Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier: sY2ThPuGTMa8WgMR46yYM02l5uxkQf/3g9hzVkjiacE=
Subject key identifier: 75:72:3D:AB:9F:BC:4E:55:13:0B:3F:DD:A8:23:34:EA:B2:0F:2D:DA
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer: /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial: 019CAAC6687EFFB3C5980A0BC087C9457FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number: 0C27
Signing time: Sun 01 Mar 2026 19:00:55 +0000
Manifest this update: Sun 01 Mar 2026 19:00:55 +0000
Manifest next update: Mon 02 Mar 2026 19:00:55 +0000
Files and hashes: 1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: TG1Lm3Y6VrIXUfj28v32lEoNkCL5zIK7LYygW83v2R0=)
2: sIunFd-UhDIY2he6578HnH9KYM4.roa (hash: cM+uL/KniFpxQyhA1SMW/C3f3nO1DxP+MeewVaQ/1Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:68:7e:ff:b3:c5:98:0a:0b:c0:87:c9:45:7f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Validity
Not Before: Mar 1 19:00:55 2026 GMT
Not After : Mar 2 19:00:55 2026 GMT
Subject: CN=75723dab9fbc4e55130b3fdda82334eab20f2dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:d5:f3:f9:20:6a:4e:e7:7a:26:b3:68:7f:
84:e9:85:26:cd:59:4a:48:73:22:da:40:34:48:f8:
55:e8:ad:cf:70:a2:15:76:03:a6:d9:9a:b8:ea:4f:
9b:24:48:f1:07:80:10:12:e1:db:25:d9:41:bb:4c:
20:16:85:bd:65:23:44:9d:18:89:17:21:9a:ca:86:
21:75:76:4f:ec:50:ee:7c:85:64:24:b0:c4:30:23:
3a:3d:12:95:9c:b4:47:35:74:dd:c1:e6:5d:42:0d:
3c:23:6b:ee:bd:05:d6:3a:0b:74:60:60:d6:ad:ab:
7c:2c:04:e7:9e:19:d7:fe:b5:60:d5:f9:03:63:21:
5a:76:eb:1c:fe:e6:ac:9f:95:9a:4c:08:38:16:bf:
97:1e:d1:95:5e:c0:f1:65:39:a4:c3:43:11:69:9a:
2b:c2:a7:01:20:02:21:cd:9d:34:1b:01:3e:da:5e:
57:16:53:4e:55:6a:bb:a4:d7:1b:95:26:c8:0c:a8:
12:bf:a5:05:84:7c:e5:0d:79:5e:cb:3f:f4:04:f6:
9c:18:28:69:6f:39:ed:da:86:f8:7f:5d:1c:d3:17:
ed:1b:00:cb:18:d5:9d:ee:67:e3:71:04:9d:2c:09:
20:32:06:cb:a9:2b:22:9f:d1:b5:e4:ae:53:0e:15:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:72:3D:AB:9F:BC:4E:55:13:0B:3F:DD:A8:23:34:EA:B2:0F:2D:DA
X509v3 Authority Key Identifier:
keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6a:3b:47:55:32:72:85:ac:72:21:37:f0:89:5a:31:f9:83:
d4:d3:dd:49:f8:f9:29:95:4d:2f:78:7f:ee:a5:da:7d:db:c8:
36:fb:e0:d7:ab:92:e6:03:94:f7:ac:33:ad:af:89:aa:e9:16:
0b:00:17:b2:0a:2c:34:a3:5e:d6:f1:ca:11:60:cf:91:7d:a2:
af:2d:56:c7:c5:76:59:ff:aa:3a:63:47:5b:e8:a9:ba:b3:0b:
77:03:30:ae:3b:a2:5a:bf:01:0e:00:39:2c:72:03:81:78:92:
11:83:40:5f:2f:2e:83:78:b2:ac:88:1e:f3:5a:03:a8:f4:42:
85:6d:db:4a:26:5d:a6:17:cc:79:ea:14:2d:35:05:79:1e:e4:
0c:06:3d:5b:29:20:f3:38:1f:0c:05:7b:93:ec:a5:50:82:2c:
52:f7:63:d3:44:ba:bf:1d:b8:97:28:4f:0c:73:99:f0:41:41:
f4:7f:5e:03:05:8e:fc:f7:43:10:00:c7:74:74:fa:2c:62:57:
43:b4:1a:b8:9a:6b:0f:e7:6a:7b:30:cb:46:c7:1a:13:19:b5:
05:ac:ce:23:d3:ca:c4:4a:c1:67:92:f4:aa:49:23:b9:a9:f6:
73:02:80:18:14:a4:19:be:5a:fe:ff:d0:db:f9:57:ca:49:ef:
fc:76:bd:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxmh+/7PFmAoLwIfJRX//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NTdjMDIwY2RjMjJiNjhkYTI2YTQ2OWY2ZmZhNmI0NDgz
NzBkMWQwHhcNMjYwMzAxMTkwMDU1WhcNMjYwMzAyMTkwMDU1WjAzMTEwLwYDVQQD
Eyg3NTcyM2RhYjlmYmM0ZTU1MTMwYjNmZGRhODIzMzRlYWIyMGYyZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj3V8/kgak7neiazaH+E6YUmzVlK
SHMi2kA0SPhV6K3PcKIVdgOm2Zq46k+bJEjxB4AQEuHbJdlBu0wgFoW9ZSNEnRiJ
FyGayoYhdXZP7FDufIVkJLDEMCM6PRKVnLRHNXTdweZdQg08I2vuvQXWOgt0YGDW
rat8LATnnhnX/rVg1fkDYyFadusc/uasn5WaTAg4Fr+XHtGVXsDxZTmkw0MRaZor
wqcBIAIhzZ00GwE+2l5XFlNOVWq7pNcblSbIDKgSv6UFhHzlDXleyz/0BPacGChp
bznt2ob4f10c0xftGwDLGNWd7mfjcQSdLAkgMgbLqSsin9G15K5TDhVkFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVyPaufvE5VEws/3agjNOqyDy3aMB8GA1UdIwQY
MBaAFPRXwCDNwito2iakafb/prRINw0dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAt
N2JhZmQ0M2U3ODYyLzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAtN2JhZmQ0M2U3ODYy
LzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWo7R1Uy
coWsciE38IlaMfmD1NPdSfj5KZVNL3h/7qXafdvINvvg16uS5gOU96wzra+JqukW
CwAXsgosNKNe1vHKEWDPkX2iry1Wx8V2Wf+qOmNHW+ipurMLdwMwrjuiWr8BDgA5
LHIDgXiSEYNAXy8ug3iyrIge81oDqPRChW3bSiZdphfMeeoULTUFeR7kDAY9Wykg
8zgfDAV7k+ylUIIsUvdj00S6vx24lyhPDHOZ8EFB9H9eAwWO/PdDEADHdHT6LGJX
Q7QauJprD+dqezDLRscaExm1BazOI9PKxErBZ5L0qkkjuan2cwKAGBSkGb5a/v/Q
2/lXyknv/Ha9XA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:56 2026 by rpki-client