Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: SQ2YIpic0U+RDuMOSQfmDZoSj7x+k89uFk11zj64USw=
Subject key identifier: 25:4F:EF:12:2D:A4:B4:61:12:98:6D:E6:A7:5B:23:C6:54:FA:B6:BA
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 019E1D22B7A47C73AD316C56B0D28DDAD722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 0FD2
Signing time: Tue 12 May 2026 17:01:14 +0000
Manifest this update: Tue 12 May 2026 17:01:14 +0000
Manifest next update: Wed 13 May 2026 17:01:14 +0000
Files and hashes: 1: 3LeKDjeMeS0PWJqQLmDkQl4RYGw.roa (hash: ceiJdKG/7eDY4f/rbJBgWYQ8nd++a/SiKCb4GKOrND8=)
2: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: iM97jQFUYSaI5fN1zHscfIQHmr4y2cGZ8fDeyqbmRMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:b7:a4:7c:73:ad:31:6c:56:b0:d2:8d:da:d7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: May 12 17:01:14 2026 GMT
Not After : May 13 17:01:14 2026 GMT
Subject: CN=254fef122da4b46112986de6a75b23c654fab6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:51:d1:66:7a:9d:a0:85:df:3f:74:30:65:
59:d6:85:fa:40:a0:19:9d:b5:c8:78:0a:a2:14:72:
91:e9:95:b5:33:90:48:7f:4e:69:75:da:3b:dc:4e:
00:18:a5:59:15:cb:0f:ce:a8:1c:83:62:36:f5:91:
4f:5e:48:c6:ab:2e:00:0e:f6:1c:87:2d:b9:cc:c7:
2b:8a:00:3d:b2:61:bb:5d:14:9f:cb:80:86:38:8e:
3b:f6:93:dc:98:46:69:77:2f:52:bf:78:74:16:08:
5d:23:ad:11:b2:fa:3c:d7:fa:93:fe:3e:62:63:80:
c7:08:1d:d6:74:fe:fd:aa:2b:68:1f:54:44:70:fe:
58:16:62:83:25:65:d2:4a:1f:1d:6c:89:79:3c:9f:
bd:6d:ee:73:60:5d:22:17:bf:6b:5a:33:4c:a2:ab:
85:8c:23:9f:4a:05:d5:41:f0:1b:39:3e:30:d9:22:
aa:e6:1e:05:cc:f3:00:3e:87:c8:c9:5b:3d:30:f6:
ee:89:ca:5a:3d:e4:3c:f2:46:80:0f:66:67:1e:ba:
53:8d:b3:4d:2d:c8:8d:9b:95:0c:ac:91:3f:b2:72:
42:5e:0e:70:a1:b2:ec:45:cc:76:ca:2c:d0:6f:0e:
8a:08:df:3b:37:dd:14:ec:c5:c6:68:42:65:e1:8f:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4F:EF:12:2D:A4:B4:61:12:98:6D:E6:A7:5B:23:C6:54:FA:B6:BA
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:bf:00:d3:50:57:84:4c:08:2b:79:b5:dc:b7:0c:63:13:71:
87:74:57:21:49:a0:a8:06:8e:12:66:76:87:56:9b:62:9e:58:
b4:a4:b7:0b:93:e5:01:ca:0f:aa:e0:47:66:ca:81:c2:83:92:
23:83:9e:26:98:61:aa:78:3a:fb:ba:5f:7b:a1:80:6b:dd:99:
8c:14:67:a8:5a:fb:aa:af:3c:19:b7:1c:6e:7e:db:96:08:ef:
26:71:7d:cc:06:bb:e0:33:90:4d:3d:15:a5:c3:92:ce:33:09:
05:cd:63:c4:aa:3a:32:65:6d:5d:0d:fd:e1:21:47:d1:01:af:
2b:5d:fa:c3:a8:33:05:ab:e6:63:3a:81:7d:ff:99:b6:3f:c5:
f6:a8:a6:6d:7c:59:5c:6f:a5:b7:b0:46:f5:57:f6:49:a3:4e:
d3:2d:46:c3:d9:96:05:5b:e9:1e:69:fc:da:06:a9:8b:d9:65:
7e:ff:a0:4a:f4:de:53:86:27:84:35:81:39:91:fc:f0:55:6f:
a4:2e:bb:ca:b2:2d:da:53:70:d8:a9:2a:0b:f5:df:bb:85:b8:
da:00:62:df:90:ac:b0:af:56:04:53:7e:d0:da:86:b4:c9:f1:
82:44:af:d8:a1:6a:59:b1:36:50:17:b3:86:29:31:7e:bb:d2:
36:a5:9c:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIrekfHOtMWxWsNKN2tciMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NWU3OTE0MTEzMGNlZWM4NTcyMTVmOWJiZGQ3YTU1YmFm
NGU3N2YwHhcNMjYwNTEyMTcwMTE0WhcNMjYwNTEzMTcwMTE0WjAzMTEwLwYDVQQD
EygyNTRmZWYxMjJkYTRiNDYxMTI5ODZkZTZhNzViMjNjNjU0ZmFiNmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwxR0WZ6naCF3z90MGVZ1oX6QKAZ
nbXIeAqiFHKR6ZW1M5BIf05pddo73E4AGKVZFcsPzqgcg2I29ZFPXkjGqy4ADvYc
hy25zMcrigA9smG7XRSfy4CGOI479pPcmEZpdy9Sv3h0FghdI60Rsvo81/qT/j5i
Y4DHCB3WdP79qitoH1REcP5YFmKDJWXSSh8dbIl5PJ+9be5zYF0iF79rWjNMoquF
jCOfSgXVQfAbOT4w2SKq5h4FzPMAPofIyVs9MPbuicpaPeQ88kaAD2ZnHrpTjbNN
LciNm5UMrJE/snJCXg5wobLsRcx2yizQbw6KCN87N90U7MXGaEJl4Y8ojQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVP7xItpLRhEpht5qdbI8ZU+ra6MB8GA1UdIwQY
MBaAFPReeRQRMM7shXIV+bvdelW69Od/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2Ut
MzNiZDg0MzQ5NWY4LzEvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2UtMzNiZDg0MzQ5NWY4
LzEvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtb8A01BX
hEwIK3m13LcMYxNxh3RXIUmgqAaOEmZ2h1abYp5YtKS3C5PlAcoPquBHZsqBwoOS
I4OeJphhqng6+7pfe6GAa92ZjBRnqFr7qq88Gbccbn7blgjvJnF9zAa74DOQTT0V
pcOSzjMJBc1jxKo6MmVtXQ394SFH0QGvK136w6gzBavmYzqBff+Ztj/F9qimbXxZ
XG+lt7BG9Vf2SaNO0y1Gw9mWBVvpHmn82gapi9llfv+gSvTeU4YnhDWBOZH88FVv
pC67yrIt2lNw2KkqC/Xfu4W42gBi35CssK9WBFN+0NqGtMnxgkSv2KFqWbE2UBez
hikxfrvSNqWcdw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:29:29 2026 by rpki-client