Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
File: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft (raw, json)
Hash identifier: QUX3+YdeTpEbit1rTsf6CyzsxaUDVA9YzEVJBip+lSg=
Subject key identifier: 39:38:E5:2E:EB:01:9E:B6:1C:B7:A3:74:1D:63:B4:66:28:D1:D6:A4
Authority key identifier: F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
Certificate issuer: /CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Certificate serial: 019F9059A7083C01D5F2F111B8A42263CA77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
Manifest number: 05FA
Signing time: Thu 23 Jul 2026 19:00:22 +0000
Manifest this update: Thu 23 Jul 2026 19:00:22 +0000
Manifest next update: Fri 24 Jul 2026 19:00:22 +0000
Files and hashes: 1: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl (hash: YF8FLm4NM/oYeMJclpSntWu+XLIAALs9xMnVlCB/9jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:a7:08:3c:01:d5:f2:f1:11:b8:a4:22:63:ca:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Validity
Not Before: Jul 23 19:00:22 2026 GMT
Not After : Jul 24 19:00:22 2026 GMT
Subject: CN=3938e52eeb019eb61cb7a3741d63b46628d1d6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:9b:68:cb:fc:4c:d6:1e:01:eb:07:38:bb:
0c:c9:79:f8:5a:83:31:2e:52:01:2a:42:13:7e:e7:
92:df:ff:fe:49:44:4d:79:91:fb:b0:12:b2:9f:35:
b7:46:f9:9e:5a:e2:ad:c3:6a:8f:71:8d:3e:9f:a5:
2c:66:bd:97:11:67:b9:67:44:fc:6a:28:53:d6:99:
da:55:30:65:e4:f4:52:d7:35:df:03:20:21:8b:84:
e6:16:c7:75:56:cb:21:92:df:7d:16:40:49:83:10:
f1:ca:29:bd:fd:bb:c3:cf:1e:50:ed:d4:90:7d:43:
b2:b5:d9:47:cd:d0:c1:ff:ac:45:e0:c3:db:27:34:
7f:85:cd:b3:d1:df:70:8f:eb:54:71:94:94:5c:b2:
b9:ca:cc:cd:d4:cb:dc:48:89:18:72:12:b7:bf:13:
6a:ad:83:85:7c:e9:7e:56:bd:14:18:71:da:72:dd:
42:6d:c6:85:ae:21:e5:9f:c9:ae:c6:22:84:e4:9d:
47:f0:b1:8c:50:38:b2:64:62:a1:9a:a0:9f:09:dc:
ec:6c:d5:99:2e:b4:03:49:b9:5f:95:4d:7e:59:db:
8e:84:5b:cd:86:99:f0:57:8a:d8:bb:a0:c9:6e:72:
2e:7e:f0:77:32:07:ee:6d:0a:cc:0b:6b:2d:da:1a:
24:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:38:E5:2E:EB:01:9E:B6:1C:B7:A3:74:1D:63:B4:66:28:D1:D6:A4
X509v3 Authority Key Identifier:
keyid:F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0d:65:5b:f2:98:8e:8b:70:2d:85:6d:31:0a:11:43:af:eb:
0a:9a:d3:cf:6d:61:2f:c1:95:c5:d0:4c:23:43:f3:d8:49:e2:
ee:d0:2e:85:4a:b6:7e:e4:3b:6a:86:a5:21:9a:8a:5f:d6:c2:
e2:22:55:57:4a:a7:86:2d:f1:1a:9b:86:73:57:dd:ff:d3:97:
10:40:d0:72:44:b3:0d:0b:91:9b:c1:93:59:47:bd:05:8b:4d:
90:3f:17:3a:34:30:fe:48:c2:21:f7:aa:10:40:60:2f:ce:d8:
32:19:3e:7d:cc:92:34:60:2a:59:d4:a6:f7:aa:5d:10:c2:ce:
fc:be:f7:cd:90:44:72:79:ae:89:4f:90:c5:20:46:c5:18:d3:
f0:5f:5b:ef:a1:df:4f:5a:38:86:93:6c:ab:62:5d:e8:75:9e:
8c:bd:2e:77:7e:36:09:80:ec:f9:f2:7f:9d:4b:2b:22:7b:6b:
f0:63:2b:82:26:4f:4f:05:e6:2a:a8:bc:77:fa:77:a1:f6:7e:
cb:3e:05:5e:10:c5:b3:59:25:0b:8e:25:7d:d9:81:0b:bf:15:
2e:6b:a7:a0:c8:bc:7c:a7:f2:17:fe:19:7b:08:d9:3b:0d:3a:
41:f6:52:10:ff:fb:99:93:59:be:a8:15:50:c0:2f:86:11:fe:
d6:0e:a8:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWacIPAHV8vERuKQiY8p3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ODc3MTI1ODU5NDdkYzU1MTlhYTg2ZTBiZDFmNDM1ZGY1
MmI1ZWUwHhcNMjYwNzIzMTkwMDIyWhcNMjYwNzI0MTkwMDIyWjAzMTEwLwYDVQQD
EygzOTM4ZTUyZWViMDE5ZWI2MWNiN2EzNzQxZDYzYjQ2NjI4ZDFkNmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroSbaMv8TNYeAesHOLsMyXn4WoMx
LlIBKkITfueS3//+SURNeZH7sBKynzW3RvmeWuKtw2qPcY0+n6UsZr2XEWe5Z0T8
aihT1pnaVTBl5PRS1zXfAyAhi4TmFsd1Vsshkt99FkBJgxDxyim9/bvDzx5Q7dSQ
fUOytdlHzdDB/6xF4MPbJzR/hc2z0d9wj+tUcZSUXLK5yszN1MvcSIkYchK3vxNq
rYOFfOl+Vr0UGHHact1CbcaFriHln8muxiKE5J1H8LGMUDiyZGKhmqCfCdzsbNWZ
LrQDSblflU1+WduOhFvNhpnwV4rYu6DJbnIufvB3MgfubQrMC2st2hokzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDk45S7rAZ62HLejdB1jtGYo0dakMB8GA1UdIwQY
MBaAFPWHcSWFlH3FUZqobgvR9DXfUrXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVlkeEpZV1VmY1ZSbXFodUM5SDBOZDlTdGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC84YTE1MzgtNDgwMy00ZDcwLTljMmEt
N2RjN2U2ZjkyZWQ0LzEvOVlkeEpZV1VmY1ZSbXFodUM5SDBOZDlTdGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC84YTE1MzgtNDgwMy00ZDcwLTljMmEtN2RjN2U2ZjkyZWQ0
LzEvOVlkeEpZV1VmY1ZSbXFodUM5SDBOZDlTdGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlw1lW/KY
jotwLYVtMQoRQ6/rCprTz21hL8GVxdBMI0Pz2Eni7tAuhUq2fuQ7aoalIZqKX9bC
4iJVV0qnhi3xGpuGc1fd/9OXEEDQckSzDQuRm8GTWUe9BYtNkD8XOjQw/kjCIfeq
EEBgL87YMhk+fcySNGAqWdSm96pdEMLO/L73zZBEcnmuiU+QxSBGxRjT8F9b76Hf
T1o4hpNsq2Jd6HWejL0ud342CYDs+fJ/nUsrIntr8GMrgiZPTwXmKqi8d/p3ofZ+
yz4FXhDFs1klC44lfdmBC78VLmunoMi8fKfyF/4ZewjZOw06QfZSEP/7mZNZvqgV
UMAvhhH+1g6o/g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:00 2026 by rpki-client