Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier: day2WWop5EggQ8BtirpUry194C9X3WnBxDgze9kNLVY=
Subject key identifier: F8:63:E4:76:28:D9:C3:26:B7:A2:66:B5:9E:43:47:3F:E3:95:A8:F3
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer: /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial: 019E1D9070A352E6746EDEB949940C432CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number: 1032
Signing time: Tue 12 May 2026 19:01:05 +0000
Manifest this update: Tue 12 May 2026 19:01:05 +0000
Manifest next update: Wed 13 May 2026 19:01:05 +0000
Files and hashes: 1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: giNhC+Y+bWJjByv7ZgWw2p2zI3qT0mo1Y2yjDkvqvk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:70:a3:52:e6:74:6e:de:b9:49:94:0c:43:2c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
Validity
Not Before: May 12 19:01:05 2026 GMT
Not After : May 13 19:01:05 2026 GMT
Subject: CN=f863e47628d9c326b7a266b59e43473fe395a8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:0a:6b:1d:39:e2:c1:1f:45:2e:5b:80:b3:
89:93:b2:2b:95:45:7c:e6:d5:ab:a6:ab:5d:23:d2:
b7:4e:fd:9c:d8:95:00:1f:b1:91:5a:05:06:d3:6d:
e4:fb:c0:a7:d3:10:b3:2c:ff:e4:d1:42:37:89:f0:
7e:6b:d0:e8:2e:69:27:4c:4c:3c:18:a9:78:a9:bb:
98:f7:20:4d:27:ec:ac:7c:bc:f2:5b:00:7c:38:fe:
07:94:da:42:b2:d1:ba:6b:6e:ad:33:0b:2a:e7:2b:
55:31:1b:53:d4:7c:47:f0:0c:53:68:c4:49:11:e2:
33:da:e0:d5:f1:2a:71:fd:4f:cd:4d:7e:53:17:91:
4d:41:d5:28:d0:b3:e1:9b:12:c4:2e:32:d8:0f:99:
b6:ce:cb:49:76:81:8a:80:af:48:3f:e8:ca:ea:e9:
45:17:64:cc:70:60:bd:f9:99:45:f0:e3:44:ed:65:
e9:21:2d:ec:be:97:b1:3a:b8:c9:a3:08:e2:c9:f6:
21:7d:86:23:7d:68:f7:d8:3b:fb:c8:fe:d5:c0:9e:
ec:e5:50:d9:68:e3:60:51:76:ae:3c:de:39:75:18:
e4:2d:79:8b:71:3a:92:72:45:ad:3c:cb:b7:1e:f7:
37:0a:1c:7a:90:f6:0a:78:9b:a4:89:b4:57:d7:5c:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:63:E4:76:28:D9:C3:26:B7:A2:66:B5:9E:43:47:3F:E3:95:A8:F3
X509v3 Authority Key Identifier:
keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:aa:da:5f:f9:cc:d0:6a:a4:81:96:94:10:cb:0f:6e:17:a7:
0d:d5:d1:3c:83:bc:86:a9:b9:e4:6b:60:9e:17:56:47:47:ea:
4f:78:83:b8:07:c8:91:60:45:fe:0c:11:5e:5a:f7:26:6b:5b:
ea:57:bc:04:36:b2:aa:8b:09:9f:5a:21:68:f1:8b:fb:e3:47:
5c:ef:1a:29:a1:92:26:76:f6:ca:06:85:f1:73:29:6f:95:7d:
6e:d7:8e:96:c3:38:20:4d:c1:f0:78:59:15:2a:ca:87:32:2f:
24:af:1c:74:33:29:2c:c8:28:9a:2e:72:7a:56:79:7d:22:57:
b6:52:92:0c:29:f6:80:6e:33:65:66:8f:4d:11:a8:30:d3:b2:
3f:fd:ee:69:78:38:dd:2f:dc:c8:26:f7:36:a5:4b:0b:8a:c2:
a1:93:c6:65:26:9a:6e:d7:ba:00:c1:76:51:73:f1:eb:04:9b:
f6:7b:5b:ef:14:cf:28:28:ee:aa:97:72:9b:18:51:35:72:61:
23:eb:74:d9:0d:dc:8a:0c:55:84:41:0f:0f:0d:48:4c:05:ef:
71:13:94:49:bf:27:7d:86:a3:80:c2:33:f1:31:b8:7c:d4:0e:
9a:18:7d:b9:e9:63:5a:bb:0a:85:f7:a8:71:e0:c0:2c:5b:18:
09:37:b1:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkHCjUuZ0bt65SZQMQyzIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Nzc2NmYwNzI2Y2ZmODYxOGFmOTY4MjU4ZjViYjIyOWU5
MzdjNmUwHhcNMjYwNTEyMTkwMTA1WhcNMjYwNTEzMTkwMTA1WjAzMTEwLwYDVQQD
EyhmODYzZTQ3NjI4ZDljMzI2YjdhMjY2YjU5ZTQzNDczZmUzOTVhOGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q4Kax054sEfRS5bgLOJk7IrlUV8
5tWrpqtdI9K3Tv2c2JUAH7GRWgUG023k+8Cn0xCzLP/k0UI3ifB+a9DoLmknTEw8
GKl4qbuY9yBNJ+ysfLzyWwB8OP4HlNpCstG6a26tMwsq5ytVMRtT1HxH8AxTaMRJ
EeIz2uDV8Spx/U/NTX5TF5FNQdUo0LPhmxLELjLYD5m2zstJdoGKgK9IP+jK6ulF
F2TMcGC9+ZlF8ONE7WXpIS3svpexOrjJowjiyfYhfYYjfWj32Dv7yP7VwJ7s5VDZ
aONgUXauPN45dRjkLXmLcTqSckWtPMu3Hvc3Chx6kPYKeJukibRX11zmhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhj5HYo2cMmt6JmtZ5DRz/jlajzMB8GA1UdIwQY
MBaAFPV3ZvBybP+GGK+Wglj1uyKek3xuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81OTBiN2YtYmJkMi00NjY2LWI4ZmMt
YTgwMjI0NjA0ZjI1LzEvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81OTBiN2YtYmJkMi00NjY2LWI4ZmMtYTgwMjI0NjA0ZjI1
LzEvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaraX/nM
0GqkgZaUEMsPbhenDdXRPIO8hqm55GtgnhdWR0fqT3iDuAfIkWBF/gwRXlr3Jmtb
6le8BDayqosJn1ohaPGL++NHXO8aKaGSJnb2ygaF8XMpb5V9bteOlsM4IE3B8HhZ
FSrKhzIvJK8cdDMpLMgomi5yelZ5fSJXtlKSDCn2gG4zZWaPTRGoMNOyP/3uaXg4
3S/cyCb3NqVLC4rCoZPGZSaabte6AMF2UXPx6wSb9ntb7xTPKCjuqpdymxhRNXJh
I+t02Q3cigxVhEEPDw1ITAXvcROUSb8nfYajgMIz8TG4fNQOmhh9ueljWrsKhfeo
ceDALFsYCTexGA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:03:50 2026 by rpki-client