Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
File: 9bulXh8L-GE-qbu-KXooGzyDgYA.mft (raw, json)
Hash identifier: E8kk1fysPaSduaPbosjgkYJDFCcfD9Q7mWeQZy5Z6Lo=
Subject key identifier: B1:29:36:2C:B0:46:45:5A:35:1A:3A:82:8D:10:0E:E9:B0:23:CA:4C
Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
Certificate issuer: /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Certificate serial: 01A0D8DECE1C0979C7E8DC49316F1DF381B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 14:01:15 +0000
Manifest this update: Fri 25 Sep 2026 14:01:15 +0000
Manifest next update: Sat 26 Sep 2026 14:01:15 +0000
Files and hashes: 1: 9bulXh8L-GE-qbu-KXooGzyDgYA.crl (hash: FkYa8rfxU7XRhbvJIkN5PPUZrgn5UOnRHuuscuKIhQ0=)
2: sB9rgefHa3sSt6ZYnW1BwCOgmaU.roa (hash: svJIfKZ/TOmm8xXRzXlM/7QXfhtfTNna41fpYKpF970=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:ce:1c:09:79:c7:e8:dc:49:31:6f:1d:f3:81:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Validity
Not Before: Sep 25 14:01:15 2026 GMT
Not After : Sep 26 14:01:15 2026 GMT
Subject: CN=b129362cb046455a351a3a828d100ee9b023ca4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:f7:5c:f7:a9:21:d5:80:61:96:6e:8c:b4:
8e:39:c1:b4:e6:d9:92:e1:28:a0:4f:1b:1a:4a:2c:
43:a6:d1:7f:1e:8f:bf:40:51:0a:9e:69:22:5f:6e:
70:5a:f7:70:9d:ad:ae:9e:bf:6f:96:bb:45:b4:25:
02:7a:5e:95:5c:ca:1d:3a:77:7c:49:82:17:fe:d7:
e2:cc:4a:81:9b:24:39:ce:ad:66:c2:bf:d5:f8:83:
87:22:83:80:bc:09:c5:ec:48:a1:34:fe:4f:0a:c0:
83:e0:dc:03:e8:8c:2a:5b:f5:d9:35:46:f6:cb:d7:
a5:e3:e2:cb:c7:11:f3:8a:04:35:4d:1c:8f:13:a5:
a1:48:ea:99:22:02:ad:aa:7e:f8:38:61:94:4f:95:
34:bb:cc:de:a2:11:b7:c9:5e:17:cf:1a:f8:fe:38:
40:42:bf:7c:f6:02:c7:52:48:b1:96:83:2d:91:6f:
c6:c9:5e:72:71:66:1d:65:70:f3:25:ac:fc:94:64:
a0:17:13:d5:7f:b8:a7:4d:13:d9:4b:79:fe:3e:9a:
20:13:8a:bf:c5:66:94:c7:af:bd:b9:d1:d8:97:e1:
96:b5:1f:d5:06:99:20:8f:e8:e8:4b:a1:c8:ce:3f:
0d:94:08:87:01:03:8a:e3:82:f8:fd:ba:6b:ac:82:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:29:36:2C:B0:46:45:5A:35:1A:3A:82:8D:10:0E:E9:B0:23:CA:4C
X509v3 Authority Key Identifier:
keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:06:f9:fb:bc:f4:64:97:21:78:94:8d:ef:54:e3:a6:66:bf:
8f:ea:25:10:b4:0a:c0:e3:0b:36:2c:12:16:8b:c2:db:1a:48:
ef:f0:e2:3e:8c:02:bd:fb:e1:64:ad:a4:4f:07:69:c4:a4:f6:
67:26:fd:80:9e:96:99:00:5a:23:ac:10:36:6f:7d:06:20:67:
d0:a3:62:94:6a:b1:82:64:d4:cf:0d:95:f4:9e:39:49:ea:55:
cb:5d:50:2e:80:a9:bb:40:fc:0c:fb:7a:79:1b:04:48:7f:5a:
95:6c:5b:c8:46:f8:97:fb:2b:50:70:2d:7b:4b:45:f6:a4:e7:
f5:c4:a8:92:ae:67:7e:81:87:c1:a7:51:6b:53:84:97:f9:96:
a6:12:e2:e4:10:ac:b0:df:3e:54:78:fb:d6:89:96:ca:eb:4c:
da:a7:25:1d:45:20:d6:76:c3:d3:d2:02:27:9c:af:af:76:7d:
6f:a3:c2:31:fc:3c:ad:fb:54:cd:82:8d:50:fd:6b:0b:1a:1c:
cc:a8:b0:9d:f3:80:f7:c4:a8:b0:6a:63:41:d9:3e:13:31:eb:
58:46:5d:a3:ac:21:36:43:af:1d:88:1c:ba:68:b2:71:92:8d:
8a:e3:76:5a:4b:d9:5c:66:73:d8:67:c0:0d:b4:89:97:2d:66:
79:fc:3a:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY3s4cCXnH6NxJMW8d84G5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YmJhNTVlMWYwYmY4NjEzZWE5YmJiZTI5N2EyODFiM2M4
MzgxODAwHhcNMjYwOTI1MTQwMTE1WhcNMjYwOTI2MTQwMTE1WjAzMTEwLwYDVQQD
EyhiMTI5MzYyY2IwNDY0NTVhMzUxYTNhODI4ZDEwMGVlOWIwMjNjYTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8j3XPepIdWAYZZujLSOOcG05tmS
4SigTxsaSixDptF/Ho+/QFEKnmkiX25wWvdwna2unr9vlrtFtCUCel6VXModOnd8
SYIX/tfizEqBmyQ5zq1mwr/V+IOHIoOAvAnF7EihNP5PCsCD4NwD6IwqW/XZNUb2
y9el4+LLxxHzigQ1TRyPE6WhSOqZIgKtqn74OGGUT5U0u8zeohG3yV4Xzxr4/jhA
Qr989gLHUkixloMtkW/GyV5ycWYdZXDzJaz8lGSgFxPVf7inTRPZS3n+PpogE4q/
xWaUx6+9udHYl+GWtR/VBpkgj+joS6HIzj8NlAiHAQOK44L4/bprrIJ3HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEpNiywRkVaNRo6go0QDumwI8pMMB8GA1UdIwQY
MBaAFPW7pV4fC/hhPqm7vil6KBs8g4GAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xN2NjNGEtMjkyYy00ZDUwLThkM2Ut
ZjViOTdjMGYwZjI0LzEvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8xN2NjNGEtMjkyYy00ZDUwLThkM2UtZjViOTdjMGYwZjI0
LzEvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQb5+7z0
ZJcheJSN71Tjpma/j+olELQKwOMLNiwSFovC2xpI7/DiPowCvfvhZK2kTwdpxKT2
Zyb9gJ6WmQBaI6wQNm99BiBn0KNilGqxgmTUzw2V9J45SepVy11QLoCpu0D8DPt6
eRsESH9alWxbyEb4l/srUHAte0tF9qTn9cSokq5nfoGHwadRa1OEl/mWphLi5BCs
sN8+VHj71omWyutM2qclHUUg1nbD09ICJ5yvr3Z9b6PCMfw8rftUzYKNUP1rCxoc
zKiwnfOA98SosGpjQdk+EzHrWEZdo6whNkOvHYgcumiycZKNiuN2WkvZXGZz2GfA
DbSJly1mefw6Pw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:53:53 2026 by rpki-client