Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
File: 9YQK34T7C3WOuopaE1qYA5Pov3M.mft (raw, json)
Hash identifier: qhasebG2pB5YaGiKfDGIGBLWgtQXRmqWgpsI+vR4s7M=
Subject key identifier: 84:48:1B:25:68:D9:51:8E:05:04:91:5C:A1:22:BD:25:BC:70:76:7A
Authority key identifier: F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73
Certificate issuer: /CN=f5840adf84fb0b758eba8a5a135a980393e8bf73
Certificate serial: 019E1CEB61D8BEA057E7DED700EE44298154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
Manifest number: 04B1
Signing time: Tue 12 May 2026 16:00:48 +0000
Manifest this update: Tue 12 May 2026 16:00:48 +0000
Manifest next update: Wed 13 May 2026 16:00:48 +0000
Files and hashes: 1: 9YQK34T7C3WOuopaE1qYA5Pov3M.crl (hash: fs1tGnwYleilJISDIp64+AdJXbwf1DrqCwzKP9B5oQw=)
2: drA-qEeuOhXaBIliMFDyRwjzUIs.roa (hash: LRSsWiFp5H7cghjLHXgtjNhMqPss6jgTVs0oIRjr8vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:61:d8:be:a0:57:e7:de:d7:00:ee:44:29:81:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5840adf84fb0b758eba8a5a135a980393e8bf73
Validity
Not Before: May 12 16:00:48 2026 GMT
Not After : May 13 16:00:48 2026 GMT
Subject: CN=84481b2568d9518e0504915ca122bd25bc70767a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:97:46:5f:77:77:22:03:b5:b3:95:6c:5a:
6a:e4:7b:22:9f:f5:4e:9b:ac:75:0e:58:d9:45:0d:
11:fb:e2:6d:68:4c:61:8e:ff:67:f1:cc:b9:55:db:
2b:4c:46:78:15:14:dd:f2:a0:80:fe:db:ed:d3:17:
31:71:41:d5:77:59:84:b4:2f:01:af:f2:cb:25:7c:
e6:31:34:6c:7a:90:ff:0a:aa:30:52:16:4c:82:00:
45:3e:b0:dd:c6:3e:24:dc:0a:10:c0:ff:2b:e4:6d:
ff:31:9b:4b:0a:56:ef:2f:5f:83:c5:89:82:60:29:
0a:d2:28:52:fb:1c:f2:1a:17:a4:5b:ec:b7:e1:a1:
af:da:d6:41:1a:69:bf:07:95:9d:28:67:37:ea:c7:
dc:5f:c9:a8:46:e8:09:48:6c:49:da:47:ab:35:32:
0d:a0:ca:fc:b0:33:34:70:fc:31:00:15:f6:02:6d:
a3:a3:2a:c9:39:9d:f3:6d:24:5b:de:a9:ef:f7:85:
f1:0c:b8:f0:f6:19:f4:23:e8:c6:51:3f:49:fe:c4:
55:11:ea:a5:53:6c:3f:de:1b:d0:1e:33:92:e9:14:
76:fe:70:79:af:cd:b3:76:f6:dd:ac:c1:aa:21:a0:
bc:05:e1:71:d6:db:c4:72:99:4b:f4:c6:6c:aa:6b:
12:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:48:1B:25:68:D9:51:8E:05:04:91:5C:A1:22:BD:25:BC:70:76:7A
X509v3 Authority Key Identifier:
keyid:F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:31:c3:59:2a:cb:e0:27:6e:da:38:8a:4a:f3:ff:37:25:9c:
a2:a2:62:d8:71:b8:45:15:9c:0a:cd:93:d8:58:6d:08:1c:d2:
