Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: sLRuAsQKFcS7MtrqDw4n7s94PDlsM9Nn9K5N6WmT56Y=
Subject key identifier: 6B:A0:44:22:E2:AB:84:89:EE:FC:3E:3F:79:F9:EC:A3:B9:39:4C:7E
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 019E1D22C0DBEDD5ED400F7C0C34A70D6C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 11ED
Signing time: Tue 12 May 2026 17:01:17 +0000
Manifest this update: Tue 12 May 2026 17:01:17 +0000
Manifest next update: Wed 13 May 2026 17:01:17 +0000
Files and hashes: 1: 6YI5rJ7BlGzxSIRA8GPA9weBdeE.roa (hash: Rjqr+vNFn+Ln+ETYNFvgxdo2liKvZUHKE0VAbwfjlW8=)
2: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: sa5RP52sWQYQ1Qjr3DxdaEGqQ8XBAZB+ispU4P4huBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:c0:db:ed:d5:ed:40:0f:7c:0c:34:a7:0d:6c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: May 12 17:01:17 2026 GMT
Not After : May 13 17:01:17 2026 GMT
Subject: CN=6ba04422e2ab8489eefc3e3f79f9eca3b9394c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:1c:37:fb:88:dd:04:b6:8f:91:75:f6:1d:
1d:d3:b9:96:cb:b3:42:97:a9:d4:a0:2d:a8:9c:97:
f4:ca:9f:ad:a2:72:59:61:02:47:fc:5b:64:25:06:
77:7e:d7:c6:27:7f:c7:86:b4:e6:12:20:d6:5b:9c:
d6:0e:e2:8d:02:44:1a:e6:e2:b7:94:4a:3e:45:46:
29:c1:95:a5:65:76:53:de:27:de:d5:a0:9d:a7:d7:
90:3f:ac:4f:ae:f2:6c:90:57:66:ac:b4:cb:8d:ca:
73:69:00:b8:29:2c:b7:95:e0:65:01:89:6a:27:d7:
67:3e:2d:7c:c6:f5:fe:fc:aa:40:29:2a:cf:a1:f7:
22:2c:cd:98:2a:80:c2:3b:1d:94:ef:c1:84:1c:bd:
24:51:42:f9:6e:a1:de:37:d3:66:ad:4f:ef:53:96:
62:f3:7f:2e:bd:d6:63:75:2a:b6:49:fd:3b:30:e8:
7e:1d:d7:84:c6:6f:3f:df:fb:fc:82:71:2d:f5:7b:
0e:29:42:d7:b9:07:60:36:af:e9:84:0a:2f:10:b1:
a2:4f:5a:15:21:4e:b8:20:12:b6:22:dd:19:48:bb:
03:90:e5:52:1a:cc:41:6f:ba:59:a0:c1:43:a9:06:
22:90:90:e1:52:13:d0:d0:c8:54:c6:06:a1:41:62:
5c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A0:44:22:E2:AB:84:89:EE:FC:3E:3F:79:F9:EC:A3:B9:39:4C:7E
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c9:9b:b3:17:3f:94:c9:71:78:43:3d:58:f3:99:5a:a3:58:
79:78:01:3a:d8:5a:bb:4f:c0:67:8b:21:90:30:db:c0:b8:1b:
ed:a1:32:85:2b:b0:f9:09:38:43:99:0e:35:f2:3b:20:ac:b1:
fb:6c:30:2a:ee:69:39:0a:80:cb:5e:20:1f:e9:07:ed:d0:83:
ef:38:3f:98:c6:b3:b4:2c:62:dc:60:8e:bc:aa:6f:cb:58:fa:
fc:94:e9:e3:ce:36:36:a3:c9:bd:ec:b7:7a:29:79:25:93:ab:
f7:32:0b:e9:41:64:c6:16:b0:d0:d7:af:f7:8d:45:7b:74:17:
02:0d:a3:a2:5a:36:b3:52:25:60:9e:1a:a0:dc:32:6e:ee:51:
d0:c2:fe:d4:30:32:e1:da:95:2a:a4:3d:ed:7b:5c:9f:09:8d:
16:5f:d7:2e:5e:6a:08:87:8f:c4:86:dd:cb:ed:dc:df:18:12:
f5:16:19:dd:c9:a6:57:ef:38:e9:af:3d:b1:da:c0:e7:86:7c:
19:bf:f4:2b:e6:fa:21:b7:a3:be:95:6f:40:97:f2:c4:18:d8:
37:1f:69:50:85:14:2e:fc:95:14:9f:93:32:32:8c:df:86:6b:
67:ec:8b:66:45:2a:d4:ac:4c:25:87:09:26:59:1c:a2:a2:46:
0c:62:72:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIsDb7dXtQA98DDSnDWxOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2Y2IwYzhmMjA4NDMzMDIwMzRmNjM2NTZlYTI5ZWJkNmQx
MTYzYWEwHhcNMjYwNTEyMTcwMTE3WhcNMjYwNTEzMTcwMTE3WjAzMTEwLwYDVQQD
Eyg2YmEwNDQyMmUyYWI4NDg5ZWVmYzNlM2Y3OWY5ZWNhM2I5Mzk0YzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunocN/uI3QS2j5F19h0d07mWy7NC
l6nUoC2onJf0yp+tonJZYQJH/FtkJQZ3ftfGJ3/HhrTmEiDWW5zWDuKNAkQa5uK3
lEo+RUYpwZWlZXZT3ife1aCdp9eQP6xPrvJskFdmrLTLjcpzaQC4KSy3leBlAYlq
J9dnPi18xvX+/KpAKSrPofciLM2YKoDCOx2U78GEHL0kUUL5bqHeN9NmrU/vU5Zi
838uvdZjdSq2Sf07MOh+HdeExm8/3/v8gnEt9XsOKULXuQdgNq/phAovELGiT1oV
IU64IBK2It0ZSLsDkOVSGsxBb7pZoMFDqQYikJDhUhPQ0MhUxgahQWJcDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGugRCLiq4SJ7vw+P3n57KO5OUx+MB8GA1UdIwQY
MBaAFPbLDI8ghDMCA09jZW6inr1tEWOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUt
MmFmM2Q2MmJlN2YyLzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUtMmFmM2Q2MmJlN2Yy
LzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcmbsxc/
lMlxeEM9WPOZWqNYeXgBOthau0/AZ4shkDDbwLgb7aEyhSuw+Qk4Q5kONfI7IKyx
+2wwKu5pOQqAy14gH+kH7dCD7zg/mMaztCxi3GCOvKpvy1j6/JTp4842NqPJvey3
eil5JZOr9zIL6UFkxhaw0Nev941Fe3QXAg2jolo2s1IlYJ4aoNwybu5R0ML+1DAy
4dqVKqQ97XtcnwmNFl/XLl5qCIePxIbdy+3c3xgS9RYZ3cmmV+846a89sdrA54Z8
Gb/0K+b6IbejvpVvQJfyxBjYNx9pUIUULvyVFJ+TMjKM34ZrZ+yLZkUq1KxMJYcJ
JlkcoqJGDGJyPQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:43:40 2026 by rpki-client