Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: bgrhkEFPFZcxRQ5Ux7v7lNOv6F7DEL0COe9cIiYGr6A=
Subject key identifier: FC:29:9D:E7:D4:DA:C5:D9:E0:90:4C:F8:4C:5A:3E:72:79:0A:12:BC
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 019CA945B7564DD646FC09ABBE9464867AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 07E9
Signing time: Sun 01 Mar 2026 12:00:44 +0000
Manifest this update: Sun 01 Mar 2026 12:00:44 +0000
Manifest next update: Mon 02 Mar 2026 12:00:44 +0000
Files and hashes: 1: 1r95LK4HWizqALUZJhEWO2mRfys.roa (hash: a7n3lQCzMluTfryIIH6MTnQ1x4Z9vPgOFoHPe0ckSs8=)
2: 2geswA6ENW-xIrWxFpiZS2QEtSg.roa (hash: Wximrdr2iWFM1jcG/8HAiLIPhr2g4tLO5QAJ9/FpqDs=)
3: 2nwagyLqxJwRqLdgTLA7_n4lSs8.roa (hash: 4fgPknlaVUuj1rnAi5TgALYEc9dAtHGP5otC5r0jNlo=)
4: 6N3xoZPe2eQVbNsjIZFngGfa3VM.roa (hash: tFoFVqeUGxu4Apov92KrkjVc4GER0DpKn92wl0890bo=)
5: 7MPluVravo2Zg570yKX0YG2N3n8.roa (hash: 1uXMPGhv4RMa4aedR0mQyuAIi9Pi5joQGyAwvqPRBLA=)
6: D4d_4pxCPjZEGl90vALx44fXxu8.roa (hash: nJq9NCViYi/1CQ0r2u9R6OYAeLLC1B3FaJoObbBwLb8=)
7: XiJSnqUnbwsKfWxUtA9oWKzznIk.roa (hash: il5+2Wom7vPDCFPGBRmCP1wr3fGf4op2yuM4yZALCHs=)
8: ZoZb90LpJA9Ip-2MHkdgs69BJlw.roa (hash: Vsdm6rW7baX27WeKyLbDvpzx2QoVqvnpUMNu9ywBMO4=)
9: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: d9prOvET/b09tlQWWvcQywlrUs8EBOjjYJ6XKAQVPz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:b7:56:4d:d6:46:fc:09:ab:be:94:64:86:7a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Mar 1 12:00:44 2026 GMT
Not After : Mar 2 12:00:44 2026 GMT
Subject: CN=fc299de7d4dac5d9e0904cf84c5a3e72790a12bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:05:d9:19:9a:3f:b1:d7:1f:43:09:5b:7c:7a:
e1:a9:83:58:cc:83:ee:66:c5:e3:da:7f:a0:9b:1b:
c5:6a:02:66:f8:2f:ad:dd:17:4a:1a:2b:c4:13:bf:
76:a8:fc:74:cf:4a:df:c1:7c:70:22:ab:aa:5a:ea:
52:93:db:69:d0:93:10:72:a6:c9:f8:b9:fd:a0:85:
b1:2d:38:68:30:d4:4a:76:bb:5f:a3:e7:3e:44:b9:
1c:6c:8c:45:16:d1:e6:63:d7:ee:11:22:88:7d:77:
b1:91:9d:4e:df:9a:41:25:a4:4f:09:41:ab:33:f4:
b0:2d:1b:ac:8f:0f:29:6c:73:3b:7d:ae:4f:09:4c:
dd:6f:29:c1:32:e4:67:60:63:44:37:c5:29:26:b9:
4d:fb:41:9c:77:02:e7:43:d2:04:e1:07:44:df:98:
5b:e3:7e:46:9b:69:4b:94:de:77:a1:5c:97:0b:67:
66:b8:1a:13:95:da:5a:28:b2:6f:45:f4:58:3d:c5:
20:84:52:5b:50:34:76:6b:90:0e:8b:6a:f4:c8:fe:
b5:51:71:db:f5:0f:84:27:d8:d5:8c:2d:b9:17:d7:
58:f3:3a:a0:23:b3:3b:b5:67:bb:95:0d:a6:71:82:
a4:04:ff:0c:30:42:5b:25:7a:52:b5:6c:3a:f4:04:
