Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
File: 9Y3yxGnJeIlfhFgCTFBugByPsho.mft (raw, json)
Hash identifier: h6I4e+zaME1SO7pfzRIKiAjfPX6GCiD2/6ZRhYQrLGo=
Subject key identifier: FB:41:F0:09:50:BE:07:33:A8:CC:D0:17:0B:ED:AB:CB:91:E5:98:E3
Authority key identifier: F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
Certificate issuer: /CN=f58df2c469c978895f8458024c506e801c8fb21a
Certificate serial: 019CABA23F4F1C87BC028DF791FAF5BA96DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
Manifest number: 15CE
Signing time: Sun 01 Mar 2026 23:01:02 +0000
Manifest this update: Sun 01 Mar 2026 23:01:02 +0000
Manifest next update: Mon 02 Mar 2026 23:01:02 +0000
Files and hashes: 1: 9Y3yxGnJeIlfhFgCTFBugByPsho.crl (hash: 4sHQHjhvGsvZnlmcKFunw3kI282husWe4v25e4SX0i8=)
2: ipd84dEDEe7cj4KStBVIlQrMGyg.roa (hash: Sbm22JKwRV49kiJvKoySC0PxR1MmmHGGM53bqn3Gb1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:3f:4f:1c:87:bc:02:8d:f7:91:fa:f5:ba:96:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58df2c469c978895f8458024c506e801c8fb21a
Validity
Not Before: Mar 1 23:01:02 2026 GMT
Not After : Mar 2 23:01:02 2026 GMT
Subject: CN=fb41f00950be0733a8ccd0170bedabcb91e598e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dd:34:60:64:f9:47:0f:a7:67:8a:78:4a:ed:
59:39:67:e1:cb:18:18:bb:8e:58:1a:c5:1a:e3:2f:
d5:90:7f:f4:0e:c3:bf:8e:ef:72:d0:53:8a:d4:cb:
6a:67:b3:5e:44:df:4c:ad:56:82:a1:5b:e5:75:01:
70:b6:2a:e9:c7:42:98:6e:85:83:7b:27:1d:68:43:
d0:62:3f:cb:ff:96:37:6a:03:6f:57:60:d1:0c:47:
96:7e:6e:9e:b5:28:d3:e6:c6:2a:ad:e7:e7:30:b4:
e9:8a:75:b1:bb:70:db:e8:19:85:e4:34:92:eb:40:
81:e1:1f:15:6e:81:07:62:1b:39:c8:ab:e9:65:3b:
30:f4:52:41:e1:d6:85:12:c7:11:a9:77:bd:5f:db:
e1:01:5e:54:3f:0c:0f:af:63:76:e2:e7:97:73:9e:
9b:0a:6b:aa:25:70:02:77:fb:9e:e9:b5:7b:c9:85:
bb:9c:53:e2:32:1c:40:79:2f:13:11:a0:d7:bd:34:
b5:3b:36:5b:de:8d:4c:d1:07:ab:50:c4:19:26:31:
2c:d9:ec:bb:59:3d:39:a1:76:80:f5:d5:c2:78:b0:
cc:16:9d:12:7d:e6:e9:cc:9c:06:ae:8a:be:01:bc:
2b:a6:d1:47:c0:ef:cd:91:3f:4a:08:33:35:35:a7:
2f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:41:F0:09:50:BE:07:33:A8:CC:D0:17:0B:ED:AB:CB:91:E5:98:E3
X509v3 Authority Key Identifier:
keyid:F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:33:49:2c:03:5a:25:3b:64:34:fc:9b:b0:17:28:f9:44:cd:
fe:5d:89:95:02:62:43:a1:12:f3:c8:34:dd:18:d6:14:98:1f:
