Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier: Fk1k/UhzcX238hrHnUEO08J/YNLMEQNos3phcBoMQ6k=
Subject key identifier: 79:E1:CF:1A:82:9A:25:9F:FE:AF:4A:69:17:52:AF:E5:D2:37:FB:60
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial: 019E1C7D5A8027C2B6A657DCEA12321676D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number: 0604
Signing time: Tue 12 May 2026 14:00:37 +0000
Manifest this update: Tue 12 May 2026 14:00:37 +0000
Manifest next update: Wed 13 May 2026 14:00:37 +0000
Files and hashes: 1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: 3ruf+8oI0kLWX+s+7nLbHtNJO2wpv88KnApFSucsaMM=)
2: JKxruJrsyQODEt0lo_2igVlEBhw.roa (hash: 2Ldq4wJQTMkIcJXiRtPhwdIrKaep4MniRxTOmuYmXUs=)
3: UrR8he9LeX1_n_grB04eKjIEfn4.roa (hash: 6VYM1BE9h3lSboPJRgPSxyvYhSPFOMNMfzzxqBF3w0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:5a:80:27:c2:b6:a6:57:dc:ea:12:32:16:76:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Validity
Not Before: May 12 14:00:37 2026 GMT
Not After : May 13 14:00:37 2026 GMT
Subject: CN=79e1cf1a829a259ffeaf4a691752afe5d237fb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2b:0a:26:00:71:fb:04:1a:af:2d:dc:66:9b:
c9:37:e6:96:63:53:a9:7f:c8:92:4a:04:58:9e:7c:
2b:83:ee:04:6c:b6:41:ac:5a:87:92:f5:c0:25:53:
99:15:e6:ce:c4:c3:42:0b:73:62:46:77:f4:25:98:
4b:16:f0:6e:0b:25:11:a1:5f:02:18:06:a2:71:26:
91:24:d9:f2:45:3d:c3:df:f5:0a:ba:80:d7:16:aa:
8c:81:a4:8b:0d:4b:5d:40:61:a8:b7:82:bf:09:1b:
28:61:63:eb:ec:eb:46:60:7a:1c:6b:ba:39:82:00:
24:c4:d9:c0:88:4d:c8:e6:ba:53:ba:e2:02:05:36:
fc:c0:11:89:dd:b2:b9:47:32:56:12:7c:ee:5b:3f:
03:80:83:81:01:67:0c:f9:96:62:c9:f2:9d:87:5d:
6c:91:0e:74:a8:92:a7:0e:6b:76:c8:e2:0e:b1:ea:
41:75:1b:fc:d3:7c:63:79:5e:57:41:ad:85:7d:62:
b6:2b:51:b8:26:af:06:6f:14:ff:bf:47:09:20:d4:
41:b6:8b:0a:0f:57:e8:bc:ff:07:67:ec:ed:dd:4f:
7c:0f:06:7c:b2:24:cd:53:22:a0:86:89:f7:74:0d:
aa:02:1b:fd:ff:d0:b3:b4:63:a2:3f:7f:64:8c:19:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E1:CF:1A:82:9A:25:9F:FE:AF:4A:69:17:52:AF:E5:D2:37:FB:60
X509v3 Authority Key Identifier:
keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fe:d0:ab:2f:e9:3f:bf:ab:5d:99:fd:9f:22:91:a5:b8:52:
16:79:94:a8:62:09:6f:e6:dd:2e:f8:99:0e:74:eb:07:02:1b:
18:a2:25:cf:e9:05:b4:3a:2b:c0:59:7f:15:5d:6a:66:00:21:
2c:75:23:97:a2:65:6e:06:74:95:14:f2:1b:f6:f8:93:a1:71:
02:33:fe:b4:50:45:95:97:05:ea:bf:5a:04:7c:c4:17:1c:14:
04:cd:72:d1:b4:5b:4a:60:35:f3:05:33:08:a1:b2:79:1f:ca:
be:5c:b3:52:10:4f:38:a0:68:85:eb:d8:a1:24:4d:3a:88:20:
e7:66:47:39:52:c7:ee:3d:f8:9c:a9:bf:e4:e6:a4:2d:69:50:
64:d6:5c:19:77:89:21:96:1e:6d:ad:5b:d5:6d:c1:22:6f:04:
0f:41:f3:d7:ef:fe:e3:76:8f:36:fa:40:5b:23:31:57:52:82:
8e:ce:4b:5a:be:ab:d6:52:70:a4:82:c2:20:42:b4:9e:03:a5:
a2:d8:5c:f6:f3:dd:4e:43:3f:09:22:d7:bb:bb:80:b9:77:e9:
ee:ab:37:17:9e:2e:ad:52:5a:e5:d5:72:45:35:49:f0:16:4e:
43:5a:94:55:af:fa:61:29:44:8f:7d:5f:1f:b3:38:b4:20:78:
f5:7e:87:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfVqAJ8K2plfc6hIyFnbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MWM3ZDQ3NzE4YThhNGE5ZDhjNTBiMjYwODNlNzE4NTI1
YjZjMWIwHhcNMjYwNTEyMTQwMDM3WhcNMjYwNTEzMTQwMDM3WjAzMTEwLwYDVQQD
Eyg3OWUxY2YxYTgyOWEyNTlmZmVhZjRhNjkxNzUyYWZlNWQyMzdmYjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxysKJgBx+wQary3cZpvJN+aWY1Op
f8iSSgRYnnwrg+4EbLZBrFqHkvXAJVOZFebOxMNCC3NiRnf0JZhLFvBuCyURoV8C
GAaicSaRJNnyRT3D3/UKuoDXFqqMgaSLDUtdQGGot4K/CRsoYWPr7OtGYHoca7o5
ggAkxNnAiE3I5rpTuuICBTb8wBGJ3bK5RzJWEnzuWz8DgIOBAWcM+ZZiyfKdh11s
kQ50qJKnDmt2yOIOsepBdRv803xjeV5XQa2FfWK2K1G4Jq8GbxT/v0cJINRBtosK
D1fovP8HZ+zt3U98DwZ8siTNUyKghon3dA2qAhv9/9CztGOiP39kjBmZIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnhzxqCmiWf/q9KaRdSr+XSN/tgMB8GA1UdIwQY
MBaAFPQcfUdxiopKnYxQsmCD5xhSW2wbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUt
NjBiMmM5ODIxMDc4LzEvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUtNjBiMmM5ODIxMDc4
LzEvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfP7Qqy/p
P7+rXZn9nyKRpbhSFnmUqGIJb+bdLviZDnTrBwIbGKIlz+kFtDorwFl/FV1qZgAh
LHUjl6JlbgZ0lRTyG/b4k6FxAjP+tFBFlZcF6r9aBHzEFxwUBM1y0bRbSmA18wUz
CKGyeR/KvlyzUhBPOKBohevYoSRNOogg52ZHOVLH7j34nKm/5OakLWlQZNZcGXeJ
IZYeba1b1W3BIm8ED0Hz1+/+43aPNvpAWyMxV1KCjs5LWr6r1lJwpILCIEK0ngOl
othc9vPdTkM/CSLXu7uAuXfp7qs3F54urVJa5dVyRTVJ8BZOQ1qUVa/6YSlEj31f
H7M4tCB49X6HsA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:36:34 2026 by rpki-client