Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
File: INS9SZ9YSUrA6CJjtVIKLGTWR34.mft (raw, json)
Hash identifier: N+ANt5oCTHVlU08+XfzoDjEzAbwueGiFP3l8fMZ3Zts=
Subject key identifier: 48:6C:DC:98:C2:BA:1C:3B:17:E7:DA:AC:E0:BF:7C:2C:C8:80:8E:3F
Authority key identifier: 20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
Certificate issuer: /CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Certificate serial: 019E1EA2D3ACCE516A6B9524766992540467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
Manifest number: 1899
Signing time: Wed 13 May 2026 00:00:47 +0000
Manifest this update: Wed 13 May 2026 00:00:47 +0000
Manifest next update: Thu 14 May 2026 00:00:47 +0000
Files and hashes: 1: INS9SZ9YSUrA6CJjtVIKLGTWR34.crl (hash: cQJPB8UD7WcvWNbdcyWIwnYMVdCFZz1TmVd7oAX+cCU=)
2: Wdpe-Cjtqyp1rkyz7rhcS-_jmXo.roa (hash: tUgn1ugpT0nLLmzVavep4vytxp4gMvvn8/6tvfWMBRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:d3:ac:ce:51:6a:6b:95:24:76:69:92:54:04:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Validity
Not Before: May 13 00:00:47 2026 GMT
Not After : May 14 00:00:47 2026 GMT
Subject: CN=486cdc98c2ba1c3b17e7daace0bf7c2cc8808e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:13:91:89:58:30:a9:5f:98:a2:e8:f7:9a:a0:
ce:fe:69:dc:ed:78:f1:70:d7:ea:51:e2:4b:a7:b0:
97:77:e1:0b:3b:d5:6d:f0:55:ae:9f:3e:1b:d0:c8:
7e:2d:3e:de:40:f0:8f:4e:22:02:05:82:00:87:cc:
80:89:2b:fd:72:87:3f:25:1a:d8:e8:b6:31:14:94:
75:23:7d:29:9e:07:eb:07:a2:ee:55:22:4e:11:81:
a3:96:51:a2:df:c1:f8:75:17:39:70:ee:98:02:da:
45:7d:5b:6c:f6:b5:89:f0:4e:fc:e7:a4:e6:9b:8c:
79:0b:be:9c:db:1d:b2:20:10:46:bf:a6:ea:b7:9c:
f8:3a:4a:17:37:a8:80:f1:76:19:fc:d2:f8:9d:f3:
45:58:37:6c:57:9d:5b:72:7e:dc:24:bd:bf:73:37:
a1:1f:1c:ec:05:70:ef:a4:f3:a1:ee:1a:6f:a5:4e:
0b:20:aa:b4:7c:11:5a:1b:92:87:e2:90:6c:35:d8:
13:8d:26:2f:07:58:16:a8:17:eb:51:66:e6:64:6b:
db:29:3b:1d:03:8b:c8:f2:a4:20:c7:2a:68:40:af:
37:f7:b7:e5:ef:c0:5c:71:b2:0a:ee:31:fb:82:ef:
16:6d:d8:95:29:a5:c6:50:b6:1b:f5:7c:02:a9:e0:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6C:DC:98:C2:BA:1C:3B:17:E7:DA:AC:E0:BF:7C:2C:C8:80:8E:3F
X509v3 Authority Key Identifier:
keyid:20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3b:7b:c3:b8:4b:bf:3f:e4:b2:ff:57:52:75:48:2e:fa:90:
ed:30:f5:da:94:50:ac:fc:d4:93:09:f8:f0:ef:d8:48:69:fb:
78:be:a5:89:2b:da:f4:6d:13:3f:d9:da:2f:03:02:49:8e:cf:
28:a2:1a:ea:d8:15:0f:2e:d6:b9:f2:ba:b1:40:ea:44:fa:51:
d5:89:61:c7:a1:bb:f3:13:f6:04:0e:78:18:5d:ff:50:42:5b:
a8:2f:ed:90:41:fc:e5:81:06:7e:5d:e0:d1:0b:b4:91:1c:83:
86:bf:2d:83:9f:fe:76:75:a4:9f:a1:0b:89:0b:05:4b:34:b1:
41:90:80:f5:d6:19:82:4f:0c:80:ef:4f:78:4b:64:10:e0:17:
6f:81:d8:51:f4:e9:7f:62:f8:e4:fc:05:a1:7d:64:f5:4c:c1:
50:19:dc:fb:e6:14:43:ff:bd:d8:dc:88:37:04:f7:7c:d2:27:
1b:17:20:b9:1d:09:71:10:fc:7c:1b:32:da:72:e8:5c:59:aa:
96:f2:30:76:19:85:94:0c:ba:b2:41:3b:47:10:05:da:5e:cf:
29:1f:78:58:67:8c:62:1f:e1:6a:3b:99:de:fa:68:39:3c:3d:
c4:7f:54:06:4a:3a:70:d1:01:be:cf:6f:d2:77:6c:ea:da:8a:
b1:3c:0f:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eotOszlFqa5UkdmmSVARnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZDRiZDQ5OWY1ODQ5NGFjMGU4MjI2M2I1NTIwYTJjNjRk
NjQ3N2UwHhcNMjYwNTEzMDAwMDQ3WhcNMjYwNTE0MDAwMDQ3WjAzMTEwLwYDVQQD
Eyg0ODZjZGM5OGMyYmExYzNiMTdlN2RhYWNlMGJmN2MyY2M4ODA4ZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxORiVgwqV+Youj3mqDO/mnc7Xjx
cNfqUeJLp7CXd+ELO9Vt8FWunz4b0Mh+LT7eQPCPTiICBYIAh8yAiSv9coc/JRrY
6LYxFJR1I30pngfrB6LuVSJOEYGjllGi38H4dRc5cO6YAtpFfVts9rWJ8E7856Tm
m4x5C76c2x2yIBBGv6bqt5z4OkoXN6iA8XYZ/NL4nfNFWDdsV51bcn7cJL2/czeh
HxzsBXDvpPOh7hpvpU4LIKq0fBFaG5KH4pBsNdgTjSYvB1gWqBfrUWbmZGvbKTsd
A4vI8qQgxypoQK8397fl78BccbIK7jH7gu8WbdiVKaXGULYb9XwCqeAeGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhs3JjCuhw7F+farOC/fCzIgI4/MB8GA1UdIwQY
MBaAFCDUvUmfWElKwOgiY7VSCixk1kd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU5TOVNaOVlTVXJBNkNKanRWSUtMR1RXUjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hZjYwMWUtYzJiZi00YTZhLWFhMzIt
ZDJlZTE1Mzk5ZDA2LzEvSU5TOVNaOVlTVXJBNkNKanRWSUtMR1RXUjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hZjYwMWUtYzJiZi00YTZhLWFhMzItZDJlZTE1Mzk5ZDA2
LzEvSU5TOVNaOVlTVXJBNkNKanRWSUtMR1RXUjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTt7w7hL
vz/ksv9XUnVILvqQ7TD12pRQrPzUkwn48O/YSGn7eL6liSva9G0TP9naLwMCSY7P
KKIa6tgVDy7WufK6sUDqRPpR1Ylhx6G78xP2BA54GF3/UEJbqC/tkEH85YEGfl3g
0Qu0kRyDhr8tg5/+dnWkn6ELiQsFSzSxQZCA9dYZgk8MgO9PeEtkEOAXb4HYUfTp
f2L45PwFoX1k9UzBUBnc++YUQ/+92NyINwT3fNInGxcguR0JcRD8fBsy2nLoXFmq
lvIwdhmFlAy6skE7RxAF2l7PKR94WGeMYh/hajuZ3vpoOTw9xH9UBko6cNEBvs9v
0nds6tqKsTwPmg==
-----END CERTIFICATE-----
Generated at Wed May 13 06:29:39 2026 by rpki-client