37:0c:36:8d:71:a0:66:b3:40:71:44:0f:b9:ec:e8:28:79:39:
55:51:03:71:75:57:84:28:52:75:48:ce:99:d7:ad:58:9d:f8:
0a:bc:0e:48:d5:37:3d:c9:73:19:2e:ca:ef:21:fc:70:65:a2:
48:31:3b:6f:ad:ba:4c:e6:9e:1d:59:b9:de:cd:74:c5:39:d3:
4b:3e:22:e5:a2:8a:57:d9:4c:1d:c7:03:bb:9c:ce:9a:3d:31:
6a:a9:be:2e:56:c9:c5:fa:c7:da:fe:d3:c2:60:32:79:7a:ec:
2e:4a:0d:f1:cf:29:a3:67:aa:a3:30:3a:25:eb:65:34:6d:8a:
e6:3e:67:53:5a:31:bb:12:98:a7:e4:53:06:a0:9b:9e:7c:9c:
25:63:a6:17:3e:6b:72:2c:4a:b3:a5:2b:16:f4:6f:18:7b:c4:
bb:46:33:31:16:86:df:4e:87:ce:ed:5c:24:63:86:67:26:b1:
70:59:ec:ce:f2:da:3c:06:52:21:c6:82:b6:37:67:01:8e:c8:
cd:6e:10:02:a4:78:c8:ef:a6:38:57:a9:94:08:37:66:e8:1d:
88:45:81:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroj9PHIe8Ao33kfr1upbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1OGRmMmM0NjljOTc4ODk1Zjg0NTgwMjRjNTA2ZTgwMWM4
ZmIyMWEwHhcNMjYwMzAxMjMwMTAyWhcNMjYwMzAyMjMwMTAyWjAzMTEwLwYDVQQD
EyhmYjQxZjAwOTUwYmUwNzMzYThjY2QwMTcwYmVkYWJjYjkxZTU5OGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N00YGT5Rw+nZ4p4Su1ZOWfhyxgY
u45YGsUa4y/VkH/0DsO/ju9y0FOK1MtqZ7NeRN9MrVaCoVvldQFwtirpx0KYboWD
eycdaEPQYj/L/5Y3agNvV2DRDEeWfm6etSjT5sYqrefnMLTpinWxu3Db6BmF5DSS
60CB4R8VboEHYhs5yKvpZTsw9FJB4daFEscRqXe9X9vhAV5UPwwPr2N24ueXc56b
CmuqJXACd/ue6bV7yYW7nFPiMhxAeS8TEaDXvTS1OzZb3o1M0QerUMQZJjEs2ey7
WT05oXaA9dXCeLDMFp0SfebpzJwGroq+AbwrptFHwO/NkT9KCDM1NacvFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtB8AlQvgczqMzQFwvtq8uR5ZjjMB8GA1UdIwQY
MBaAFPWN8sRpyXiJX4RYAkxQboAcj7IaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVkzeXhHbkplSWxmaEZnQ1RGQnVnQnlQc2hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xZTk2MjEtNjI2ZS00MDMyLTliNTQt
NzZlMzM0OWM5N2MyLzEvOVkzeXhHbkplSWxmaEZnQ1RGQnVnQnlQc2hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8xZTk2MjEtNjI2ZS00MDMyLTliNTQtNzZlMzM0OWM5N2My
LzEvOVkzeXhHbkplSWxmaEZnQ1RGQnVnQnlQc2hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTNJLANa
JTtkNPybsBco+UTN/l2JlQJiQ6ES88g03RjWFJgfNww2jXGgZrNAcUQPuezoKHk5
VVEDcXVXhChSdUjOmdetWJ34CrwOSNU3PclzGS7K7yH8cGWiSDE7b626TOaeHVm5
3s10xTnTSz4i5aKKV9lMHccDu5zOmj0xaqm+LlbJxfrH2v7TwmAyeXrsLkoN8c8p
o2eqozA6JetlNG2K5j5nU1oxuxKYp+RTBqCbnnycJWOmFz5rcixKs6UrFvRvGHvE
u0YzMRaG306Hzu1cJGOGZyaxcFnszvLaPAZSIcaCtjdnAY7IzW4QAqR4yO+mOFep
lAg3ZugdiEWBQQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:07 2026 by rpki-client