d3:da:b5:1e:3a:58:85:ad:ac:d6:23:7b:6b:53:8d:92:2d:1c:
ca:dd:c5:78:4b:1b:ea:0e:c2:61:9f:fe:6e:1f:6b:fd:3c:93:
ea:76:b9:51:c2:c8:3d:0e:7d:91:9b:f1:c5:59:bf:90:11:c4:
a3:c1:d3:14:f9:31:f1:94:b2:1d:1c:db:ae:82:85:e9:34:9a:
77:30:97:fe:04:2e:60:4c:0b:46:a8:d8:5c:98:95:94:21:79:
da:7a:f5:66:f9:7c:9d:98:08:9c:33:f3:c0:1c:75:4e:dc:81:
b3:08:dc:aa:df:63:80:c1:a4:a0:59:48:00:6c:fb:bc:31:d7:
a7:c2:3f:ea:6c:52:e3:c8:cc:e8:3f:21:e4:57:70:a5:6d:36:
1c:88:f7:f4:d3:ac:9a:7a:53:17:30:5e:9e:89:1e:2e:ce:ba:
96:7b:ec:a5:48:44:0c:31:c3:16:d6:aa:7f:d0:05:e6:08:16:
ff:20:6b:cd:94:ca:97:c9:d1:8c:7c:90:48:d6:24:6c:b8:a0:
90:a0:f1:45:5a:6f:08:7f:44:b9:bd:b2:90:83:70:cb:7a:27:
c1:a8:9b:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c62HYvqBX597XAO5EKYFUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ODQwYWRmODRmYjBiNzU4ZWJhOGE1YTEzNWE5ODAzOTNl
OGJmNzMwHhcNMjYwNTEyMTYwMDQ4WhcNMjYwNTEzMTYwMDQ4WjAzMTEwLwYDVQQD
Eyg4NDQ4MWIyNTY4ZDk1MThlMDUwNDkxNWNhMTIyYmQyNWJjNzA3NjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0+XRl93dyIDtbOVbFpq5Hsin/VO
m6x1DljZRQ0R++JtaExhjv9n8cy5VdsrTEZ4FRTd8qCA/tvt0xcxcUHVd1mEtC8B
r/LLJXzmMTRsepD/CqowUhZMggBFPrDdxj4k3AoQwP8r5G3/MZtLClbvL1+DxYmC
YCkK0ihS+xzyGhekW+y34aGv2tZBGmm/B5WdKGc36sfcX8moRugJSGxJ2kerNTIN
oMr8sDM0cPwxABX2Am2joyrJOZ3zbSRb3qnv94XxDLjw9hn0I+jGUT9J/sRVEeql
U2w/3hvQHjOS6RR2/nB5r82zdvbdrMGqIaC8BeFx1tvEcplL9MZsqmsS+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRIGyVo2VGOBQSRXKEivSW8cHZ6MB8GA1UdIwQY
MBaAFPWECt+E+wt1jrqKWhNamAOT6L9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVlRSzM0VDdDM1dPdW9wYUUxcVlBNVBvdjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80ZjY4N2YtNDJmZS00N2FlLWEwZGIt
NGM1OTYwZGRlYjM3LzEvOVlRSzM0VDdDM1dPdW9wYUUxcVlBNVBvdjNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS80ZjY4N2YtNDJmZS00N2FlLWEwZGItNGM1OTYwZGRlYjM3
LzEvOVlRSzM0VDdDM1dPdW9wYUUxcVlBNVBvdjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDHDWSrL
4Cdu2jiKSvP/NyWcoqJi2HG4RRWcCs2T2FhtCBzS09q1HjpYha2s1iN7a1ONki0c
yt3FeEsb6g7CYZ/+bh9r/TyT6na5UcLIPQ59kZvxxVm/kBHEo8HTFPkx8ZSyHRzb
roKF6TSadzCX/gQuYEwLRqjYXJiVlCF52nr1Zvl8nZgInDPzwBx1TtyBswjcqt9j
gMGkoFlIAGz7vDHXp8I/6mxS48jM6D8h5FdwpW02HIj39NOsmnpTFzBenokeLs66
lnvspUhEDDHDFtaqf9AF5ggW/yBrzZTKl8nRjHyQSNYkbLigkKDxRVpvCH9Eub2y
kINwy3onwaibCQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:29:24 2026 by rpki-client