1a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:29:9D:E7:D4:DA:C5:D9:E0:90:4C:F8:4C:5A:3E:72:79:0A:12:BC
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b6:65:39:f2:eb:c4:89:ac:8f:58:97:f0:31:a1:f5:59:ec:
9a:9c:7c:97:87:52:ab:aa:bd:71:84:80:7b:b7:da:e9:fa:30:
3f:84:f9:bd:29:6a:b8:94:5e:35:84:6f:33:c2:6d:e3:c2:52:
b4:5e:f0:bf:d2:84:af:b9:ad:e3:d4:28:91:4d:05:2c:26:cd:
b5:58:0f:11:60:fe:64:6b:06:70:26:7d:86:8f:96:28:15:13:
30:d2:6c:6d:9b:55:eb:c0:9b:56:31:23:ce:c9:9d:ae:4a:24:
40:8d:71:84:69:ea:ed:59:33:d0:4a:35:eb:43:8c:f7:22:e0:
fe:dc:34:79:37:68:e6:64:40:9f:66:28:6b:95:4d:31:93:5d:
39:97:5e:6d:b9:ef:46:33:0a:18:b4:3d:1c:81:5d:33:76:77:
a0:15:ef:09:7e:f5:62:cf:55:89:32:6a:d9:5e:84:94:e3:12:
ff:ca:04:03:c7:81:f7:a9:e2:a9:65:ce:57:1a:df:76:16:d7:
90:6d:41:bc:c5:5b:05:dc:27:f5:7d:5b:63:01:69:22:19:e8:
0c:6d:6c:0b:01:9a:df:cd:2b:89:30:63:db:4b:dc:34:d8:7a:
ab:ab:69:f2:27:b5:74:14:a5:e6:f2:49:c8:16:bd:a2:d5:85:
1e:e2:89:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRbdWTdZG/AmrvpRkhnrVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGJmYmRiNmU5NzVkZGNhOGY2ZGQ5NjhjMzdhN2Q1NTYw
ZTY5MWQwHhcNMjYwMzAxMTIwMDQ0WhcNMjYwMzAyMTIwMDQ0WjAzMTEwLwYDVQQD
EyhmYzI5OWRlN2Q0ZGFjNWQ5ZTA5MDRjZjg0YzVhM2U3Mjc5MGExMmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gXZGZo/sdcfQwlbfHrhqYNYzIPu
ZsXj2n+gmxvFagJm+C+t3RdKGivEE792qPx0z0rfwXxwIquqWupSk9tp0JMQcqbJ
+Ln9oIWxLThoMNRKdrtfo+c+RLkcbIxFFtHmY9fuESKIfXexkZ1O35pBJaRPCUGr
M/SwLRusjw8pbHM7fa5PCUzdbynBMuRnYGNEN8UpJrlN+0GcdwLnQ9IE4QdE35hb
435Gm2lLlN53oVyXC2dmuBoTldpaKLJvRfRYPcUghFJbUDR2a5AOi2r0yP61UXHb
9Q+EJ9jVjC25F9dY8zqgI7M7tWe7lQ2mcYKkBP8MMEJbJXpStWw69AQawQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwpnefU2sXZ4JBM+ExaPnJ5ChK8MB8GA1UdIwQY
MBaAFP/b+9tul13cqPbdlow3p9VWDmkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUt
MTk3NjlmNTc4ZWZkLzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUtMTk3NjlmNTc4ZWZk
LzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbZlOfLr
xImsj1iX8DGh9Vnsmpx8l4dSq6q9cYSAe7fa6fowP4T5vSlquJReNYRvM8Jt48JS
tF7wv9KEr7mt49QokU0FLCbNtVgPEWD+ZGsGcCZ9ho+WKBUTMNJsbZtV68CbVjEj
zsmdrkokQI1xhGnq7Vkz0Eo160OM9yLg/tw0eTdo5mRAn2Yoa5VNMZNdOZdebbnv
RjMKGLQ9HIFdM3Z3oBXvCX71Ys9ViTJq2V6ElOMS/8oEA8eB96niqWXOVxrfdhbX
kG1BvMVbBdwn9X1bYwFpIhnoDG1sCwGa380riTBj20vcNNh6q6tp8ie1dBSl5vJJ
yBa9otWFHuKJLw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:22:19 2026 by rpki-client