Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: ADTB/JSdrDxYftpRSDylK9nN2AANRqrDaDjJPOeHFLs=
Subject key identifier: FC:C6:D1:AF:1C:3B:9A:F4:57:B8:26:AC:0D:1B:D3:A8:1C:99:AA:56
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 019CAC4781771B019B3734BB2104F3A7A8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 17D7
Signing time: Mon 02 Mar 2026 02:01:33 +0000
Manifest this update: Mon 02 Mar 2026 02:01:33 +0000
Manifest next update: Tue 03 Mar 2026 02:01:33 +0000
Files and hashes: 1: 7kGNbroThpMnN96LqRGM-Y-5t9Y.roa (hash: lxPWqX0/OpM/p7/y+8GA/oyT71oB2fzc6nqiYIWie7o=)
2: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: uFBpfabsJmnTMv1Olw6t3oIBQXW8VIpj82t/C5Bs6xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:81:77:1b:01:9b:37:34:bb:21:04:f3:a7:a8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Mar 2 02:01:33 2026 GMT
Not After : Mar 3 02:01:33 2026 GMT
Subject: CN=fcc6d1af1c3b9af457b826ac0d1bd3a81c99aa56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e0:29:90:f8:b3:41:a8:4f:2c:8b:71:66:9b:
bb:52:8b:3c:34:c3:5f:b6:cf:7b:a0:2b:d2:6d:13:
b5:ff:4d:63:b7:d2:e9:06:e6:40:03:05:a6:f8:b6:
60:33:07:f8:83:af:dc:76:ba:78:a4:5d:63:a0:52:
bb:06:ae:5b:56:21:34:af:c6:94:a4:a6:e2:95:d2:
0b:f1:67:42:76:62:75:9d:2c:1c:90:b4:48:81:f6:
ad:a3:92:b7:5a:ad:75:e3:1a:a1:bb:5a:de:79:44:
ed:72:02:5c:fc:a0:d0:fc:17:61:a7:aa:f0:79:ac:
ff:8d:82:1c:e6:c2:13:bd:27:19:ee:5a:f4:a7:1d:
f9:05:3c:12:35:91:e4:bf:ee:8b:b0:b8:32:5f:f6:
63:da:e8:53:a7:3f:4a:03:ef:ef:86:85:9c:59:3f:
b9:77:27:58:34:6d:0f:2c:64:98:56:05:b2:db:a3:
46:a1:ed:f6:83:7d:07:d7:cd:8a:24:3e:fa:42:5a:
22:e8:e5:07:98:67:dd:98:6b:04:86:82:44:ac:91:
b1:1a:58:04:0c:7c:37:be:d7:83:fa:a1:9d:15:5e:
de:71:6b:cd:80:ba:e0:74:1d:ff:3c:87:71:41:a9:
c7:bb:27:a2:f3:ee:c8:39:3c:ed:87:b7:6e:4a:3c:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C6:D1:AF:1C:3B:9A:F4:57:B8:26:AC:0D:1B:D3:A8:1C:99:AA:56
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:4a:12:ea:bd:d6:be:59:72:b8:5b:71:43:ef:64:7e:af:d2:
cb:64:56:11:f3:d5:61:18:91:4e:c9:10:39:aa:52:0b:72:6c:
ba:98:5f:bc:d1:84:9b:74:c7:85:3c:1d:9f:cf:d6:a5:85:f9:
a2:e2:6b:3e:23:4f:eb:bf:16:89:10:4d:53:74:4c:93:ac:48:
35:99:8a:77:b2:5f:f2:a7:d9:cd:91:62:97:a3:e2:10:b5:84:
55:9b:b0:45:76:65:6f:2f:2e:c3:81:3b:61:bd:02:0a:17:e6:
d4:d4:6b:24:c8:4d:46:88:21:65:1a:01:5c:b6:4d:6b:b2:2e:
85:2f:d8:8c:77:74:ab:9b:a2:90:06:ca:27:8f:ec:71:d3:75:
be:64:e6:fb:d8:0a:87:20:19:f0:ab:32:30:26:f1:75:ac:c7:
4c:2f:7b:81:e7:bb:f4:2d:c6:5e:b7:4e:e5:8f:8b:c3:b3:9d:
eb:52:c8:59:62:b9:5f:15:ce:cc:aa:b8:ec:13:2c:21:ab:8b:
d3:fd:f4:05:92:0a:5c:da:a7:42:92:c9:4f:c7:32:a6:df:4b:
f6:e6:77:96:8c:d8:13:a2:65:59:49:a1:48:3c:64:e1:5b:92:
95:2c:15:a5:1b:79:f7:82:9d:d5:a5:b8:cb:a6:8c:c6:72:45:
52:9d:b7:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR4F3GwGbNzS7IQTzp6jCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjQzMGQwODA1ZjQyZmZhM2JjZDBjMGI3YzU1MDgwNTEx
NzkyM2EwHhcNMjYwMzAyMDIwMTMzWhcNMjYwMzAzMDIwMTMzWjAzMTEwLwYDVQQD
EyhmY2M2ZDFhZjFjM2I5YWY0NTdiODI2YWMwZDFiZDNhODFjOTlhYTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuApkPizQahPLItxZpu7Uos8NMNf
ts97oCvSbRO1/01jt9LpBuZAAwWm+LZgMwf4g6/cdrp4pF1joFK7Bq5bViE0r8aU
pKbildIL8WdCdmJ1nSwckLRIgfato5K3Wq114xqhu1reeUTtcgJc/KDQ/Bdhp6rw
eaz/jYIc5sITvScZ7lr0px35BTwSNZHkv+6LsLgyX/Zj2uhTpz9KA+/vhoWcWT+5
dydYNG0PLGSYVgWy26NGoe32g30H182KJD76Qloi6OUHmGfdmGsEhoJErJGxGlgE
DHw3vteD+qGdFV7ecWvNgLrgdB3/PIdxQanHuyei8+7IOTzth7duSjylMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzG0a8cO5r0V7gmrA0b06gcmapWMB8GA1UdIwQY
MBaAFPT0MNCAX0L/o7zQwLfFUIBRF5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAt
ZjBmOTNjY2EyNDc5LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAtZjBmOTNjY2EyNDc5
LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3koS6r3W
vllyuFtxQ+9kfq/Sy2RWEfPVYRiRTskQOapSC3JsuphfvNGEm3THhTwdn8/WpYX5
ouJrPiNP678WiRBNU3RMk6xINZmKd7Jf8qfZzZFil6PiELWEVZuwRXZlby8uw4E7
Yb0CChfm1NRrJMhNRoghZRoBXLZNa7IuhS/YjHd0q5uikAbKJ4/scdN1vmTm+9gK
hyAZ8KsyMCbxdazHTC97gee79C3GXrdO5Y+Lw7Od61LIWWK5XxXOzKq47BMsIauL
0/30BZIKXNqnQpLJT8cypt9L9uZ3lozYE6JlWUmhSDxk4VuSlSwVpRt594Kd1aW4
y6aMxnJFUp23sA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:15:32 2026 by rpki-client