Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: tlL2ySRMr6ozTEx9niCpa0nEgAxRrLGVt006sUMWLEo=
Subject key identifier: D1:6D:13:26:D1:FE:F0:9F:90:B9:25:60:00:C2:96:1F:B7:AE:3C:E9
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 019E1F10DCA1D9307F912738415848C328C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 1897
Signing time: Wed 13 May 2026 02:00:59 +0000
Manifest this update: Wed 13 May 2026 02:00:59 +0000
Manifest next update: Thu 14 May 2026 02:00:59 +0000
Files and hashes: 1: 7kGNbroThpMnN96LqRGM-Y-5t9Y.roa (hash: lxPWqX0/OpM/p7/y+8GA/oyT71oB2fzc6nqiYIWie7o=)
2: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: Iw3sYh3tyFEGta66JOhjMs38cy+6IIIfTC5apefoNR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:dc:a1:d9:30:7f:91:27:38:41:58:48:c3:28:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: May 13 02:00:59 2026 GMT
Not After : May 14 02:00:59 2026 GMT
Subject: CN=d16d1326d1fef09f90b9256000c2961fb7ae3ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:71:9d:3a:0b:44:5f:77:88:97:1c:78:22:
d7:61:fe:4c:82:76:f2:8e:30:3e:1e:9b:27:94:7c:
ed:dd:b3:d2:d1:71:3d:02:27:27:04:0c:4e:21:fa:
ad:d9:35:b5:82:0f:0f:ed:5d:4e:ce:67:63:72:2e:
ca:a5:e8:13:f0:38:d5:36:f2:e6:d9:23:d3:77:dd:
4e:2a:1b:74:d3:ae:a2:6c:79:d4:51:1c:78:a6:8e:
04:bd:0c:fb:9e:f2:35:15:92:f1:58:b3:39:f3:39:
a3:b0:2e:cf:89:c7:1b:6f:2a:01:8b:dd:6b:9c:02:
b7:c6:2e:d1:5d:0f:08:77:8e:77:41:74:76:04:3d:
4b:36:a5:65:64:ca:2e:16:45:89:bd:d5:f1:b0:aa:
71:eb:c1:54:76:48:eb:2b:0a:50:43:74:0c:9e:77:
77:fe:0f:15:30:fc:55:89:26:d8:be:df:2b:ae:87:
97:2b:6b:5a:71:8d:ee:5f:4d:1d:00:91:bc:1a:62:
cf:4b:2a:70:08:97:3e:59:2b:9a:61:8e:1c:e3:39:
13:45:9e:75:1a:25:b2:ea:ee:f2:18:b2:69:ff:4b:
d9:62:7e:35:49:13:96:2c:14:8f:01:28:12:83:97:
30:64:fc:e8:ae:da:ac:f6:c7:1a:4a:9c:f2:f4:4c:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6D:13:26:D1:FE:F0:9F:90:B9:25:60:00:C2:96:1F:B7:AE:3C:E9
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:61:81:1d:fa:1c:b5:7a:c2:bf:98:17:0a:ed:d7:e8:9f:78:
40:a7:02:c4:f3:fc:56:57:bb:f7:6e:60:c3:3d:4a:2a:71:85:
49:d2:45:42:d3:06:3d:48:e0:10:db:42:0d:60:ee:78:ab:7c:
64:8b:7c:71:47:62:3c:a1:16:1f:4f:9d:0d:90:e8:dc:ae:63:
28:62:cd:14:5b:89:2e:af:fa:27:d6:a6:49:e3:30:db:de:44:
b0:39:e2:52:54:61:fd:77:66:bc:77:23:a1:7d:97:a0:ad:e4:
bd:f6:7d:d2:e6:1d:ed:3d:5e:b6:bf:9b:e5:3b:5d:d5:f4:28:
9e:3f:8c:8d:dc:3b:12:39:e2:cd:45:db:79:4d:74:19:bd:c5:
d5:8f:b2:47:1d:7f:6f:ab:21:4b:b8:67:a8:5a:0e:86:9f:60:
6d:68:9b:1c:17:9c:35:a6:e9:61:a0:23:e6:c1:9d:3e:94:13:
3c:84:16:34:2f:a4:36:7a:56:83:75:62:95:74:af:67:21:90:
79:4d:57:5c:00:71:e5:2c:70:af:de:27:42:8b:24:b9:ac:bd:
8f:0a:78:51:13:f4:e0:1d:f4:3f:b9:6d:8b:95:80:ce:72:0a:
cf:1a:5d:d9:de:a8:2f:7c:9a:17:55:8b:6a:81:2c:d8:8a:3b:
ce:ac:eb:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fENyh2TB/kSc4QVhIwyjBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjQzMGQwODA1ZjQyZmZhM2JjZDBjMGI3YzU1MDgwNTEx
NzkyM2EwHhcNMjYwNTEzMDIwMDU5WhcNMjYwNTE0MDIwMDU5WjAzMTEwLwYDVQQD
EyhkMTZkMTMyNmQxZmVmMDlmOTBiOTI1NjAwMGMyOTYxZmI3YWUzY2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu5xnToLRF93iJcceCLXYf5Mgnby
jjA+HpsnlHzt3bPS0XE9AicnBAxOIfqt2TW1gg8P7V1Ozmdjci7KpegT8DjVNvLm
2SPTd91OKht0066ibHnUURx4po4EvQz7nvI1FZLxWLM58zmjsC7PiccbbyoBi91r
nAK3xi7RXQ8Id453QXR2BD1LNqVlZMouFkWJvdXxsKpx68FUdkjrKwpQQ3QMnnd3
/g8VMPxViSbYvt8rroeXK2tacY3uX00dAJG8GmLPSypwCJc+WSuaYY4c4zkTRZ51
GiWy6u7yGLJp/0vZYn41SROWLBSPASgSg5cwZPzortqs9scaSpzy9Ew8/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFtEybR/vCfkLklYADClh+3rjzpMB8GA1UdIwQY
MBaAFPT0MNCAX0L/o7zQwLfFUIBRF5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAt
ZjBmOTNjY2EyNDc5LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAtZjBmOTNjY2EyNDc5
LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGGBHfoc
tXrCv5gXCu3X6J94QKcCxPP8Vle7925gwz1KKnGFSdJFQtMGPUjgENtCDWDueKt8
ZIt8cUdiPKEWH0+dDZDo3K5jKGLNFFuJLq/6J9amSeMw295EsDniUlRh/XdmvHcj
oX2XoK3kvfZ90uYd7T1etr+b5Ttd1fQonj+Mjdw7EjnizUXbeU10Gb3F1Y+yRx1/
b6shS7hnqFoOhp9gbWibHBecNabpYaAj5sGdPpQTPIQWNC+kNnpWg3VilXSvZyGQ
eU1XXABx5Sxwr94nQoskuay9jwp4URP04B30P7lti5WAznIKzxpd2d6oL3yaF1WL
aoEs2Io7zqzrcg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:13:54 2026 by rpki-client