
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
File: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft (raw, json)
Hash identifier: Ju9MTU60Bly28AYToqPMZmDBFJfxIhcLpHM+RvpnU58=
Subject key identifier: F6:B7:63:1E:06:55:73:DA:F6:80:C6:E6:0C:C2:29:98:71:26:87:17
Authority key identifier: 0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
Certificate issuer: /CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Certificate serial: 019E1D90D895FF6E52D731AD6DD0E33CFA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
Manifest number: 0529
Signing time: Tue 12 May 2026 19:01:32 +0000
Manifest this update: Tue 12 May 2026 19:01:32 +0000
Manifest next update: Wed 13 May 2026 19:01:32 +0000
Files and hashes: 1: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl (hash: tr519HhyhS9S7ZgcXgxeU5Ky+KPRjNbptMioTyqzFgI=)
2: WJTr2Tk1_nZlSZj0AI0um0QiPjI.roa (hash: mYhezBwJPYjVc5I7W3f+glCZHfaPOouHpLS/423/Sw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:d8:95:ff:6e:52:d7:31:ad:6d:d0:e3:3c:fa:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Validity
Not Before: May 12 19:01:32 2026 GMT
Not After : May 13 19:01:32 2026 GMT
Subject: CN=f6b7631e065573daf680c6e60cc2299871268717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:8e:13:59:6d:da:62:8c:f3:9e:6e:f4:6d:
44:1b:b3:51:ec:33:4f:e6:26:f7:59:a4:41:2b:4f:
1d:fd:ed:1f:b9:af:52:02:af:c0:3e:b1:e9:9a:91:
45:fd:00:1a:a4:a4:b3:05:09:d3:21:f7:73:76:2f:
c2:57:01:a9:e9:fb:40:a9:db:65:98:b3:25:15:c8:
74:ce:15:7e:48:65:e6:61:d6:93:ab:49:4c:ba:34:
78:d9:a6:d3:82:8e:a5:c2:db:48:50:10:ba:79:1d:
91:27:9c:aa:b4:17:72:81:35:1d:76:4b:17:ba:d4:
a4:2b:29:72:7d:ae:a4:bc:81:79:5a:c4:90:e5:69:
84:89:da:81:b1:e2:aa:b3:7f:7a:08:f7:de:ca:c7:
0d:28:ec:c9:75:4e:9e:78:94:87:eb:75:e8:e9:6c:
4a:61:d3:b6:c4:dd:e4:14:37:43:e8:ed:fd:d6:c9:
88:44:73:2b:c2:a7:6f:1c:26:16:45:40:7b:fe:3e:
6b:51:17:0f:1e:70:18:ad:50:58:6d:24:94:00:f1:
e7:e4:2a:cc:a6:a6:e2:39:c3:7d:a8:0a:88:42:ed:
ea:d0:75:03:2f:11:0c:bb:b8:a0:ee:bd:a5:20:c1:
8d:e6:b9:bf:d2:fe:80:94:d8:13:16:c7:66:f8:71:
66:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B7:63:1E:06:55:73:DA:F6:80:C6:E6:0C:C2:29:98:71:26:87:17
X509v3 Authority Key Identifier:
keyid:0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:54:92:82:46:e0:42:61:09:62:5f:d3:6f:b0:6f:6c:83:33:
bf:8f:0c:28:9c:40:a1:47:5d:9c:a8:94:ab:f0:68:f6:32:6e:
bd:27:fe:71:3c:b4:9a:43:55:4f:0b:08:bb:4b:a7:64:30:4b:
d1:cd:0f:f8:09:6a:57:b4:5f:6b:18:93:46:98:0d:94:da:84:
ff:75:1b:14:b1:26:e2:0f:c2:1a:c0:c7:53:88:5f:a3:f8:95:
1b:51:c0:7c:32:34:6f:ec:90:5e:1e:92:cd:30:58:ff:e8:32:
11:96:8e:17:17:c0:0a:de:bf:cf:dd:f2:b7:e4:00:49:70:40:
b8:79:dd:1d:af:fd:f9:25:79:55:20:f6:1a:67:c8:4f:cf:16:
59:7c:26:55:02:72:7d:20:c0:86:fb:64:9a:4f:76:77:f6:26:
dc:d4:ef:ea:41:5f:ac:02:fe:3c:62:56:46:01:1d:1e:ef:e8:
4b:be:66:1a:93:25:ec:b7:c1:c5:27:a8:ca:7e:0d:b7:b2:4c:
72:13:33:a1:e5:eb:f3:37:78:4d:a7:78:94:5d:aa:c4:e7:bf:
9a:37:94:0e:ba:14:a9:5b:f2:83:e1:57:f7:89:12:9f:f2:f0:
87:05:a1:cb:38:0f:81:da:1f:fa:18:b7:64:f3:07:37:73:d0:
b5:4f:3c:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkNiV/25S1zGtbdDjPPoCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZDY0ZmU3ZjQzODc4MmVjOGFmYTllZWY1NDg3YjVkYjgw
ZTRkZWEwHhcNMjYwNTEyMTkwMTMyWhcNMjYwNTEzMTkwMTMyWjAzMTEwLwYDVQQD
EyhmNmI3NjMxZTA2NTU3M2RhZjY4MGM2ZTYwY2MyMjk5ODcxMjY4NzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsyOE1lt2mKM855u9G1EG7NR7DNP
5ib3WaRBK08d/e0fua9SAq/APrHpmpFF/QAapKSzBQnTIfdzdi/CVwGp6ftAqdtl
mLMlFch0zhV+SGXmYdaTq0lMujR42abTgo6lwttIUBC6eR2RJ5yqtBdygTUddksX
utSkKylyfa6kvIF5WsSQ5WmEidqBseKqs396CPfeyscNKOzJdU6eeJSH63Xo6WxK
YdO2xN3kFDdD6O391smIRHMrwqdvHCYWRUB7/j5rURcPHnAYrVBYbSSUAPHn5CrM
pqbiOcN9qAqIQu3q0HUDLxEMu7ig7r2lIMGN5rm/0v6AlNgTFsdm+HFmDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPa3Yx4GVXPa9oDG5gzCKZhxJocXMB8GA1UdIwQY
MBaAFAvWT+f0OHguyK+p7vVIe124Dk3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzlaUDVfUTRlQzdJcjZudTlVaDdYYmdPVGVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kMjBjMGUtNjM4NS00YWI3LWI1ZmYt
ZDE1YmRiODg2YzZkLzEvQzlaUDVfUTRlQzdJcjZudTlVaDdYYmdPVGVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kMjBjMGUtNjM4NS00YWI3LWI1ZmYtZDE1YmRiODg2YzZk
LzEvQzlaUDVfUTRlQzdJcjZudTlVaDdYYmdPVGVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1SSgkbg
QmEJYl/Tb7BvbIMzv48MKJxAoUddnKiUq/Bo9jJuvSf+cTy0mkNVTwsIu0unZDBL
0c0P+AlqV7RfaxiTRpgNlNqE/3UbFLEm4g/CGsDHU4hfo/iVG1HAfDI0b+yQXh6S
zTBY/+gyEZaOFxfACt6/z93yt+QASXBAuHndHa/9+SV5VSD2GmfIT88WWXwmVQJy
fSDAhvtkmk92d/Ym3NTv6kFfrAL+PGJWRgEdHu/oS75mGpMl7LfBxSeoyn4Nt7JM
chMzoeXr8zd4Tad4lF2qxOe/mjeUDroUqVvyg+FX94kSn/LwhwWhyzgPgdof+hi3
ZPMHN3PQtU88FA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:51 2026 by rpki-client