Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
File: 9PpnFz_1YpCIuXCWGuG-dGldxmE.mft (raw, json)
Hash identifier: Fdie+Fi01JyqN2g6L6H2LP+NhYkL+Yckish4ux22uJw=
Subject key identifier: 98:2B:FB:AD:2F:B5:02:23:B5:BB:F1:17:80:15:0A:60:11:16:84:F6
Authority key identifier: F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
Certificate issuer: /CN=f4fa67173ff5629088b970961ae1be74695dc661
Certificate serial: 019CAF4800A69A0093105D7B110B12737743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 16:00:57 +0000
Manifest this update: Mon 02 Mar 2026 16:00:57 +0000
Manifest next update: Tue 03 Mar 2026 16:00:57 +0000
Files and hashes: 1: 9PpnFz_1YpCIuXCWGuG-dGldxmE.crl (hash: /2tWynL2hTYGF2R9QkQRJEYVH/x12+LQa7FsJyMB078=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:00:a6:9a:00:93:10:5d:7b:11:0b:12:73:77:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa67173ff5629088b970961ae1be74695dc661
Validity
Not Before: Mar 2 16:00:57 2026 GMT
Not After : Mar 3 16:00:57 2026 GMT
Subject: CN=982bfbad2fb50223b5bbf11780150a60111684f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8a:ae:3a:5c:dc:48:7d:5b:17:58:2a:b6:0b:
3d:80:60:24:ce:19:1a:46:d3:f3:71:8a:25:fd:4d:
36:e5:55:07:9a:a7:a0:e0:38:d2:0c:0b:85:57:1b:
c2:8e:c5:19:a6:87:9c:b3:4b:21:fa:71:3c:cf:1a:
f9:53:9f:79:0e:33:09:43:3a:ca:cc:d1:71:57:e5:
60:60:c9:f2:b6:8e:27:58:23:25:a2:92:f6:88:c3:
08:93:5b:19:70:f0:d9:d7:9f:59:8b:6f:26:cc:aa:
03:fa:7c:95:35:4c:f4:21:46:97:cb:83:cc:c4:f8:
72:1b:bb:36:4f:13:36:0a:85:3b:e0:c1:42:ed:fc:
23:d1:c3:43:dd:e3:e8:6c:cb:ed:a5:81:00:64:cc:
7c:82:96:38:58:e1:79:8d:48:f5:5e:e5:61:4c:ce:
6c:c0:20:f9:3e:76:6c:ec:d7:11:39:7d:56:8a:c9:
43:6f:9e:d3:1b:31:aa:01:d7:da:fe:11:f9:03:1b:
93:49:87:8b:fc:72:39:77:4f:86:32:fa:b0:28:9f:
1e:24:1c:8c:76:0e:33:90:ed:48:db:39:3f:85:8e:
08:ad:9e:8d:e4:51:f4:cf:dc:aa:ea:1f:f7:66:3b:
e3:78:00:a3:dc:ed:8e:ca:a2:4b:ff:ca:81:a7:14:
74:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2B:FB:AD:2F:B5:02:23:B5:BB:F1:17:80:15:0A:60:11:16:84:F6
X509v3 Authority Key Identifier:
keyid:F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:cd:fd:2d:45:8b:f1:9f:3c:f7:74:bc:05:98:87:74:22:86:
20:6b:01:a4:e2:f1:37:84:48:f3:98:8d:29:95:cc:e5:c9:75:
a6:04:30:06:01:f2:21:dd:cb:8d:f6:c8:d3:d7:7b:7a:bb:a4:
