Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
File: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft (raw, json)
Hash identifier: iuaveS6EJ88Oki4/xheyhcpn8WY4uEc2uGRgIGN4stg=
Subject key identifier: 2A:32:E8:F9:62:15:62:36:49:08:F5:FC:B7:1F:39:34:A2:41:D5:7A
Authority key identifier: F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
Certificate issuer: /CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Certificate serial: 019E1FECFC5B1AA6C5682B7CE1FD1634353C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
Manifest number: 16FC
Signing time: Wed 13 May 2026 06:01:25 +0000
Manifest this update: Wed 13 May 2026 06:01:25 +0000
Manifest next update: Thu 14 May 2026 06:01:25 +0000
Files and hashes: 1: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl (hash: nyzlZY3WMWbmSys4Yj+p6z4DvhaLsp8lepT1+v/Ptc8=)
2: UEAaPo6VUETHn6B0u4mE40cQPvI.roa (hash: oDl/sgYlJlPoPDa6gI6+975HLzl7ybSw7kcsMPOBkCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:fc:5b:1a:a6:c5:68:2b:7c:e1:fd:16:34:35:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Validity
Not Before: May 13 06:01:25 2026 GMT
Not After : May 14 06:01:25 2026 GMT
Subject: CN=2a32e8f9621562364908f5fcb71f3934a241d57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:15:fc:41:ab:8d:52:c2:79:7b:d5:16:e5:
62:66:5e:83:28:60:c7:25:5a:54:4b:40:1d:4e:2e:
54:bd:19:5c:dc:5e:92:4a:b4:98:67:2e:ad:11:02:
a5:93:b9:09:62:59:02:02:1b:38:34:29:31:24:7f:
61:6a:83:02:f3:76:f2:bc:57:e1:00:01:95:73:a1:
9d:50:8c:8c:6a:9f:b9:93:43:64:f6:fc:b8:7a:86:
b3:06:e7:0f:35:12:84:b8:0c:38:f8:92:da:16:9e:
0d:68:76:fa:13:c4:10:f5:23:ce:54:fb:a0:27:9b:
dc:5a:dc:1a:1d:42:d4:60:36:f9:aa:5b:63:69:b8:
b1:0a:1d:37:8e:21:7d:5a:a2:ed:22:81:90:9b:69:
73:82:02:ee:40:8d:0a:28:35:5d:77:4a:3f:e8:9e:
3b:5f:c8:5d:12:83:21:99:e6:4e:2e:01:a8:1e:df:
ee:72:41:9d:c4:d9:43:68:bd:05:25:4c:81:e6:2f:
79:a6:ad:09:15:1c:6b:59:4c:45:87:f4:23:48:88:
70:85:97:f8:36:a8:6d:02:76:8f:46:b5:05:10:49:
b1:7f:89:d5:13:af:aa:b8:15:9e:14:7f:73:ef:37:
42:8b:73:7a:ba:83:45:cf:51:3c:22:74:1a:8e:4c:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:32:E8:F9:62:15:62:36:49:08:F5:FC:B7:1F:39:34:A2:41:D5:7A
X509v3 Authority Key Identifier:
keyid:F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6b:f7:84:b4:fb:09:22:ae:8d:b2:83:2e:b9:71:b8:8f:ae:
d9:55:f3:9a:e6:d9:13:6f:3c:03:52:8b:cb:ee:db:e4:a9:5d:
90:21:ba:f4:45:b7:48:cd:79:ae:27:4d:d2:f7:89:b1:d3:a8:
93:12:e8:68:44:f2:49:46:18:0d:f2:4b:79:f1:49:36:1d:96:
d5:55:ab:64:e5:a6:a1:4f:59:8a:46:fb:9e:74:95:6f:31:49:
ff:d6:9f:c7:72:f8:d7:e7:69:58:6c:ed:26:4c:88:90:b9:55:
0a:aa:92:00:e0:32:b7:fa:4f:47:f0:39:1d:af:08:86:d7:c0:
c1:a9:16:c7:dd:a6:d3:19:34:b3:00:cf:74:91:5b:45:bb:d3:
0f:2f:06:aa:1b:fe:aa:02:1b:95:62:2f:db:0c:b0:45:5d:3d:
90:0f:4e:5f:f3:88:2a:48:0a:ea:b9:be:db:31:52:60:8b:94:
a0:0f:45:e8:bf:34:4d:c7:5c:e7:79:63:2e:af:62:6a:d3:ab:
52:6c:c0:38:10:08:e9:aa:8d:2e:dd:3f:bf:ac:06:08:0c:f1:
90:27:2c:05:eb:58:61:36:75:9f:23:38:09:57:fd:97:0f:ac:
f5:57:2d:9a:be:d8:fb:32:96:0a:3e:e6:0d:4d:2e:59:c7:f3:
e9:b0:a7:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7PxbGqbFaCt84f0WNDU8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1OWNiOTIzZTQwNjliZmUzNjJlMmQ5NmZmYWIyZmYzMTA3
ODMxN2EwHhcNMjYwNTEzMDYwMTI1WhcNMjYwNTE0MDYwMTI1WjAzMTEwLwYDVQQD
EygyYTMyZThmOTYyMTU2MjM2NDkwOGY1ZmNiNzFmMzkzNGEyNDFkNTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApikV/EGrjVLCeXvVFuViZl6DKGDH
JVpUS0AdTi5UvRlc3F6SSrSYZy6tEQKlk7kJYlkCAhs4NCkxJH9haoMC83byvFfh
AAGVc6GdUIyMap+5k0Nk9vy4eoazBucPNRKEuAw4+JLaFp4NaHb6E8QQ9SPOVPug
J5vcWtwaHULUYDb5qltjabixCh03jiF9WqLtIoGQm2lzggLuQI0KKDVdd0o/6J47
X8hdEoMhmeZOLgGoHt/uckGdxNlDaL0FJUyB5i95pq0JFRxrWUxFh/QjSIhwhZf4
NqhtAnaPRrUFEEmxf4nVE6+quBWeFH9z7zdCi3N6uoNFz1E8InQajkyU7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoy6PliFWI2SQj1/LcfOTSiQdV6MB8GA1UdIwQY
MBaAFPWcuSPkBpv+Ni4tlv+rL/MQeDF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVp5NUktUUdtXzQyTGkyV182c3Y4eEI0TVhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MjYyOTgtMDI3OS00YjkzLWE5ODUt
YTA0YWQyMmUzM2YzLzEvOVp5NUktUUdtXzQyTGkyV182c3Y4eEI0TVhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MjYyOTgtMDI3OS00YjkzLWE5ODUtYTA0YWQyMmUzM2Yz
LzEvOVp5NUktUUdtXzQyTGkyV182c3Y4eEI0TVhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWv3hLT7
CSKujbKDLrlxuI+u2VXzmubZE288A1KLy+7b5KldkCG69EW3SM15ridN0veJsdOo
kxLoaETySUYYDfJLefFJNh2W1VWrZOWmoU9Zikb7nnSVbzFJ/9afx3L41+dpWGzt
JkyIkLlVCqqSAOAyt/pPR/A5Ha8IhtfAwakWx92m0xk0swDPdJFbRbvTDy8Gqhv+
qgIblWIv2wywRV09kA9OX/OIKkgK6rm+2zFSYIuUoA9F6L80Tcdc53ljLq9iatOr
UmzAOBAI6aqNLt0/v6wGCAzxkCcsBetYYTZ1nyM4CVf9lw+s9Vctmr7Y+zKWCj7m
DU0uWcfz6bCndQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:35:46 2026 by rpki-client