Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
File: 0F9s96mFiwKHHBx_E9GzOIDpii0.mft (raw, json)
Hash identifier: 5YaSwXZZNtn8Ttxfl+8IYqVEnyacWLdcW2oea9AqPZ4=
Subject key identifier: D2:95:1E:65:2B:CE:3F:B5:41:78:F9:1B:69:F9:25:EF:5E:F7:55:38
Authority key identifier: D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D
Certificate issuer: /CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d
Certificate serial: 019E1D593AEAE394CF811285B20606ED9B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
Manifest number: 018A
Signing time: Tue 12 May 2026 18:00:47 +0000
Manifest this update: Tue 12 May 2026 18:00:47 +0000
Manifest next update: Wed 13 May 2026 18:00:47 +0000
Files and hashes: 1: 0F9s96mFiwKHHBx_E9GzOIDpii0.crl (hash: /RccrR/DuFPmrWnFreCngB5KHLVAzJ2TzdJ05yFNLxo=)
2: dIxRZVoK391SO4N57N0kDl39xT8.roa (hash: svamFcAbrklGijDHK+E9cDfDGI1J3qNLX+B2lQjxTj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:3a:ea:e3:94:cf:81:12:85:b2:06:06:ed:9b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d
Validity
Not Before: May 12 18:00:47 2026 GMT
Not After : May 13 18:00:47 2026 GMT
Subject: CN=d2951e652bce3fb54178f91b69f925ef5ef75538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:f5:17:53:ac:71:ad:e5:0e:cc:34:d8:de:
e5:85:98:45:33:cf:f4:b2:a3:41:7c:e9:22:53:35:
d0:85:3e:1a:2d:eb:7d:de:ae:68:be:e5:73:a7:57:
61:90:1b:cb:0c:75:b8:db:24:0b:57:94:08:f3:3a:
c6:aa:c1:af:6b:d4:01:24:8d:bb:bd:5f:a3:70:b0:
7c:f3:ac:91:01:10:59:9e:17:52:3c:8f:e1:81:df:
2d:4a:ce:c2:29:2f:e2:1a:cd:d7:73:90:d0:09:e4:
c2:f0:0a:a3:73:58:bb:9f:02:f7:26:98:4f:2b:35:
7b:e8:dc:26:af:da:d0:f6:06:ea:bc:86:27:c6:4c:
65:6b:b8:29:6d:e8:1b:8d:29:eb:95:62:a5:3e:de:
33:8d:c6:aa:9c:99:5e:4d:f2:a2:2f:30:ac:b5:aa:
39:68:8b:a4:c4:0e:63:3d:ba:3e:3b:57:d0:05:88:
b9:5a:ed:37:44:7a:73:68:f1:61:dd:58:3f:96:19:
f9:76:85:30:1d:ed:03:78:31:96:b8:b9:2c:ff:46:
63:fc:7e:d7:6a:fd:a9:c3:f9:cf:90:b3:c4:cd:d6:
4b:d7:68:f8:6b:22:9f:22:c6:04:4d:86:a5:f4:43:
95:89:80:3e:b4:94:4a:fb:4b:94:a8:4a:78:90:b4:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:95:1E:65:2B:CE:3F:B5:41:78:F9:1B:69:F9:25:EF:5E:F7:55:38
X509v3 Authority Key Identifier:
keyid:D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:23:ba:f2:0d:02:8d:58:3e:72:e8:72:25:9f:1f:bf:66:41:
78:76:2c:14:78:d3:a1:24:a6:2f:85:49:d7:b7:1c:38:03:15:
