Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: r9rSuKB60FZfhPYXguSgtc8OOnzslXKwaODJhg/yRqM=
Subject key identifier: CF:C7:F3:6F:9E:A5:65:78:9F:82:2B:C3:02:E2:C0:6A:FE:AC:17:69
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 019E1C7DBDC65C4F59A6075953D54FE6CC4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0D80
Signing time: Tue 12 May 2026 14:01:03 +0000
Manifest this update: Tue 12 May 2026 14:01:03 +0000
Manifest next update: Wed 13 May 2026 14:01:03 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: F0jaebaY8SUbaAkvEJBerDh3cGVMTJ/WZl2DsS27eyI=)
2: B2xnjVLlq6B_PpOEtmPjM7HfJcE.roa (hash: Nq8Xgw/1x5u+OoYFPhSCZA8CfwNsYk4XNh9rnTNcOs4=)
3: jm5djjCBI4GuTu1q__jIGCgAw8M.roa (hash: aQBVu8CEknSd70NfkOxHQ8mA1JwVa6QyrHMRXeQPFvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:bd:c6:5c:4f:59:a6:07:59:53:d5:4f:e6:cc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: May 12 14:01:03 2026 GMT
Not After : May 13 14:01:03 2026 GMT
Subject: CN=cfc7f36f9ea565789f822bc302e2c06afeac1769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e4:da:f4:10:46:d4:97:5c:90:d3:1b:0e:2e:
55:c1:cb:86:54:a1:34:13:ec:6c:15:ef:9c:ea:81:
ee:13:65:a2:87:fd:88:05:47:3b:15:4d:84:2d:4c:
b5:c6:64:c7:6a:67:bd:71:07:7d:c2:d4:13:da:71:
4f:5a:7d:7e:4c:4f:5a:bb:34:64:a6:7a:7f:55:31:
6c:58:54:e6:4c:92:e8:47:91:53:df:13:c3:fe:21:
3a:16:6d:8f:f1:c2:86:45:6f:65:c7:3c:8f:d6:00:
a1:57:e1:72:59:21:d2:75:1c:f9:87:9d:2d:bd:e4:
f3:86:29:10:cc:cb:13:f5:3d:42:d1:a5:1e:cd:28:
d3:e5:62:df:b3:36:0c:24:ea:b4:12:5b:61:53:20:
74:c0:b3:d6:f9:9a:13:3b:af:8a:25:09:f3:df:4e:
35:5c:89:73:fa:fc:a9:40:c5:75:bf:e3:77:25:6a:
41:63:0b:41:8b:2b:6d:15:e6:ec:27:27:ce:2d:cd:
7e:e6:04:46:3f:8e:be:6e:14:f0:28:2a:c0:ce:24:
d7:0e:21:e7:c9:88:91:e5:ac:18:79:4d:dc:86:00:
aa:58:70:a5:1e:f7:c5:25:e6:fc:f2:c6:14:ad:05:
33:91:c8:44:41:e2:a6:b8:23:db:05:5a:e0:c3:e5:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C7:F3:6F:9E:A5:65:78:9F:82:2B:C3:02:E2:C0:6A:FE:AC:17:69
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f7:af:e1:32:78:b3:ff:ea:bb:3e:a9:67:79:1c:6a:31:b3:
52:6c:c3:01:00:01:be:72:c7:81:8f:01:3e:27:b6:3d:98:71:
e5:1f:68:e7:3c:e6:24:1d:6e:31:80:2b:bf:b2:70:b7:14:11:
0e:f8:87:46:1b:cb:bd:fe:5f:a2:ba:06:71:a6:6f:57:b5:bf:
16:22:4b:d1:31:54:ac:a7:ca:ec:ea:55:cd:01:71:69:9d:12:
30:f9:74:a5:c2:b3:95:55:37:49:95:ee:32:f9:a5:5e:7d:10:
99:06:49:e5:b6:c9:09:4c:8e:74:a1:5b:bf:e0:34:f0:5a:25:
c5:71:00:c4:4f:d9:f9:cc:49:c0:c6:7a:55:d5:d1:7b:10:6d:
63:ab:f4:71:16:54:eb:23:bf:f3:30:4a:f3:02:b1:2e:30:af:
a0:43:42:44:37:52:dd:42:c3:24:cc:8e:4b:b6:c5:61:45:75:
1b:9a:5b:bc:42:cc:33:f1:fa:3a:30:45:68:c3:b4:f1:38:cb:
11:d3:24:10:65:64:41:3e:c9:76:1f:6e:72:8d:17:4c:6b:9a:
db:81:1f:25:9a:70:60:23:94:19:d9:48:7a:17:2b:0a:ae:91:
36:6b:4f:1c:26:35:cf:7e:bc:35:51:e0:3d:a3:58:f0:bb:0f:
89:80:28:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfb3GXE9ZpgdZU9VP5sxNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjhlYzk2YzhlZTI2NWMzZGE0MjMyMzBhNTUyMTkzNjZk
ZDliMjgwHhcNMjYwNTEyMTQwMTAzWhcNMjYwNTEzMTQwMTAzWjAzMTEwLwYDVQQD
EyhjZmM3ZjM2ZjllYTU2NTc4OWY4MjJiYzMwMmUyYzA2YWZlYWMxNzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+Ta9BBG1JdckNMbDi5VwcuGVKE0
E+xsFe+c6oHuE2Wih/2IBUc7FU2ELUy1xmTHame9cQd9wtQT2nFPWn1+TE9auzRk
pnp/VTFsWFTmTJLoR5FT3xPD/iE6Fm2P8cKGRW9lxzyP1gChV+FyWSHSdRz5h50t
veTzhikQzMsT9T1C0aUezSjT5WLfszYMJOq0ElthUyB0wLPW+ZoTO6+KJQnz3041
XIlz+vypQMV1v+N3JWpBYwtBiyttFebsJyfOLc1+5gRGP46+bhTwKCrAziTXDiHn
yYiR5awYeU3chgCqWHClHvfFJeb88sYUrQUzkchEQeKmuCPbBVrgw+XfXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/H82+epWV4n4IrwwLiwGr+rBdpMB8GA1UdIwQY
MBaAFPT47JbI7iZcPaQjIwpVIZNm3ZsoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85MTU5ZGItNjE3My00MDhjLThlMWIt
OGQ0OTg4MjdmNDVjLzEvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85MTU5ZGItNjE3My00MDhjLThlMWItOGQ0OTg4MjdmNDVj
LzEvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/ev4TJ4
s//quz6pZ3kcajGzUmzDAQABvnLHgY8BPie2PZhx5R9o5zzmJB1uMYArv7JwtxQR
DviHRhvLvf5foroGcaZvV7W/FiJL0TFUrKfK7OpVzQFxaZ0SMPl0pcKzlVU3SZXu
MvmlXn0QmQZJ5bbJCUyOdKFbv+A08FolxXEAxE/Z+cxJwMZ6VdXRexBtY6v0cRZU
6yO/8zBK8wKxLjCvoENCRDdS3ULDJMyOS7bFYUV1G5pbvELMM/H6OjBFaMO08TjL
EdMkEGVkQT7Jdh9uco0XTGua24EfJZpwYCOUGdlIehcrCq6RNmtPHCY1z368NVHg
PaNY8LsPiYAobQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:31:00 2026 by rpki-client