Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
File: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft (raw, json)
Hash identifier: yvpDgOvnua0OdIKTvukxR7OhKZXW2oP6HVzqhvHTEgE=
Subject key identifier: 43:44:95:BE:D0:66:61:28:C2:B8:E6:1B:34:98:3A:A9:22:C1:C8:08
Authority key identifier: F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
Certificate issuer: /CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Certificate serial: 01A1CB200C1B7EC23E32A5D1E5BAB0AB8E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
Manifest number: 1AE9
Signing time: Wed 11 Nov 2026 15:00:37 +0000
Manifest this update: Wed 11 Nov 2026 15:00:37 +0000
Manifest next update: Thu 12 Nov 2026 15:00:37 +0000
Files and hashes: 1: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl (hash: Z+cVP1z9gI6iz2KDjRO0LX614FjSLVC9yqjX+DjjUUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:20:0c:1b:7e:c2:3e:32:a5:d1:e5:ba:b0:ab:8e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Validity
Not Before: Nov 11 15:00:37 2026 GMT
Not After : Nov 12 15:00:37 2026 GMT
Subject: CN=434495bed0666128c2b8e61b34983aa922c1c808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:82:08:5b:63:cf:a5:b0:c3:16:15:44:55:
22:ac:81:33:c6:f2:52:be:e6:51:ff:16:ee:92:c3:
0c:70:a8:b4:10:31:b3:3a:3e:e4:7f:63:e5:0f:9a:
1c:23:79:fa:41:8c:e8:52:14:b4:7f:c8:6a:b3:59:
08:e9:9a:6e:97:c6:87:77:67:5f:b6:78:66:88:5c:
23:74:e2:3d:a2:b3:54:3c:96:31:3f:92:38:05:70:
98:7b:6a:ad:4f:25:cf:a1:f3:62:bf:ec:62:2d:b5:
c8:b8:39:58:98:bc:d8:0a:c1:96:ba:fe:c9:d1:72:
42:4d:a3:db:ac:3a:b0:cd:ee:a7:d7:71:cb:e2:f8:
eb:2c:1a:33:1b:69:14:6e:53:e4:4a:88:d0:c5:0e:
cf:c5:5d:40:23:87:e6:6c:e7:48:8e:f6:c9:00:9e:
d9:50:14:d9:e9:d1:b8:4a:58:00:9a:01:16:3c:60:
aa:4c:88:20:c8:34:ff:5e:05:a0:a7:b2:3c:97:b2:
93:cd:e6:ea:a0:15:75:e5:eb:f0:87:6f:aa:6c:85:
d5:df:c5:8a:de:64:14:9b:f0:e3:6e:06:3f:20:97:
7a:d2:79:84:96:7c:06:67:cc:16:49:25:0b:5a:28:
2f:0f:60:07:a9:56:de:c2:60:f2:a2:02:d0:28:1e:
e1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:44:95:BE:D0:66:61:28:C2:B8:E6:1B:34:98:3A:A9:22:C1:C8:08
X509v3 Authority Key Identifier:
keyid:F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c9:3a:0a:8e:e5:10:b4:ef:de:75:94:2f:97:a9:25:70:d5:
45:8a:3c:64:21:c4:12:7c:14:a2:8a:ce:47:51:e0:9b:3f:db:
ce:5e:98:55:6e:3b:e2:3c:ec:43:88:a3:d2:53:cf:3f:63:ba:
82:9d:c5:d2:a4:8c:e1:ec:ae:0c:c7:a0:0a:a3:93:c2:08:9e:
20:42:f9:8c:47:a6:51:61:0b:23:9b:06:c4:20:a5:1a:5e:1c:
42:06:31:8b:a7:9e:66:4a:b5:c2:80:e0:f0:1e:ed:5f:21:91:
e5:cc:70:f5:08:6a:84:78:40:4e:c6:2f:6d:91:96:48:64:d4:
bd:00:a3:85:43:22:ad:b7:ac:1e:b5:6d:b7:3d:ab:55:2d:2b:
fa:0e:25:4c:f9:88:20:30:20:22:67:45:7e:c7:61:fd:4e:66:
3b:22:35:74:b6:82:1f:13:fa:fb:13:11:07:e1:89:b4:49:34:
a2:89:6f:55:94:17:21:6e:3b:25:47:a4:df:d3:f1:81:5b:e6:
8c:a9:cd:65:59:ad:14:d5:94:41:cc:fb:65:f1:f4:15:92:08:
f7:12:30:e5:52:38:db:f1:bd:7a:ef:60:bf:b5:dc:3b:0d:73:
2c:32:d7:ba:96:29:00:73:46:fd:6b:f3:83:cf:8f:39:12:1e:
58:84:df:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHLIAwbfsI+MqXR5bqwq46fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZGIxYjY5MWIzMGRiZTQ4ZTc4OGI3Y2NhNGFkMzFkY2Rj
ODVjNzYwHhcNMjYxMTExMTUwMDM3WhcNMjYxMTEyMTUwMDM3WjAzMTEwLwYDVQQD
Eyg0MzQ0OTViZWQwNjY2MTI4YzJiOGU2MWIzNDk4M2FhOTIyYzFjODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0mCCFtjz6WwwxYVRFUirIEzxvJS
vuZR/xbuksMMcKi0EDGzOj7kf2PlD5ocI3n6QYzoUhS0f8hqs1kI6Zpul8aHd2df
tnhmiFwjdOI9orNUPJYxP5I4BXCYe2qtTyXPofNiv+xiLbXIuDlYmLzYCsGWuv7J
0XJCTaPbrDqwze6n13HL4vjrLBozG2kUblPkSojQxQ7PxV1AI4fmbOdIjvbJAJ7Z
UBTZ6dG4SlgAmgEWPGCqTIggyDT/XgWgp7I8l7KTzebqoBV15evwh2+qbIXV38WK
3mQUm/DjbgY/IJd60nmElnwGZ8wWSSULWigvD2AHqVbewmDyogLQKB7hZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENElb7QZmEowrjmGzSYOqkiwcgIMB8GA1UdIwQY
MBaAFPbbG2kbMNvkjniLfMpK0x3NyFx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXRzYmFSc3cyLVNPZUl0OHlrclRIYzNJWEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lMzRmYTUtNGU4ZC00YjQxLWJiYjgt
ZTMxY2UxYjk2N2U5LzEvOXRzYmFSc3cyLVNPZUl0OHlrclRIYzNJWEhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lMzRmYTUtNGU4ZC00YjQxLWJiYjgtZTMxY2UxYjk2N2U5
LzEvOXRzYmFSc3cyLVNPZUl0OHlrclRIYzNJWEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsk6Co7l
ELTv3nWUL5epJXDVRYo8ZCHEEnwUoorOR1Hgmz/bzl6YVW474jzsQ4ij0lPPP2O6
gp3F0qSM4eyuDMegCqOTwgieIEL5jEemUWELI5sGxCClGl4cQgYxi6eeZkq1woDg
8B7tXyGR5cxw9QhqhHhATsYvbZGWSGTUvQCjhUMirbesHrVttz2rVS0r+g4lTPmI
IDAgImdFfsdh/U5mOyI1dLaCHxP6+xMRB+GJtEk0oolvVZQXIW47JUek39PxgVvm
jKnNZVmtFNWUQcz7ZfH0FZII9xIw5VI42/G9eu9gv7XcOw1zLDLXupYpAHNG/Wvz
g8+PORIeWITfww==
-----END CERTIFICATE-----
Generated at Wed Nov 11 20:21:36 2026 by rpki-client