Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
File: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json)
Hash identifier: UloeVkZKvPdscT9dQwelm2kdghjBjnLRYHNGzv3pL9g=
Subject key identifier: 7A:72:56:9A:7B:50:BC:48:C7:92:DE:B9:08:7A:DB:DC:1F:37:EF:1B
Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
Certificate issuer: /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Certificate serial: 019E1D59C8203DA3A6977D1F9E1630EF6270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
Manifest number: 0887
Signing time: Tue 12 May 2026 18:01:23 +0000
Manifest this update: Tue 12 May 2026 18:01:23 +0000
Manifest next update: Wed 13 May 2026 18:01:23 +0000
Files and hashes: 1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: U8y0NbbrKO3Nyd1zVFISymQGeeMdoEd7aR9Si3X7LvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:c8:20:3d:a3:a6:97:7d:1f:9e:16:30:ef:62:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Validity
Not Before: May 12 18:01:23 2026 GMT
Not After : May 13 18:01:23 2026 GMT
Subject: CN=7a72569a7b50bc48c792deb9087adbdc1f37ef1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:a9:ab:8b:2f:74:4a:33:67:ab:ed:1e:7f:
c1:6a:7b:b4:4a:69:7e:c2:fc:51:23:1c:71:21:22:
c3:4d:03:3b:9c:52:eb:34:f8:6e:cb:6e:5c:b5:9e:
47:e9:e0:09:ac:4c:e5:b8:c4:c0:8f:f5:cb:2e:0d:
c0:b3:10:09:67:85:5f:17:90:e5:2a:fd:94:9f:fc:
fb:5a:aa:e7:57:f8:18:ea:41:30:ca:05:0d:65:ed:
f5:4d:0f:cb:7e:9c:1f:62:42:4d:90:ea:cb:a2:bf:
27:33:53:98:91:42:b4:8e:72:6a:8e:ec:1c:22:1a:
75:6d:1e:5d:89:c0:05:a7:28:f4:a6:8b:dc:65:b8:
e3:ba:d9:e9:17:ea:e3:8d:7e:1d:af:40:e0:6a:e6:
04:b4:0e:ec:e5:d2:8b:f4:31:04:c7:c3:54:10:56:
6a:70:1d:af:5d:da:ee:30:6e:20:62:6b:de:e8:58:
df:97:22:5b:e8:17:b8:5e:5b:26:19:a2:17:0a:ab:
00:d4:25:d4:c3:d5:a0:12:26:b0:0c:d2:c4:68:23:
5e:c3:ca:79:59:3c:a3:c0:cb:0e:d9:5a:90:64:6a:
7f:4e:3c:ef:9b:8d:a3:7f:f4:5f:fc:7f:51:96:07:
ee:a1:8e:df:03:6f:af:8f:4b:5e:92:1a:17:f8:a9:
4e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:72:56:9A:7B:50:BC:48:C7:92:DE:B9:08:7A:DB:DC:1F:37:EF:1B
X509v3 Authority Key Identifier:
keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4e:9e:a6:9d:d1:1a:9d:bf:d2:c9:9f:cc:51:32:c6:f5:b7:
6b:b7:90:13:0d:fe:80:9c:fe:9c:e0:c8:9c:07:44:90:da:ea:
98:9e:a3:88:04:c1:71:f3:1a:fd:df:0c:df:d4:05:0a:bc:9f:
2d:30:e1:64:e2:d8:ec:51:8b:55:86:4d:87:4e:4e:06:de:43:
b4:66:6b:2c:ee:22:16:20:66:c9:b3:31:d9:39:31:8f:c9:a3:
55:b3:97:aa:61:f1:29:bf:57:4b:13:c7:af:f8:05:0e:67:a6:
61:74:a2:1d:d4:c6:9e:1e:27:87:1f:0a:04:d7:98:90:b5:97:
cb:c7:4b:ba:88:99:e3:32:7b:fb:60:55:00:0d:e9:e1:96:59:
40:24:23:86:39:dd:01:75:36:ee:70:1e:bb:b4:92:5d:aa:e3:
16:a9:a8:48:2d:d3:d2:81:3b:23:e8:b8:6c:8b:52:e2:d9:7e:
51:b7:22:43:cb:40:cb:e1:27:46:2f:bf:54:4c:ea:c5:85:3a:
e9:16:61:81:5c:f8:94:37:50:b4:25:7d:a3:79:b2:91:fb:eb:
ca:eb:47:3b:03:75:4e:20:5c:98:4a:d0:09:75:79:f5:14:82:
e2:21:9b:f1:d8:7a:51:7a:20:41:17:e3:5a:fd:74:7a:e0:f6:
9a:fe:78:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWcggPaOml30fnhYw72JwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MzkxY2ZkMjhiMDdlNmE5ZTFjYTMyNTZjZGI4MjAxN2Iy
YjU2MjEwHhcNMjYwNTEyMTgwMTIzWhcNMjYwNTEzMTgwMTIzWjAzMTEwLwYDVQQD
Eyg3YTcyNTY5YTdiNTBiYzQ4Yzc5MmRlYjkwODdhZGJkYzFmMzdlZjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+apq4svdEozZ6vtHn/Banu0Sml+
wvxRIxxxISLDTQM7nFLrNPhuy25ctZ5H6eAJrEzluMTAj/XLLg3AsxAJZ4VfF5Dl
Kv2Un/z7WqrnV/gY6kEwygUNZe31TQ/LfpwfYkJNkOrLor8nM1OYkUK0jnJqjuwc
Ihp1bR5dicAFpyj0povcZbjjutnpF+rjjX4dr0DgauYEtA7s5dKL9DEEx8NUEFZq
cB2vXdruMG4gYmve6FjflyJb6Be4XlsmGaIXCqsA1CXUw9WgEiawDNLEaCNew8p5
WTyjwMsO2VqQZGp/Tjzvm42jf/Rf/H9RlgfuoY7fA2+vj0tekhoX+KlOAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpyVpp7ULxIx5LeuQh629wfN+8bMB8GA1UdIwQY
MBaAFPQ5HP0osH5qnhyjJWzbggF7K1YhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iNmVhM2UtY2M5MS00OGJmLTg2YmMt
ZTVhOWJhOGY1NmFlLzEvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9iNmVhM2UtY2M5MS00OGJmLTg2YmMtZTVhOWJhOGY1NmFl
LzEvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI06epp3R
Gp2/0smfzFEyxvW3a7eQEw3+gJz+nODInAdEkNrqmJ6jiATBcfMa/d8M39QFCryf
LTDhZOLY7FGLVYZNh05OBt5DtGZrLO4iFiBmybMx2Tkxj8mjVbOXqmHxKb9XSxPH
r/gFDmemYXSiHdTGnh4nhx8KBNeYkLWXy8dLuoiZ4zJ7+2BVAA3p4ZZZQCQjhjnd
AXU27nAeu7SSXarjFqmoSC3T0oE7I+i4bItS4tl+UbciQ8tAy+EnRi+/VEzqxYU6
6RZhgVz4lDdQtCV9o3mykfvryutHOwN1TiBcmErQCXV59RSC4iGb8dh6UXogQRfj
Wv10euD2mv54KA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:22:53 2026 by rpki-client