Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
File: 9oXcPBRGS4xAgXUl2aJUtO06ijo.mft (raw, json)
Hash identifier: mNK9EN9SgthoWjQ5r6HXoF/Vghb7Cp0ryRR7TS+cdts=
Subject key identifier: 87:0E:DB:89:DA:0C:07:DC:D8:5E:0E:A1:A6:2C:06:26:6D:FD:30:D9
Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Certificate serial: 019E1EA343C64C2CCE3A0BE6C8942F700D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
Manifest number: 0362
Signing time: Wed 13 May 2026 00:01:16 +0000
Manifest this update: Wed 13 May 2026 00:01:16 +0000
Manifest next update: Thu 14 May 2026 00:01:16 +0000
Files and hashes: 1: 9oXcPBRGS4xAgXUl2aJUtO06ijo.crl (hash: f5nT1LEB7rTJ92PhODWdBBacqnpiVRX5odz/lNwC7Hk=)
2: HSRkhqaXY-J-szKJGb322CNozlI.roa (hash: AvBoZFMkLxLlkN5UUWxsTcEYLDw2vSTiZXKpkSzpzYg=)
3: _KbUElUf-kiJtWzmpDSNHdJCbc0.roa (hash: uVsgENyH2wJmt2BQoXK1ivNHMgsy0rMlEbl/JQCYCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:43:c6:4c:2c:ce:3a:0b:e6:c8:94:2f:70:0d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Validity
Not Before: May 13 00:01:16 2026 GMT
Not After : May 14 00:01:16 2026 GMT
Subject: CN=870edb89da0c07dcd85e0ea1a62c06266dfd30d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:03:0c:cb:23:04:2b:b2:be:72:0c:96:17:
51:90:c4:07:7b:0e:bc:6a:35:01:37:c3:24:de:d5:
cd:2d:72:85:d7:61:11:c9:5b:69:4e:7f:55:38:b0:
6c:f6:7c:56:9a:7b:08:36:88:36:5f:cd:ff:0f:e4:
0e:6c:45:bb:60:d5:60:83:4a:c6:2b:f0:b0:4b:ed:
26:e7:5a:14:65:89:96:14:a2:fb:b3:6b:b5:7b:92:
7e:04:38:9b:70:62:e5:36:cd:58:24:ba:63:c4:4b:
3f:f8:49:35:b7:cb:09:18:06:44:e8:c6:53:32:1d:
3c:59:eb:1e:fe:e4:27:d3:a6:46:01:6c:5e:dd:a5:
00:91:51:a8:67:76:89:ee:49:37:1b:8f:f9:6c:37:
ec:21:09:04:39:47:d2:73:87:ee:85:ab:9c:b6:b7:
73:a5:e5:5e:63:8a:03:8d:a9:ee:44:f2:63:87:6b:
ba:7f:81:04:28:3f:2a:37:cb:e8:db:1f:bb:de:5e:
6f:36:62:77:67:84:8a:81:f9:78:ee:16:be:ab:13:
1b:20:fc:8c:e5:c5:0f:c9:33:4c:61:75:80:90:c3:
ab:44:d7:55:d2:18:5a:f1:f4:f1:41:36:19:0b:c5:
e0:55:fe:04:90:99:99:65:e7:72:41:2c:85:7b:55:
e7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0E:DB:89:DA:0C:07:DC:D8:5E:0E:A1:A6:2C:06:26:6D:FD:30:D9
X509v3 Authority Key Identifier:
keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:67:2b:ca:63:c9:e2:22:2c:52:db:6c:71:ea:9a:8a:86:7d:
26:e3:06:2e:c7:6a:27:16:28:11:7d:95:b3:7b:a1:1c:bc:65:
2c:88:8d:e3:f6:c2:33:33:e6:de:e5:5a:a0:78:8b:9b:76:5b:
d6:ad:ad:b0:0f:fe:68:ab:50:76:47:e5:c6:1d:a9:4a:64:39:
0e:1f:4b:55:76:c9:8f:b5:6e:d9:09:c0:af:98:e2:e0:fe:bf:
99:33:64:44:8d:aa:f1:3b:5b:50:a7:c0:37:0f:0b:b1:6e:eb:
25:c3:3b:8e:53:46:7b:f8:84:e9:d5:78:48:8c:71:fb:1d:63:
30:22:64:13:6b:7e:8c:03:c8:93:92:38:f8:30:f0:1a:aa:6c:
5b:6b:e3:1c:97:eb:2c:fe:83:e4:b0:53:2e:75:29:5a:b3:dd:
2b:b8:a5:02:a6:b3:d1:86:77:ad:d3:67:aa:bd:29:79:ec:a8:
b9:07:f2:cc:4b:d9:2b:dd:0a:5d:74:d7:a8:aa:fc:92:a1:b9:
36:35:77:ec:a7:eb:ec:71:e2:3c:40:47:c5:f0:cd:82:7b:73:
bc:3c:bc:3c:50:52:a4:93:88:63:34:12:7a:1e:6d:35:ee:1f:
4f:3d:2a:a8:54:6d:d8:81:c6:ac:22:1a:ed:c4:46:fd:0a:f1:
8b:06:f5:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo0PGTCzOOgvmyJQvcA1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ODVkYzNjMTQ0NjRiOGM0MDgxNzUyNWQ5YTI1NGI0ZWQz
YThhM2EwHhcNMjYwNTEzMDAwMTE2WhcNMjYwNTE0MDAwMTE2WjAzMTEwLwYDVQQD
Eyg4NzBlZGI4OWRhMGMwN2RjZDg1ZTBlYTFhNjJjMDYyNjZkZmQzMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwADDMsjBCuyvnIMlhdRkMQHew68
ajUBN8Mk3tXNLXKF12ERyVtpTn9VOLBs9nxWmnsINog2X83/D+QObEW7YNVgg0rG
K/CwS+0m51oUZYmWFKL7s2u1e5J+BDibcGLlNs1YJLpjxEs/+Ek1t8sJGAZE6MZT
Mh08Wese/uQn06ZGAWxe3aUAkVGoZ3aJ7kk3G4/5bDfsIQkEOUfSc4fuhauctrdz
peVeY4oDjanuRPJjh2u6f4EEKD8qN8vo2x+73l5vNmJ3Z4SKgfl47ha+qxMbIPyM
5cUPyTNMYXWAkMOrRNdV0hha8fTxQTYZC8XgVf4EkJmZZedyQSyFe1XntQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcO24naDAfc2F4OoaYsBiZt/TDZMB8GA1UdIwQY
MBaAFPaF3DwURkuMQIF1JdmiVLTtOoo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYt
ZWI2N2Y4ZTYzMmI4LzEvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYtZWI2N2Y4ZTYzMmI4
LzEvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2crymPJ
4iIsUttsceqaioZ9JuMGLsdqJxYoEX2Vs3uhHLxlLIiN4/bCMzPm3uVaoHiLm3Zb
1q2tsA/+aKtQdkflxh2pSmQ5Dh9LVXbJj7Vu2QnAr5ji4P6/mTNkRI2q8TtbUKfA
Nw8LsW7rJcM7jlNGe/iE6dV4SIxx+x1jMCJkE2t+jAPIk5I4+DDwGqpsW2vjHJfr
LP6D5LBTLnUpWrPdK7ilAqaz0YZ3rdNnqr0peeyouQfyzEvZK90KXXTXqKr8kqG5
NjV37Kfr7HHiPEBHxfDNgntzvDy8PFBSpJOIYzQSeh5tNe4fTz0qqFRt2IHGrCIa
7cRG/Qrxiwb1Mg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:22:06 2026 by rpki-client