Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
File: 9vqbUoZNztDV7ON-dDciSyVCJIs.mft (raw, json)
Hash identifier: WQNHHBtm9j75oKHhnwyVi3MeVmJYK0qESZDOhveJd1w=
Subject key identifier: 88:9C:E9:66:25:BB:09:36:5C:2C:08:F4:AF:66:C8:AE:70:A4:1A:B1
Authority key identifier: F6:FA:9B:52:86:4D:CE:D0:D5:EC:E3:7E:74:37:22:4B:25:42:24:8B
Certificate issuer: /CN=f6fa9b52864dced0d5ece37e7437224b2542248b
Certificate serial: 019E1E6C82C0CF89E544B1132D4761484A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
Manifest number: 0262
Signing time: Tue 12 May 2026 23:01:28 +0000
Manifest this update: Tue 12 May 2026 23:01:28 +0000
Manifest next update: Wed 13 May 2026 23:01:28 +0000
Files and hashes: 1: 9vqbUoZNztDV7ON-dDciSyVCJIs.crl (hash: I56lnbuydANfruWppl7T5m2RAp6SFxgZ8s0mY2b6lEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:82:c0:cf:89:e5:44:b1:13:2d:47:61:48:4a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6fa9b52864dced0d5ece37e7437224b2542248b
Validity
Not Before: May 12 23:01:28 2026 GMT
Not After : May 13 23:01:28 2026 GMT
Subject: CN=889ce96625bb09365c2c08f4af66c8ae70a41ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:72:17:df:d8:59:41:d5:b5:bc:2a:cb:f4:
b6:71:2a:91:f5:55:80:dc:b3:39:85:8a:a4:cc:b8:
05:82:e6:7c:15:24:7e:b0:47:15:4b:d8:02:aa:2c:
af:64:f6:ec:3f:24:93:fa:14:a3:43:cf:0d:f0:ad:
37:44:c2:a1:d5:b9:4b:1a:61:80:b2:36:09:b4:03:
f6:ec:5d:3e:62:7a:b1:ab:5b:80:b2:78:70:d8:2e:
30:17:6e:83:b2:8c:6d:13:73:41:83:a2:5e:c5:3b:
38:56:09:cd:e4:3e:3c:0b:92:95:dc:a6:c9:b3:4e:
b4:71:cf:23:95:a6:51:27:b1:8a:3f:de:f0:eb:09:
ca:eb:ea:ee:df:13:11:3f:e6:b7:cb:72:21:c5:ee:
e8:0c:17:d2:16:6f:06:ac:0c:77:20:30:54:02:31:
1b:38:9e:77:f8:45:52:69:ae:dc:12:9e:59:86:7e:
7f:8b:0b:b8:89:f9:49:64:2a:d3:17:f8:42:1e:13:
77:0c:cd:45:a9:42:f9:8c:f9:b3:6f:6e:07:73:ef:
17:fd:81:65:22:49:49:ed:77:79:ae:90:3f:48:41:
2f:8c:da:fb:bb:3b:74:3c:b6:62:aa:5d:97:0c:7b:
3b:e3:a4:a5:24:4a:f5:b3:10:7c:ad:54:01:16:65:
91:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9C:E9:66:25:BB:09:36:5C:2C:08:F4:AF:66:C8:AE:70:A4:1A:B1
X509v3 Authority Key Identifier:
keyid:F6:FA:9B:52:86:4D:CE:D0:D5:EC:E3:7E:74:37:22:4B:25:42:24:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f5:c9:1a:b9:b5:f3:b8:72:65:53:74:99:40:a8:54:16:9d:
1a:b9:03:a3:65:5f:ba:3d:31:3c:86:b0:63:62:c2:0d:b7:19:
