Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
File: 9ghG8hxWqFE9McFV3RmRl6P_x8A.mft (raw, json)
Hash identifier: vKmtjCrYfo/KDRyDhqLY35q/KQIpoWMIEQWuiHGLsow=
Subject key identifier: 7D:56:2A:E7:2E:99:99:D4:B0:F1:F7:E9:6C:C6:78:38:E0:BD:37:24
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 019E1D903DD90C5C3587895557B3A87EADBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
Manifest number: 1919
Signing time: Tue 12 May 2026 19:00:52 +0000
Manifest this update: Tue 12 May 2026 19:00:52 +0000
Manifest next update: Wed 13 May 2026 19:00:52 +0000
Files and hashes: 1: 01ZkvNgWiFr2Xle1lgNBaYZj-X8.roa (hash: krV70iW09YOJwAzEmvYrpBPuNGdijVHEbPaa0HE/jsM=)
2: 9ghG8hxWqFE9McFV3RmRl6P_x8A.crl (hash: 4Ll1ZQr7tSDr1z5ZUccGIVvahGZykkfZM6VHqDrEDbc=)
3: EboQ4nMXI48WwaHSZ15OkVHDyAI.roa (hash: SI3+ap2GxZORyWEjQakTcPIlhvRATeVhJTKd2WR2ixc=)
4: OYpCQdK7lNSRzIdlHHMMZTxhha0.roa (hash: hLxZ48pmO0NghpmoI7b6iic2RgENYFKFAU8pL6U0sxU=)
5: W5i7jKztK_F-7p2FjKY5IXoTWnk.roa (hash: iWzQhvpIXmrZ9hLNW88m8Yge4x5Lx0tZrSAtIzszE3o=)
6: d9HTRu6eOaOYuXd9b7iVCEDddPQ.asa (hash: /iCij5LL4WBtNjhwsh6zV4snLZdM7CyjGzuB4jg4Zsg=)
7: xNSFqM7-0qNODofNrUEn4XQu4ME.roa (hash: raRCbVzrGPXhNpKnAVtwuinosdft0bdaQidRsp21paQ=)
8: xffyY7RBwYFFWdto18bFCIkAi6M.roa (hash: /wOHBg089w6pbrnt+9vXF4Wu2NJ5CjjnhokCvpVnwN4=)
9: ze2KUsLfZ-pSV5hj5uieRfWk9EE.asa (hash: rTgSzjLcrFW+Ml3XD84+8nUR06InVZZ/zrEf99lwY0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:3d:d9:0c:5c:35:87:89:55:57:b3:a8:7e:ad:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: May 12 19:00:52 2026 GMT
Not After : May 13 19:00:52 2026 GMT
Subject: CN=7d562ae72e9999d4b0f1f7e96cc67838e0bd3724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:2a:5b:3c:dd:ac:6a:3b:d1:5b:7f:8c:26:
41:70:8a:0f:98:c8:2d:90:f3:48:47:09:d1:d7:f9:
93:20:b2:e8:77:3f:e6:47:c7:76:24:cb:91:71:1c:
74:fe:b6:d6:9a:08:f1:72:0b:13:a6:f4:6a:41:0b:
0b:5f:34:a6:97:5f:66:f5:ae:e8:0b:c0:72:c0:9e:
d3:80:95:09:82:d1:94:6e:7d:bb:e4:c1:5c:c3:99:
0c:eb:be:1f:37:a2:c5:dc:fd:ed:43:10:bd:08:25:
18:82:2d:df:0f:e3:95:ca:5c:f4:95:ae:23:07:74:
79:b1:10:f7:32:1c:29:22:9b:1a:12:61:79:d4:d1:
c2:c2:48:7c:31:62:7e:50:d4:1e:d5:88:65:e6:b2:
0a:2f:f6:11:90:72:09:0d:af:a8:53:d1:5c:50:85:
6c:4a:39:66:21:ad:b7:4e:73:7a:e9:6f:60:1b:17:
29:09:bb:38:32:19:45:df:18:a1:ae:37:95:24:58:
e9:40:fe:18:2e:b5:e3:0f:be:ef:4d:04:98:b2:f8:
5b:07:1a:0c:8d:2a:7a:d6:36:de:aa:06:72:01:59:
59:af:0e:3e:e6:da:3b:5b:48:17:3a:3d:78:85:5b:
