec:fa:d7:40:d8:f8:95:d3:b0:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7F:D3:45:B7:57:24:F8:6D:39:FA:F9:22:12:A5:21:A1:CC:0F:6A
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:94:d1:e8:df:5d:65:24:92:5a:17:8b:6b:ac:a7:0c:4e:5f:
ba:79:67:0e:ba:eb:8b:bd:41:23:27:d7:53:6e:c0:3a:b2:ef:
8d:62:eb:60:bc:a0:0b:ff:55:04:6a:65:01:8f:f2:c0:a4:0a:
85:14:f0:c4:45:8a:03:13:1e:48:bf:b5:7b:4b:e6:da:52:92:
15:3f:1e:bf:06:d0:a7:ee:96:f5:af:8c:4f:84:b2:10:ac:79:
c6:f4:59:3b:4c:fd:b7:c9:55:50:42:16:2e:21:d7:ce:ce:06:
bc:24:0c:25:c6:33:55:7a:54:bf:e1:cf:0c:c3:60:10:12:07:
02:89:51:34:d7:e4:a1:da:ad:98:8c:a1:bb:59:40:0b:fc:f2:
15:05:f5:fa:4f:d2:1d:ec:70:b9:20:41:a3:ae:51:79:02:bc:
78:5a:11:de:4f:8e:44:56:ca:3f:1f:98:2d:48:96:af:a1:55:
56:f6:e7:05:31:2d:59:ff:56:c4:4b:e0:ba:41:5c:86:31:bd:
de:cb:08:b5:41:7c:72:d9:36:c1:dd:ee:f3:8f:7f:97:6b:7c:
e4:3b:8d:83:d8:9f:d9:5c:34:6b:ea:47:4d:1f:45:af:77:57:
81:91:ff:4e:ac:8f:3f:ff:38:6a:f8:cc:a2:75:3f:b8:bf:ce:
29:11:eb:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyo2B7REAk1CjLN1c5U32O7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Njc2OWE0MmU0NDI2NmYwMzdlY2IzOTBkNDExNWZlYmUz
ODYxYTQwHhcNMjYwMzAxMTAwMTAxWhcNMjYwMzAyMTAwMTAxWjAzMTEwLwYDVQQD
EyhmYTdmZDM0NWI3NTcyNGY4NmQzOWZhZjkyMjEyYTUyMWExY2MwZjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBE9FMum4z556Ztdw9aS3xa4yIJ1
glBfh9kKuG/C7pNfKfPb1QN7vE1wPfTIxUXrl9hPPHS/Hk9dXXz8O/DS0W+X2rxu
o1/qjD4qPccTANMcksh8p7yof0Oq/8zAAOVJXvEmrnekuMRd4xghEz5CPA5HlDbM
T1YHCiJLe+5o8CYFhBL9913j65bFd8rqDqHQCNu9zH5gBqg8WPZud5vJ49GPBcH+
y46z3E3p69etf7ozbZaOyo15bM+HyvyirAX8Q0JK59HWoHJmsXao5V6BtepDr8Fm
hz7FIUC6WrhvWsGTQ73Mjhyii4p0wq7URQKzk601f7Ds+tdA2PiV07C7gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPp/00W3VyT4bTn6+SISpSGhzA9qMB8GA1UdIwQY
MBaAFPVnaaQuRCZvA37LOQ1BFf6+OGGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2It
N2EzZmZiMDBiNzE2LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2ItN2EzZmZiMDBiNzE2
LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpTR6N9d
ZSSSWheLa6ynDE5funlnDrrri71BIyfXU27AOrLvjWLrYLygC/9VBGplAY/ywKQK
hRTwxEWKAxMeSL+1e0vm2lKSFT8evwbQp+6W9a+MT4SyEKx5xvRZO0z9t8lVUEIW
LiHXzs4GvCQMJcYzVXpUv+HPDMNgEBIHAolRNNfkodqtmIyhu1lAC/zyFQX1+k/S
HexwuSBBo65ReQK8eFoR3k+ORFbKPx+YLUiWr6FVVvbnBTEtWf9WxEvgukFchjG9
3ssItUF8ctk2wd3u849/l2t85DuNg9if2Vw0a+pHTR9Fr3dXgZH/TqyPP/84avjM
onU/uL/OKRHr9w==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:15 2026 by rpki-client