da:23:49:46:13:3b:b4:2e:89:86:11:67:62:4d:9e:e2:d4:77:
09:6b:39:e6:be:fb:76:78:19:94:fa:53:59:34:a9:a8:66:ea:
d0:39:30:ba:ad:fe:9d:99:e6:79:5c:12:17:0a:fb:3c:be:e6:
7b:15:a8:14:3a:be:4d:9f:5d:f1:2e:10:e3:3d:d5:de:b5:31:
02:ce:bc:8d:e4:d8:dd:62:4d:69:33:b2:9a:8b:9d:cf:91:7b:
48:f0:41:b7:38:96:4e:9d:ef:df:b3:18:5b:9b:52:72:40:03:
ea:d2:8e:c6:e8:8f:5f:90:75:ac:b2:83:bc:b9:78:df:63:04:
21:9c:7a:f8:fe:f8:9f:bb:8e:39:ec:5e:49:01:e2:aa:ab:21:
51:d7:f7:10:98:3b:a8:f9:60:db:98:86:36:d7:50:ef:68:b4:
9a:57:6a:ed:6a:d2:33:ca:68:48:bd:15:f2:71:a7:98:94:da:
c9:cf:2f:de:71:c1:f4:6e:70:41:c3:d1:b1:ff:4b:c1:ef:2c:
72:3b:c3:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvSACmmgCTEF17EQsSc3dDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZmE2NzE3M2ZmNTYyOTA4OGI5NzA5NjFhZTFiZTc0Njk1
ZGM2NjEwHhcNMjYwMzAyMTYwMDU3WhcNMjYwMzAzMTYwMDU3WjAzMTEwLwYDVQQD
Eyg5ODJiZmJhZDJmYjUwMjIzYjViYmYxMTc4MDE1MGE2MDExMTY4NGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYquOlzcSH1bF1gqtgs9gGAkzhka
RtPzcYol/U025VUHmqeg4DjSDAuFVxvCjsUZpoecs0sh+nE8zxr5U595DjMJQzrK
zNFxV+VgYMnyto4nWCMlopL2iMMIk1sZcPDZ159Zi28mzKoD+nyVNUz0IUaXy4PM
xPhyG7s2TxM2CoU74MFC7fwj0cND3ePobMvtpYEAZMx8gpY4WOF5jUj1XuVhTM5s
wCD5PnZs7NcROX1WislDb57TGzGqAdfa/hH5AxuTSYeL/HI5d0+GMvqwKJ8eJByM
dg4zkO1I2zk/hY4IrZ6N5FH0z9yq6h/3ZjvjeACj3O2OyqJL/8qBpxR0lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgr+60vtQIjtbvxF4AVCmARFoT2MB8GA1UdIwQY
MBaAFPT6Zxc/9WKQiLlwlhrhvnRpXcZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBwbkZ6XzFZcENJdVhDV0d1Ry1kR2xkeG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi82ODRkZjQtNzI1Ny00Y2NhLTgyNGUt
ZDg1ZWJjNWVhOThkLzEvOVBwbkZ6XzFZcENJdVhDV0d1Ry1kR2xkeG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi82ODRkZjQtNzI1Ny00Y2NhLTgyNGUtZDg1ZWJjNWVhOThk
LzEvOVBwbkZ6XzFZcENJdVhDV0d1Ry1kR2xkeG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmM39LUWL
8Z8893S8BZiHdCKGIGsBpOLxN4RI85iNKZXM5cl1pgQwBgHyId3LjfbI09d7eruk
2iNJRhM7tC6JhhFnYk2e4tR3CWs55r77dngZlPpTWTSpqGbq0Dkwuq3+nZnmeVwS
Fwr7PL7mexWoFDq+TZ9d8S4Q4z3V3rUxAs68jeTY3WJNaTOymoudz5F7SPBBtziW
Tp3v37MYW5tSckAD6tKOxuiPX5B1rLKDvLl432MEIZx6+P74n7uOOexeSQHiqqsh
Udf3EJg7qPlg25iGNtdQ72i0mldq7WrSM8poSL0V8nGnmJTayc8v3nHB9G5wQcPR
sf9Lwe8scjvD2A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:08:44 2026 by rpki-client