b6:86:01:8d:b0:91:e2:50:2d:68:dc:5b:43:d4:1e:53:79:b8:
99:5c:ed:e3:df:82:f5:e9:63:78:87:c4:62:69:53:17:93:31:
68:93:23:d4:c8:0b:a1:c6:3a:44:05:e3:5d:7c:2b:cd:bd:af:
2d:74:39:a1:d8:58:2f:c2:07:75:ec:a6:26:0f:ae:c4:9a:f6:
e2:07:89:f9:0e:7c:91:85:ae:eb:c3:12:9c:3f:92:8b:85:b6:
bc:d8:24:9e:37:b3:66:89:f6:b5:d2:5f:7b:1a:ea:cc:7d:31:
c9:0c:02:83:9c:e0:d5:3d:e6:3c:ad:55:16:a4:ed:50:a8:5f:
f6:00:8d:19:99:d6:fc:28:fc:41:c7:1e:93:d1:58:ce:b6:70:
8d:76:7f:0b:d6:6d:46:c5:48:25:35:06:97:7c:1d:88:d3:2f:
8e:ce:bf:27:9b:54:92:49:56:fb:52:15:d8:ff:f5:96:0d:21:
2c:4c:38:5d:f6:2e:d5:da:17:78:d8:4f:82:60:69:54:58:ad:
28:57:19:63:12:47:a4:78:e7:35:63:6e:1a:4d:fe:cb:d8:f4:
80:02:7c:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebILAz4nlRLETLUdhSEo0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZmE5YjUyODY0ZGNlZDBkNWVjZTM3ZTc0MzcyMjRiMjU0
MjI0OGIwHhcNMjYwNTEyMjMwMTI4WhcNMjYwNTEzMjMwMTI4WjAzMTEwLwYDVQQD
Eyg4ODljZTk2NjI1YmIwOTM2NWMyYzA4ZjRhZjY2YzhhZTcwYTQxYWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzxyF9/YWUHVtbwqy/S2cSqR9VWA
3LM5hYqkzLgFguZ8FSR+sEcVS9gCqiyvZPbsPyST+hSjQ88N8K03RMKh1blLGmGA
sjYJtAP27F0+Ynqxq1uAsnhw2C4wF26DsoxtE3NBg6JexTs4VgnN5D48C5KV3KbJ
s060cc8jlaZRJ7GKP97w6wnK6+ru3xMRP+a3y3Ihxe7oDBfSFm8GrAx3IDBUAjEb
OJ53+EVSaa7cEp5Zhn5/iwu4iflJZCrTF/hCHhN3DM1FqUL5jPmzb24Hc+8X/YFl
IklJ7Xd5rpA/SEEvjNr7uzt0PLZiql2XDHs746SlJEr1sxB8rVQBFmWRyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIic6WYluwk2XCwI9K9myK5wpBqxMB8GA1UdIwQY
MBaAFPb6m1KGTc7Q1ezjfnQ3IkslQiSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXZxYlVvWk56dERWN09OLWREY2lTeVZDSklzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80OGQ5ODctNGNhNi00MzIwLTkyZDAt
MDk5YjZiYmYxYTQ1LzEvOXZxYlVvWk56dERWN09OLWREY2lTeVZDSklzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS80OGQ5ODctNGNhNi00MzIwLTkyZDAtMDk5YjZiYmYxYTQ1
LzEvOXZxYlVvWk56dERWN09OLWREY2lTeVZDSklzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvXJGrm1
87hyZVN0mUCoVBadGrkDo2Vfuj0xPIawY2LCDbcZtoYBjbCR4lAtaNxbQ9QeU3m4
mVzt49+C9eljeIfEYmlTF5MxaJMj1MgLocY6RAXjXXwrzb2vLXQ5odhYL8IHdeym
Jg+uxJr24geJ+Q58kYWu68MSnD+Si4W2vNgknjezZon2tdJfexrqzH0xyQwCg5zg
1T3mPK1VFqTtUKhf9gCNGZnW/Cj8Qccek9FYzrZwjXZ/C9ZtRsVIJTUGl3wdiNMv
js6/J5tUkklW+1IV2P/1lg0hLEw4XfYu1doXeNhPgmBpVFitKFcZYxJHpHjnNWNu
Gk3+y9j0gAJ8bQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:04:08 2026 by rpki-client