0a:17:6f:aa:fc:3d:db:ed:5b:06:5b:57:f2:60:79:6f:eb:e0:
60:6e:51:a9:82:ca:37:e7:3e:80:b9:04:36:43:29:76:5c:00:
28:4a:bc:27:6b:c3:17:d3:f5:7c:c5:2a:d3:47:68:8b:43:27:
09:31:ab:8f:cd:96:af:5d:dd:f2:67:c6:cd:52:4e:28:2a:7d:
9a:68:37:99:15:96:32:7f:1c:ca:18:0a:42:bd:50:70:74:0a:
4e:fe:4b:0f:7a:dc:2c:01:12:42:e7:9e:35:c2:c8:b3:26:80:
12:98:b3:be:9d:91:eb:b6:2f:e0:d4:df:8d:25:66:0d:ca:9b:
1c:44:5c:66:67:dd:91:fa:4c:0c:1d:7d:52:56:4b:d9:99:67:
67:2b:7c:a5:18:c4:db:b8:62:b3:3d:8a:c8:07:27:93:e5:bb:
60:55:a0:ac:55:37:dd:29:53:51:34:aa:cd:6c:2d:3e:ae:c9:
58:29:42:c8:82:e4:2e:36:1d:67:1a:2a:d1:49:b3:48:12:95:
51:97:73:7c:df:f1:0c:54:7c:a6:79:8d:77:b0:85:d8:01:93:
65:f7:ed:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWTrq45TPgRKFsgYG7Zs7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNWY2Y2Y3YTk4NThiMDI4NzFjMWM3ZjEzZDFiMzM4ODBl
OThhMmQwHhcNMjYwNTEyMTgwMDQ3WhcNMjYwNTEzMTgwMDQ3WjAzMTEwLwYDVQQD
EyhkMjk1MWU2NTJiY2UzZmI1NDE3OGY5MWI2OWY5MjVlZjVlZjc1NTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWP1F1Osca3lDsw02N7lhZhFM8/0
sqNBfOkiUzXQhT4aLet93q5ovuVzp1dhkBvLDHW42yQLV5QI8zrGqsGva9QBJI27
vV+jcLB886yRARBZnhdSPI/hgd8tSs7CKS/iGs3Xc5DQCeTC8Aqjc1i7nwL3JphP
KzV76Nwmr9rQ9gbqvIYnxkxla7gpbegbjSnrlWKlPt4zjcaqnJleTfKiLzCstao5
aIukxA5jPbo+O1fQBYi5Wu03RHpzaPFh3Vg/lhn5doUwHe0DeDGWuLks/0Zj/H7X
av2pw/nPkLPEzdZL12j4ayKfIsYETYal9EOViYA+tJRK+0uUqEp4kLT/FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKVHmUrzj+1QXj5G2n5Je9e91U4MB8GA1UdIwQY
MBaAFNBfbPephYsChxwcfxPRsziA6YotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEY5czk2bUZpd0tISEJ4X0U5R3pPSURwaWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zNjRjNzgtYTlmNS00ZTg1LWJkY2Yt
MWNhNGNlMDI0Y2UwLzEvMEY5czk2bUZpd0tISEJ4X0U5R3pPSURwaWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8zNjRjNzgtYTlmNS00ZTg1LWJkY2YtMWNhNGNlMDI0Y2Uw
LzEvMEY5czk2bUZpd0tISEJ4X0U5R3pPSURwaWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCO68g0C
jVg+cuhyJZ8fv2ZBeHYsFHjToSSmL4VJ17ccOAMVChdvqvw92+1bBltX8mB5b+vg
YG5RqYLKN+c+gLkENkMpdlwAKEq8J2vDF9P1fMUq00doi0MnCTGrj82Wr13d8mfG
zVJOKCp9mmg3mRWWMn8cyhgKQr1QcHQKTv5LD3rcLAESQueeNcLIsyaAEpizvp2R
67Yv4NTfjSVmDcqbHERcZmfdkfpMDB19UlZL2ZlnZyt8pRjE27hisz2KyAcnk+W7
YFWgrFU33SlTUTSqzWwtPq7JWClCyILkLjYdZxoq0UmzSBKVUZdzfN/xDFR8pnmN
d7CF2AGTZfft0g==
-----END CERTIFICATE-----
Generated at Wed May 13 02:17:14 2026 by rpki-client