Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: RtngVCElD5rsI0sUnVnzCHMqPuJdGDrS05YArtJlRR4=
Subject key identifier: 54:B9:9D:85:D1:CB:A9:54:51:7D:5D:FE:D1:32:36:CD:B4:1A:F8:9C
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 019E1D59B6B7DB74EA8F3B718178B1780492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 09EF
Signing time: Tue 12 May 2026 18:01:19 +0000
Manifest this update: Tue 12 May 2026 18:01:19 +0000
Manifest next update: Wed 13 May 2026 18:01:19 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: sop1vX0abAVVyiKknNd5TspzDXPCy1mnPx0HKb/tP9g=)
2: umIyQ32hARkovH7pXTjPbQsyUAw.roa (hash: Vykeq8JG9Smu2I4EYLNs8vno3gc9BXMxlVVP02kGN2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:b6:b7:db:74:ea:8f:3b:71:81:78:b1:78:04:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: May 12 18:01:19 2026 GMT
Not After : May 13 18:01:19 2026 GMT
Subject: CN=54b99d85d1cba954517d5dfed13236cdb41af89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:bf:cb:92:02:08:29:0a:d5:cb:3f:f1:1e:
37:35:6e:e1:6c:03:48:bc:5a:af:4c:3e:a1:1b:24:
11:84:90:38:ee:8d:ff:39:c8:de:0b:f7:2d:1e:95:
90:71:4e:2b:16:85:43:7a:03:ff:e6:48:0a:80:3b:
e3:71:b0:8d:6b:af:53:3a:9e:ef:cd:04:c1:68:09:
15:1d:3e:fe:e1:7e:dd:42:79:e5:79:2c:8b:d5:56:
1d:73:e2:34:54:42:aa:bd:e2:7a:4b:af:2c:28:2c:
82:fe:c1:9f:17:42:08:a2:4f:d0:92:86:27:d5:07:
ef:e4:ca:23:cd:9c:43:66:38:71:10:5a:bd:e4:87:
5d:84:89:8a:e4:2c:c4:75:55:14:f5:f0:67:7d:7c:
c0:69:ef:5c:20:6f:e3:d3:bf:aa:57:2b:17:1c:34:
7c:11:b4:b6:39:a7:9e:e7:13:2a:29:dc:64:48:1a:
3b:e0:b5:ef:9f:d3:57:a0:8f:32:77:69:ac:d6:40:
0c:fd:e4:23:0f:8a:77:23:5b:08:b3:ca:22:f6:6c:
38:ef:1c:dc:d5:8c:ea:fc:e1:8c:90:05:d6:7b:1d:
78:f3:bf:a5:d2:68:25:09:f0:99:72:65:06:68:94:
23:60:fa:81:02:06:b0:c1:ea:29:17:1d:f5:10:34:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B9:9D:85:D1:CB:A9:54:51:7D:5D:FE:D1:32:36:CD:B4:1A:F8:9C
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:29:77:1c:90:6a:5f:7e:44:15:cd:22:71:c6:16:8a:8f:84:
a9:fe:27:74:7e:60:22:f5:c4:1c:8c:40:ee:ba:13:1b:fd:89:
a4:1e:12:90:69:b6:44:d9:80:18:60:a8:ab:78:d2:99:4d:94:
24:28:dd:d5:65:77:64:bd:41:6d:17:e9:41:e0:eb:4d:30:2b:
8c:b5:44:ad:84:34:05:22:87:91:7b:75:ce:df:ad:28:a2:7c:
94:4e:a1:47:c4:aa:d0:32:b5:4e:e0:2f:4d:77:52:3a:c6:5e:
a2:ab:37:be:de:5d:f5:bf:3c:db:5f:6e:69:fc:2a:6d:95:cd:
fb:02:31:73:19:d0:80:67:27:60:d1:2b:68:6c:d4:02:ce:03:
5f:a8:5d:bd:f0:4f:c2:fb:eb:31:40:0e:aa:9e:51:c0:50:ae:
48:70:b7:34:dc:db:bc:60:d7:8f:e3:d1:8e:68:19:d9:00:fb:
09:cb:40:f4:64:58:77:83:f2:5f:cf:ea:cf:f1:8c:84:f2:c3:
26:2b:2d:f2:fa:6a:be:44:e2:ed:c2:78:fa:5e:7b:45:76:43:
97:47:a8:6c:4e:12:aa:05:97:30:aa:57:a1:a6:59:d7:6e:eb:
6f:f2:fe:53:be:b7:31:4a:be:74:fc:88:fc:f1:4d:11:c6:14:
62:c7:5d:7d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4dWba323TqjztxgXixeASSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhY2Y1ZTFlOTI4ODg2MDc4MGQxMmUzNGE0YWQzYjQwZDk4
NDgzZmMwHhcNMjYwNTEyMTgwMTE5WhcNMjYwNTEzMTgwMTE5WjAzMTEwLwYDVQQD
Eyg1NGI5OWQ4NWQxY2JhOTU0NTE3ZDVkZmVkMTMyMzZjZGI0MWFmODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv42/y5ICCCkK1cs/8R43NW7hbANI
vFqvTD6hGyQRhJA47o3/OcjeC/ctHpWQcU4rFoVDegP/5kgKgDvjcbCNa69TOp7v
zQTBaAkVHT7+4X7dQnnleSyL1VYdc+I0VEKqveJ6S68sKCyC/sGfF0IIok/QkoYn
1Qfv5MojzZxDZjhxEFq95IddhImK5CzEdVUU9fBnfXzAae9cIG/j07+qVysXHDR8
EbS2Oaee5xMqKdxkSBo74LXvn9NXoI8yd2ms1kAM/eQjD4p3I1sIs8oi9mw47xzc
1Yzq/OGMkAXWex1487+l0mglCfCZcmUGaJQjYPqBAgawweopFx31EDSaiwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFS5nYXRy6lUUX1d/tEyNs20GvicMB8GA1UdIwQY
MBaAFPrPXh6SiIYHgNEuNKStO0DZhIP8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zOWVIcEtJaGdlQTBTNDBwSzA3UU5tRWdfdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvMzljNjIyLTQ4NjctNGZiMy04ZWY3
LTVkMjdmOWRiZWQ2Ni8xLzEtczllSHBLSWhnZUEwUzQwcEswN1FObUVnX3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY3LzM5YzYyMi00ODY3LTRmYjMtOGVmNy01ZDI3ZjlkYmVk
NjYvMS8xLXM5ZUhwS0loZ2VBMFM0MHBLMDdRTm1FZ193LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSl3
HJBqX35EFc0iccYWio+Eqf4ndH5gIvXEHIxA7roTG/2JpB4SkGm2RNmAGGCoq3jS
mU2UJCjd1WV3ZL1BbRfpQeDrTTArjLVErYQ0BSKHkXt1zt+tKKJ8lE6hR8Sq0DK1
TuAvTXdSOsZeoqs3vt5d9b88219uafwqbZXN+wIxcxnQgGcnYNEraGzUAs4DX6hd
vfBPwvvrMUAOqp5RwFCuSHC3NNzbvGDXj+PRjmgZ2QD7CctA9GRYd4PyX8/qz/GM
hPLDJist8vpqvkTi7cJ4+l57RXZDl0eobE4SqgWXMKpXoaZZ127rb/L+U763MUq+
dPyI/PFNEcYUYsddfQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:15:21 2026 by rpki-client