Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier: xr0xx2hErYcC9XlUPRjoxAclYFEZj/AOhGEi0uqjnjA=
Subject key identifier: 38:32:8D:2B:9A:91:96:30:5B:42:C5:36:6F:F5:D4:32:73:5B:62:DF
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial: 019E1DFE8238B45597B6F7A937885FB8E21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number: 0DD7
Signing time: Tue 12 May 2026 21:01:19 +0000
Manifest this update: Tue 12 May 2026 21:01:19 +0000
Manifest next update: Wed 13 May 2026 21:01:19 +0000
Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: ehLdXmOXTXTMKM3d4XW0r+/SGzRn9BeGLYEcgqfDraU=)
2: xhDUoIsJaJCqOA6VTkyeMee_Z9s.roa (hash: bDCv1HCZJO4EbMKAw0lf46zS80bqNn1qKkmrw6hFSH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:82:38:b4:55:97:b6:f7:a9:37:88:5f:b8:e2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Validity
Not Before: May 12 21:01:19 2026 GMT
Not After : May 13 21:01:19 2026 GMT
Subject: CN=38328d2b9a9196305b42c5366ff5d432735b62df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:46:88:ce:cb:b6:ea:f4:ee:6f:f3:f3:e2:8f:
0a:f5:83:f5:d8:58:46:95:84:94:7a:81:7a:30:59:
41:24:3c:70:cb:95:e2:71:5d:01:9f:4d:d2:fc:26:
fc:f0:5f:a1:8a:7f:0a:e2:76:b6:6a:31:74:38:0a:
a2:0e:43:36:b1:6d:f7:28:77:f8:bc:5f:c7:80:b1:
8c:ee:25:f6:30:6d:23:42:a7:33:14:32:38:60:2e:
87:4b:27:88:96:33:1a:4b:9d:93:9d:6b:1d:b1:89:
57:95:d6:54:07:29:48:de:64:22:5c:37:7c:76:a8:
96:d3:f2:c7:7a:25:72:12:dd:0b:38:c8:1c:f0:d2:
33:8d:d1:9a:5c:a7:42:7c:48:a3:64:0a:cf:13:cd:
c0:54:1f:f6:b9:b9:4a:fe:e2:fa:54:1b:8d:38:a6:
8e:ff:bc:7d:f2:17:34:1a:7e:75:7f:18:bb:5d:8e:
59:5f:97:78:27:25:c8:e6:73:e7:49:87:84:49:e5:
6b:16:6d:12:9f:e1:62:cb:fc:24:28:a6:91:d3:a9:
25:92:d8:a1:46:c5:2d:e2:25:1f:c4:25:0f:86:54:
77:0c:0f:96:7a:98:69:41:50:96:39:b0:5c:42:0c:
4e:cc:b3:78:0d:4a:be:30:4d:e5:c3:14:41:18:85:
a1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:32:8D:2B:9A:91:96:30:5B:42:C5:36:6F:F5:D4:32:73:5B:62:DF
X509v3 Authority Key Identifier:
keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a8:2a:3a:61:4f:af:2b:8a:c4:0c:48:24:a3:2e:81:3b:35:
39:a7:85:b7:ac:60:40:55:a6:b7:b8:05:0c:b5:f0:6a:c3:28:
d8:19:73:d4:b7:69:54:9b:d5:20:14:6a:25:03:7f:d5:e0:85:
83:3c:70:c0:83:4f:5d:57:48:3a:a1:09:22:47:d5:5d:59:09:
3f:47:4d:64:92:41:3d:71:cf:dd:fd:71:67:fd:3c:64:0e:7c:
40:3f:32:64:89:df:d2:15:e0:57:49:4b:de:9d:ab:fd:4f:69:
cc:0f:e2:d4:d6:90:f1:40:6f:eb:20:e7:68:2f:48:1c:95:93:
a4:66:89:e8:4a:71:a3:6d:bf:f7:c7:3f:9c:80:5b:35:7d:2f:
91:3c:d8:2e:a1:b8:ef:87:7b:c2:30:f8:8a:89:e3:91:a0:1c:
02:7d:c6:0a:af:d6:ab:40:71:c6:b3:b3:79:5c:ce:6b:14:01:
6d:78:5d:1d:5d:a0:e6:35:91:00:d3:65:49:eb:52:a6:1d:4b:
76:39:3e:d1:96:77:4c:98:d6:93:01:b6:44:67:20:1e:9d:b9:
7b:0a:e6:da:1c:c8:57:00:62:a6:ae:61:a5:b7:1b:09:f4:c6:
39:6b:f1:bc:56:36:9c:94:a4:ca:e6:44:b1:2a:60:ae:8e:e9:
ec:ef:53:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/oI4tFWXtvepN4hfuOIdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YTI5MTIyNGY4MmJjNmQyNmI1MTllZDdhZmJlMjVjYjMy
YzExNWMwHhcNMjYwNTEyMjEwMTE5WhcNMjYwNTEzMjEwMTE5WjAzMTEwLwYDVQQD
EygzODMyOGQyYjlhOTE5NjMwNWI0MmM1MzY2ZmY1ZDQzMjczNWI2MmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEaIzsu26vTub/Pz4o8K9YP12FhG
lYSUeoF6MFlBJDxwy5XicV0Bn03S/Cb88F+hin8K4na2ajF0OAqiDkM2sW33KHf4
vF/HgLGM7iX2MG0jQqczFDI4YC6HSyeIljMaS52TnWsdsYlXldZUBylI3mQiXDd8
dqiW0/LHeiVyEt0LOMgc8NIzjdGaXKdCfEijZArPE83AVB/2ublK/uL6VBuNOKaO
/7x98hc0Gn51fxi7XY5ZX5d4JyXI5nPnSYeESeVrFm0Sn+Fiy/wkKKaR06klktih
RsUt4iUfxCUPhlR3DA+WephpQVCWObBcQgxOzLN4DUq+ME3lwxRBGIWheQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgyjSuakZYwW0LFNm/11DJzW2LfMB8GA1UdIwQY
MBaAFPWikSJPgrxtJrUZ7Xr74lyzLBFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84YTVjYzItYzU0Mi00YzliLTgwNzct
YmM3OTc3Mzk2ZDliLzEvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC84YTVjYzItYzU0Mi00YzliLTgwNzctYmM3OTc3Mzk2ZDli
LzEvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVagqOmFP
ryuKxAxIJKMugTs1OaeFt6xgQFWmt7gFDLXwasMo2Blz1LdpVJvVIBRqJQN/1eCF
gzxwwINPXVdIOqEJIkfVXVkJP0dNZJJBPXHP3f1xZ/08ZA58QD8yZInf0hXgV0lL
3p2r/U9pzA/i1NaQ8UBv6yDnaC9IHJWTpGaJ6Epxo22/98c/nIBbNX0vkTzYLqG4
74d7wjD4ionjkaAcAn3GCq/Wq0BxxrOzeVzOaxQBbXhdHV2g5jWRANNlSetSph1L
djk+0ZZ3TJjWkwG2RGcgHp25ewrm2hzIVwBipq5hpbcbCfTGOWvxvFY2nJSkyuZE
sSpgro7p7O9Tgw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:26:21 2026 by rpki-client