Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File: 1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier: 68zIQTmQDMKlYiQIJv52NsSvYHjb05Ls6pHVWvx6e5U=
Subject key identifier: 72:86:A9:B1:90:19:61:59:13:A4:2E:12:20:08:B4:68:DC:9E:0A:FF
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer: /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial: 019E1D22EB8CAD392032392A91032E736E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number: 163B
Signing time: Tue 12 May 2026 17:01:28 +0000
Manifest this update: Tue 12 May 2026 17:01:28 +0000
Manifest next update: Wed 13 May 2026 17:01:28 +0000
Files and hashes: 1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: IagpJDPWW701mbeGUu64U+xXY16z87vmEfNghjCRmNk=)
2: 1vQkcMHCkliQRKl9aZ_MI-G0oZg.roa (hash: jJ0Z9gvnHkxzvx7TbvN1q4EtCEWPz3vfe0uvFzwej1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:eb:8c:ad:39:20:32:39:2a:91:03:2e:73:6e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Validity
Not Before: May 12 17:01:28 2026 GMT
Not After : May 13 17:01:28 2026 GMT
Subject: CN=7286a9b19019615913a42e122008b468dc9e0aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:48:14:8f:30:77:0e:4a:a6:bb:d1:97:8f:
b9:c4:ad:21:de:2b:1e:63:3d:dd:01:f0:ce:c3:9c:
e7:fa:2e:71:f9:c7:b3:ca:aa:0c:17:96:87:e0:00:
7b:e6:0a:22:35:10:dc:24:41:86:4d:10:97:2d:cd:
59:c9:69:c0:fb:50:4c:ab:55:96:a7:9a:9d:6a:6f:
68:cf:43:8a:f4:55:7d:97:e7:2f:b5:b6:3b:8c:c7:
77:83:c6:d7:e8:f6:59:c6:2f:d0:51:f2:b4:0a:76:
ea:0c:36:8f:1d:2f:94:0f:33:e6:f1:35:40:1a:5a:
1b:50:d9:e6:cc:d9:1f:61:7d:f7:07:65:07:ee:16:
1d:fa:9a:2d:9b:9e:e2:c7:e7:11:5d:1b:e6:7e:42:
19:fc:83:2d:ec:ae:e2:b7:0b:19:b6:f9:ca:c2:a1:
68:57:b2:9b:e6:ac:ac:8b:fa:31:d0:c4:be:e2:81:
96:ca:7f:cd:3c:7a:ab:5e:98:64:24:c7:52:2b:f1:
1c:39:8c:db:a4:9e:af:fc:02:0f:56:93:9c:d1:98:
a1:3a:8b:62:8a:63:5f:cd:7b:48:ad:53:a1:08:d8:
ab:a4:c0:fb:5a:46:94:4a:79:de:4c:dc:80:0a:54:
94:1f:1a:e2:f3:12:28:b5:79:97:a9:dc:fc:85:1f:
17:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:86:A9:B1:90:19:61:59:13:A4:2E:12:20:08:B4:68:DC:9E:0A:FF
X509v3 Authority Key Identifier:
keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b2:f6:88:85:ec:3f:1a:dd:e0:c6:38:0a:eb:74:d4:cb:1f:
53:55:41:30:4a:f0:7d:8d:ad:39:3a:64:ad:fe:39:70:07:8b:
bc:f0:e8:ae:72:9c:9b:a3:03:10:aa:9d:9c:58:85:fa:dd:9e:
