Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
File: m9bIYDQsx5nCgHT2mXaKjsvapS4.mft (raw, json)
Hash identifier: ifnvc7wJx0JiefglqFIHbXfd0a9G3rJt2YTEfPnXC4M=
Subject key identifier: D8:B9:38:D7:9A:2F:9E:93:AD:D8:1A:EC:07:24:EF:06:00:0D:BB:04
Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Certificate serial: 019DA453ECA55629194CA0B140E1CBBA1440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
Manifest number: 166E
Signing time: Sun 19 Apr 2026 06:00:56 +0000
Manifest this update: Sun 19 Apr 2026 06:00:56 +0000
Manifest next update: Mon 20 Apr 2026 06:00:56 +0000
Files and hashes: 1: Fv879_Am10jrA5ouJAPoLdH70T0.roa (hash: KPAB1vwqjlRwv1SDULu1bkWVJKlKimcArRb9moMnmKg=)
2: m9bIYDQsx5nCgHT2mXaKjsvapS4.crl (hash: W9cVXXPbl6Zioi2kxstcT7yIbMCrJ0rN/wsn/j7FFf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:ec:a5:56:29:19:4c:a0:b1:40:e1:cb:ba:14:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Validity
Not Before: Apr 19 06:00:56 2026 GMT
Not After : Apr 20 06:00:56 2026 GMT
Subject: CN=d8b938d79a2f9e93add81aec0724ef06000dbb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:06:39:84:f7:a7:6e:55:fe:43:fa:74:45:
69:f1:23:41:ea:08:ba:49:24:07:fd:fc:ec:4a:fc:
fa:11:70:7b:a7:60:0b:50:34:43:8a:40:fd:5e:45:
b1:cc:b1:f3:62:4a:20:9b:cd:0f:70:50:df:ae:19:
ca:d5:0f:3e:88:8a:37:7f:11:7d:49:9c:ac:23:a6:
39:a5:47:ed:73:fe:a0:f2:49:b0:7c:34:68:af:26:
6d:bf:93:7f:8e:82:07:54:d5:31:74:4f:0b:bc:01:
12:e6:f2:02:2f:d4:54:be:74:50:20:1f:d4:34:d7:
7e:63:d7:cb:bd:47:4c:ad:3e:1e:a3:ca:ad:eb:26:
ee:fa:43:27:d0:c6:7b:44:50:15:df:8d:3f:50:f5:
ec:bd:49:df:f6:80:55:c8:8b:2e:ca:de:6d:6a:d5:
1b:f7:3a:62:5e:c1:27:14:c5:3f:e7:0b:9c:da:fb:
4e:92:ed:52:e4:9d:ec:6a:a5:88:8a:ad:2c:ec:72:
3c:4d:01:61:e4:4e:b7:f4:71:d8:1b:5e:c4:ec:9d:
c0:ef:99:12:3f:40:97:13:f0:f3:a5:d3:68:3f:8d:
f2:fa:37:5e:95:42:46:78:9a:36:c0:83:ac:00:a9:
c6:33:40:74:4a:dc:49:e2:b9:7f:1d:ec:4e:59:cf:
7c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B9:38:D7:9A:2F:9E:93:AD:D8:1A:EC:07:24:EF:06:00:0D:BB:04
X509v3 Authority Key Identifier:
keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e9:c3:63:13:e2:8a:5d:88:b5:f8:51:92:41:9d:88:99:11:
e0:34:38:c5:53:d1:39:0d:c3:8b:b6:90:91:5f:bc:7d:72:c5:
21:3b:e1:8b:3e:c2:40:a0:3f:0c:e2:15:e1:d1:e5:74:15:f0:
3a:3f:e2:4e:38:bb:5a:26:1e:db:82:2d:16:db:a2:ae:1a:3b:
6f:ae:e8:53:a2:22:d3:7f:5d:22:d2:cc:62:20:62:9b:78:54:
ff:82:ef:17:73:fe:62:74:7a:d0:13:03:48:02:6f:09:5c:d3:
25:c1:16:44:3d:ee:e7:f4:79:cb:38:b7:e7:3a:ed:05:ad:03:
f3:cd:1e:16:a8:cd:f3:cf:50:e6:cc:e0:94:17:bb:5e:e2:c2:
38:4e:05:ad:70:4d:f7:f3:c7:c6:75:ec:34:72:80:d6:60:41:
76:f9:b2:29:15:1f:38:8a:08:f0:44:98:cd:d9:95:61:72:57:
bf:b7:d5:16:ae:cf:3f:86:b7:ff:90:f7:77:7f:9b:be:26:aa:
36:1c:f6:45:6d:48:d3:90:ef:a7:94:29:42:6f:d0:9a:17:f6:
12:4d:b4:e1:36:b5:6d:61:d1:2b:d9:3a:0b:65:8d:97:62:8f:
b9:93:13:15:d7:3c:8d:e5:f8:7a:2a:33:de:e4:2d:8c:d7:b7:
b8:0c:20:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU+ylVikZTKCxQOHLuhRAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZDZjODYwMzQyY2M3OTljMjgwNzRmNjk5NzY4YThlY2Jk
YWE1MmUwHhcNMjYwNDE5MDYwMDU2WhcNMjYwNDIwMDYwMDU2WjAzMTEwLwYDVQQD
EyhkOGI5MzhkNzlhMmY5ZTkzYWRkODFhZWMwNzI0ZWYwNjAwMGRiYjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOAGOYT3p25V/kP6dEVp8SNB6gi6
SSQH/fzsSvz6EXB7p2ALUDRDikD9XkWxzLHzYkogm80PcFDfrhnK1Q8+iIo3fxF9
SZysI6Y5pUftc/6g8kmwfDRoryZtv5N/joIHVNUxdE8LvAES5vICL9RUvnRQIB/U
NNd+Y9fLvUdMrT4eo8qt6ybu+kMn0MZ7RFAV340/UPXsvUnf9oBVyIsuyt5tatUb
9zpiXsEnFMU/5wuc2vtOku1S5J3saqWIiq0s7HI8TQFh5E639HHYG17E7J3A75kS
P0CXE/DzpdNoP43y+jdelUJGeJo2wIOsAKnGM0B0StxJ4rl/HexOWc98hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNi5ONeaL56Trdga7Ack7wYADbsEMB8GA1UdIwQY
MBaAFJvWyGA0LMeZwoB09pl2io7L2qUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTliSVlEUXN4NW5DZ0hUMm1YYUtqc3ZhcFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hZmE2OWQtZTE0My00YmY3LWI3NDMt
NDJlM2VmNGY4YjkxLzEvbTliSVlEUXN4NW5DZ0hUMm1YYUtqc3ZhcFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hZmE2OWQtZTE0My00YmY3LWI3NDMtNDJlM2VmNGY4Yjkx
LzEvbTliSVlEUXN4NW5DZ0hUMm1YYUtqc3ZhcFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoenDYxPi
il2ItfhRkkGdiJkR4DQ4xVPROQ3Di7aQkV+8fXLFITvhiz7CQKA/DOIV4dHldBXw
Oj/iTji7WiYe24ItFtuirho7b67oU6Ii039dItLMYiBim3hU/4LvF3P+YnR60BMD
SAJvCVzTJcEWRD3u5/R5yzi35zrtBa0D880eFqjN889Q5szglBe7XuLCOE4FrXBN
9/PHxnXsNHKA1mBBdvmyKRUfOIoI8ESYzdmVYXJXv7fVFq7PP4a3/5D3d3+bviaq
Nhz2RW1I05Dvp5QpQm/Qmhf2Ek204Ta1bWHRK9k6C2WNl2KPuZMTFdc8jeX4eioz
3uQtjNe3uAwg/Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:38:17 2026 by rpki-client