Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File: 9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier: d2caozMq1Now7EnSSeX2Z+jkUCCJgzd/2Aw6ZL9aLXo=
Subject key identifier: CE:36:E7:06:32:F6:55:05:E2:F6:B9:F6:18:AC:AD:59:C4:71:37:0C
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 019E1DFDFA391A6FB38C5CF081C1303B0C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number: 17B6
Signing time: Tue 12 May 2026 21:00:44 +0000
Manifest this update: Tue 12 May 2026 21:00:44 +0000
Manifest next update: Wed 13 May 2026 21:00:44 +0000
Files and hashes: 1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: ks4RaH5cVAMbtr05arSARjLuGzhkLCaKNlCdXIPkmMU=)
2: ZZanlFxScyN4CQoGhBTQl2sVxVg.roa (hash: A34wmEZaQFDCuGsNd+TzvMoOwERkMP/gXQVur9pCPCA=)
3: pRFsySqGl0tFAUw52aDZNnq-uD0.roa (hash: w8jNvizOVr/p52jNZpTu/WC6lPFW3XL5WSYxYnBEKj4=)
4: xO0eawE2B1S0TKvBcaaGiQh0Ol0.roa (hash: dcuU5KhFuT+OtopOGBCq8QR05uFVdXywWZjFZcyGZgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:fa:39:1a:6f:b3:8c:5c:f0:81:c1:30:3b:0c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: May 12 21:00:44 2026 GMT
Not After : May 13 21:00:44 2026 GMT
Subject: CN=ce36e70632f65505e2f6b9f618acad59c471370c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:ad:d6:60:d2:fb:17:07:dd:2c:e8:f7:7b:
10:65:6f:33:ea:89:ae:94:1c:15:51:b5:c0:91:ee:
db:9e:31:cb:d2:0e:b8:99:62:84:53:62:d9:ac:05:
81:57:ba:d8:52:b0:ae:41:ff:b8:12:8b:d3:9d:a9:
a6:ba:0b:83:75:d8:26:34:10:07:d3:6e:2c:25:02:
2a:5a:11:bd:d0:8f:50:b0:10:31:c5:bd:30:12:7d:
22:ee:2b:c9:8e:ab:97:e8:b2:5a:c4:c1:d0:f0:fa:
24:3f:b2:1a:6e:32:e2:58:22:fa:52:32:ce:6b:2a:
5e:ab:31:e3:95:bb:83:93:be:db:37:45:75:06:b0:
fd:c8:04:b5:5d:9c:7d:d7:7e:5c:94:8d:a4:ff:39:
0f:2b:df:6c:2c:d5:57:9f:bc:2c:40:42:78:1f:37:
8d:25:29:ea:32:ca:c6:b1:d8:b2:ed:60:3a:c2:2e:
dd:42:f4:d3:cc:7e:75:8c:7b:41:ae:5f:0c:e8:2c:
7f:e7:e4:28:cd:10:92:42:cb:c5:91:28:50:58:4c:
85:b6:c6:d5:62:42:cb:f3:2e:07:39:ba:9c:a6:37:
27:eb:cc:a8:c9:4c:33:10:82:5e:52:64:a0:30:25:
24:d5:62:90:6e:1a:d3:62:60:9d:c2:8e:c8:a7:b3:
25:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:36:E7:06:32:F6:55:05:E2:F6:B9:F6:18:AC:AD:59:C4:71:37:0C
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:61:06:0f:e4:70:bf:f0:77:c1:d6:4b:e8:a2:4b:08:4b:76:
71:2f:37:8c:73:74:f4:97:5f:09:36:a3:d2:01:de:70:cd:21:
44:31:50:a1:30:99:8b:1a:74:9d:55:8a:4d:8e:81:3b:9b:2d:
b7:19:3b:28:f6:57:66:ab:39:94:d9:95:a2:db:c8:db:3a:04:
13:10:9b:df:a6:9f:c5:5d:b2:e3:f1:a3:ed:cf:46:71:83:de:
67:08:7b:cb:a6:38:50:c6:83:f2:dd:4b:bf:19:b9:36:bf:1a:
60:63:6a:eb:2c:7e:74:8b:89:15:b2:31:fe:0a:f6:fb:24:39:
90:ed:4a:1d:6f:99:3f:b9:69:92:96:de:48:17:a5:9e:9c:ea:
3a:8f:ec:d1:ba:88:f4:6b:ae:c1:e8:d1:ca:a3:f1:14:ff:43:
80:ab:fb:3d:69:cc:d2:ca:20:e6:63:94:32:a1:60:b1:cd:fe:
42:75:fb:3d:2c:8d:98:d3:93:84:57:ca:87:85:41:95:5c:29:
bb:23:77:aa:d0:7c:fb:ce:45:b6:d4:f5:9e:28:e4:05:21:d9:
68:49:c2:8b:09:24:dd:b7:7a:d4:29:97:1c:b4:b2:2f:fa:e3:
58:98:2f:36:9d:7d:14:d6:e8:7a:cd:78:97:e7:3c:b8:f7:d3:
2b:dc:a9:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/fo5Gm+zjFzwgcEwOwx2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NGFkNDVkMjJiNWYzY2YyZTcxY2UwYWMwMTA3NGI3Y2Qy
MWFjNTcwHhcNMjYwNTEyMjEwMDQ0WhcNMjYwNTEzMjEwMDQ0WjAzMTEwLwYDVQQD
EyhjZTM2ZTcwNjMyZjY1NTA1ZTJmNmI5ZjYxOGFjYWQ1OWM0NzEzNzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+at1mDS+xcH3Szo93sQZW8z6omu
lBwVUbXAke7bnjHL0g64mWKEU2LZrAWBV7rYUrCuQf+4EovTnammuguDddgmNBAH
024sJQIqWhG90I9QsBAxxb0wEn0i7ivJjquX6LJaxMHQ8PokP7IabjLiWCL6UjLO
aypeqzHjlbuDk77bN0V1BrD9yAS1XZx9135clI2k/zkPK99sLNVXn7wsQEJ4HzeN
JSnqMsrGsdiy7WA6wi7dQvTTzH51jHtBrl8M6Cx/5+QozRCSQsvFkShQWEyFtsbV
YkLL8y4HObqcpjcn68yoyUwzEIJeUmSgMCUk1WKQbhrTYmCdwo7Ip7MlGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM425wYy9lUF4va59hisrVnEcTcMMB8GA1UdIwQY
MBaAFPZK1F0itfPPLnHOCsAQdLfNIaxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2Qt
Njk5YjIzNGZjNzhjLzEvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2QtNjk5YjIzNGZjNzhj
LzEvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWEGD+Rw
v/B3wdZL6KJLCEt2cS83jHN09JdfCTaj0gHecM0hRDFQoTCZixp0nVWKTY6BO5st
txk7KPZXZqs5lNmVotvI2zoEExCb36afxV2y4/Gj7c9GcYPeZwh7y6Y4UMaD8t1L
vxm5Nr8aYGNq6yx+dIuJFbIx/gr2+yQ5kO1KHW+ZP7lpkpbeSBelnpzqOo/s0bqI
9GuuwejRyqPxFP9DgKv7PWnM0sog5mOUMqFgsc3+QnX7PSyNmNOThFfKh4VBlVwp
uyN3qtB8+85FttT1nijkBSHZaEnCiwkk3bd61CmXHLSyL/rjWJgvNp19FNboes14
l+c8uPfTK9ypyg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:53:40 2026 by rpki-client