f2:02:cd:af:60:34:18:d6:cd:27:8b:94:5e:75:63:ef:e4:88:
09:e6:28:7d:90:fb:21:e7:e1:d7:02:db:b7:6a:40:b4:5c:00:
1b:0c:54:23:5f:aa:d0:a2:f6:e3:2b:dd:a1:e7:31:5a:8f:84:
f0:9c:c4:8b:70:4d:f6:a1:6c:ca:65:12:b7:18:aa:2a:ae:44:
d8:64:f6:c1:4c:44:a4:1e:fc:3c:ea:73:1c:cc:8c:0c:8a:1d:
3b:b3:08:cd:ba:ad:d9:c7:31:d0:4c:10:cb:f9:ff:64:1e:ac:
71:a3:6d:e4:24:d9:5a:bf:a7:21:0e:54:3f:45:4e:69:36:a6:
a9:4f:7f:06:4a:28:d3:06:e3:8d:74:50:44:5d:4b:6a:f5:5e:
ab:b2:57:59:a4:0e:2e:77:b3:f8:7a:c1:e1:3a:5e:88:fc:6e:
08:86:a6:79:2c:55:86:27:2b:cf:0d:6e:a6:64:90:8e:88:01:
d2:53:81:29:ae:ed:ef:b5:20:e4:5e:63:41:d3:e8:73:3d:f7:
1b:24:75:8b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4dIuuMrTkgMjkqkQMuc24vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NWY1YTM1NzM4YzMyMjllMmY0Mzk0NTAwYzMyMmM4Mjc1
YTk3YTIwHhcNMjYwNTEyMTcwMTI4WhcNMjYwNTEzMTcwMTI4WjAzMTEwLwYDVQQD
Eyg3Mjg2YTliMTkwMTk2MTU5MTNhNDJlMTIyMDA4YjQ2OGRjOWUwYWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwltIFI8wdw5KprvRl4+5xK0h3ise
Yz3dAfDOw5zn+i5x+cezyqoMF5aH4AB75goiNRDcJEGGTRCXLc1ZyWnA+1BMq1WW
p5qdam9oz0OK9FV9l+cvtbY7jMd3g8bX6PZZxi/QUfK0CnbqDDaPHS+UDzPm8TVA
GlobUNnmzNkfYX33B2UH7hYd+potm57ix+cRXRvmfkIZ/IMt7K7itwsZtvnKwqFo
V7Kb5qysi/ox0MS+4oGWyn/NPHqrXphkJMdSK/EcOYzbpJ6v/AIPVpOc0ZihOoti
imNfzXtIrVOhCNirpMD7WkaUSnneTNyAClSUHxri8xIotXmXqdz8hR8XcQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHKGqbGQGWFZE6QuEiAItGjcngr/MB8GA1UdIwQY
MBaAFPlfWjVzjDIp4vQ5RQDDIsgnWpeiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1WOWFOWE9NTWluaTlEbEZBTU1peUNkYWw2SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvZDQ5YzIxLWRlYWQtNGRjNC05NDc4
LWExMGI3Y2M5OGJjOC8xLzEtVjlhTlhPTU1pbmk5RGxGQU1NaXlDZGFsNkkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2QxL2Q0OWMyMS1kZWFkLTRkYzQtOTQ3OC1hMTBiN2NjOThi
YzgvMS8xLVY5YU5YT01NaW5pOURsRkFNTWl5Q2RhbDZJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7L2
iIXsPxrd4MY4Cut01MsfU1VBMErwfY2tOTpkrf45cAeLvPDornKcm6MDEKqdnFiF
+t2e8gLNr2A0GNbNJ4uUXnVj7+SICeYofZD7Iefh1wLbt2pAtFwAGwxUI1+q0KL2
4yvdoecxWo+E8JzEi3BN9qFsymUStxiqKq5E2GT2wUxEpB78POpzHMyMDIodO7MI
zbqt2ccx0EwQy/n/ZB6scaNt5CTZWr+nIQ5UP0VOaTamqU9/Bkoo0wbjjXRQRF1L
avVeq7JXWaQOLnez+HrB4TpeiPxuCIameSxVhicrzw1upmSQjogB0lOBKa7t77Ug
5F5jQdPocz33GyR1iw==
-----END CERTIFICATE-----
Generated at Tue May 12 22:07:55 2026 by rpki-client