9d:5b:8e:52:49:c7:a2:32:9c:95:18:8f:7f:4e:37:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:56:2A:E7:2E:99:99:D4:B0:F1:F7:E9:6C:C6:78:38:E0:BD:37:24
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:76:be:bd:e1:46:65:76:76:2b:e5:cc:18:1a:7b:38:d6:02:
44:b4:d6:77:90:4d:1b:dd:55:92:17:45:35:bc:fa:33:44:d0:
90:50:15:0a:03:dc:c6:4d:7c:58:f3:47:1a:29:55:79:39:2d:
03:da:8f:59:0e:9b:13:4b:13:13:67:06:b0:65:e9:d8:4e:bf:
3d:08:52:74:80:ba:39:52:b0:05:a3:56:10:73:d4:3f:0f:1e:
1a:3f:c8:b0:88:55:d0:08:81:8c:9c:b9:99:16:07:a6:6f:73:
2e:1c:4a:35:ea:b4:f1:0a:c8:ff:9f:3d:49:b5:9d:e4:21:06:
37:16:a6:68:e7:33:b7:de:88:c5:2e:cf:4e:dd:35:aa:90:f6:
4a:40:ad:20:22:ff:38:7c:50:ad:6d:27:68:0c:fb:36:5c:60:
d2:92:bd:4a:67:0b:dd:bc:20:bb:c2:98:cf:5b:41:24:75:59:
76:7a:ba:aa:a5:3c:88:37:b3:f2:f0:b4:7f:fc:62:d6:55:71:
84:bf:37:a8:85:b8:a2:29:fc:c4:b0:3f:4d:75:f5:68:47:eb:
3e:1b:8d:26:f3:59:35:29:cb:6f:21:c5:3e:ff:0a:1c:02:eb:
f7:da:16:78:0d:7f:39:a6:3d:a6:82:90:a4:fe:77:b3:7c:12:
1a:de:34:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkD3ZDFw1h4lVV7Oofq29MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MDg0NmYyMWM1NmE4NTEzZDMxYzE1NWRkMTk5MTk3YTNm
ZmM3YzAwHhcNMjYwNTEyMTkwMDUyWhcNMjYwNTEzMTkwMDUyWjAzMTEwLwYDVQQD
Eyg3ZDU2MmFlNzJlOTk5OWQ0YjBmMWY3ZTk2Y2M2NzgzOGUwYmQzNzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n0qWzzdrGo70Vt/jCZBcIoPmMgt
kPNIRwnR1/mTILLodz/mR8d2JMuRcRx0/rbWmgjxcgsTpvRqQQsLXzSml19m9a7o
C8BywJ7TgJUJgtGUbn275MFcw5kM674fN6LF3P3tQxC9CCUYgi3fD+OVylz0la4j
B3R5sRD3MhwpIpsaEmF51NHCwkh8MWJ+UNQe1Yhl5rIKL/YRkHIJDa+oU9FcUIVs
SjlmIa23TnN66W9gGxcpCbs4MhlF3xihrjeVJFjpQP4YLrXjD77vTQSYsvhbBxoM
jSp61jbeqgZyAVlZrw4+5to7W0gXOj14hVudW45SSceiMpyVGI9/TjdsTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1WKucumZnUsPH36WzGeDjgvTckMB8GA1UdIwQY
MBaAFPYIRvIcVqhRPTHBVd0ZkZej/8fAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYt
YTZkNDVlZjdkMjI3LzEvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYtYTZkNDVlZjdkMjI3
LzEvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkna+veFG
ZXZ2K+XMGBp7ONYCRLTWd5BNG91VkhdFNbz6M0TQkFAVCgPcxk18WPNHGilVeTkt
A9qPWQ6bE0sTE2cGsGXp2E6/PQhSdIC6OVKwBaNWEHPUPw8eGj/IsIhV0AiBjJy5
mRYHpm9zLhxKNeq08QrI/589SbWd5CEGNxamaOczt96IxS7PTt01qpD2SkCtICL/
OHxQrW0naAz7Nlxg0pK9SmcL3bwgu8KYz1tBJHVZdnq6qqU8iDez8vC0f/xi1lVx
hL83qIW4oin8xLA/TXX1aEfrPhuNJvNZNSnLbyHFPv8KHALr99oWeA1/OaY9poKQ
pP53s3wSGt40Ag==
-----END CERTIFICATE-----
Generated at Tue May 12 21:36:42 2026 by rpki-client