Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier: KGYJNJvUdRbnx9xC9BDhCNNZqTx2pmLV+bitfEBjcQ8=
Subject key identifier: B4:06:B6:45:87:53:2F:60:A3:A5:FA:8F:73:66:CC:FC:38:2D:E2:31
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer: /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial: 019E1D90A7D644D7861446600D9F58F6DD5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number: 0CE7
Signing time: Tue 12 May 2026 19:01:19 +0000
Manifest this update: Tue 12 May 2026 19:01:19 +0000
Manifest next update: Wed 13 May 2026 19:01:19 +0000
Files and hashes: 1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: jU2CZurBvs4IDDPG+32WB9ZrBphWJowP2Qktzpo99G4=)
2: sIunFd-UhDIY2he6578HnH9KYM4.roa (hash: cM+uL/KniFpxQyhA1SMW/C3f3nO1DxP+MeewVaQ/1Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:a7:d6:44:d7:86:14:46:60:0d:9f:58:f6:dd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Validity
Not Before: May 12 19:01:19 2026 GMT
Not After : May 13 19:01:19 2026 GMT
Subject: CN=b406b64587532f60a3a5fa8f7366ccfc382de231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9c:3b:71:78:c0:a8:bc:3e:a6:49:27:0c:67:
ac:d5:0c:c5:68:d4:79:ff:a8:be:d4:a5:a7:fc:d0:
ec:4e:c3:79:1e:eb:58:14:12:23:fa:82:2b:bf:64:
bc:c1:0a:95:8f:3b:aa:85:f2:22:8f:52:13:00:8b:
6e:55:9c:70:24:93:c9:b5:21:ab:7a:14:42:0e:ab:
3e:49:dd:d4:6b:11:16:04:cc:61:e8:7b:4f:11:85:
73:40:c8:5e:fa:b9:0b:b5:4f:42:ec:12:cf:7c:ea:
e4:9d:fa:a6:f1:9f:27:83:bd:8f:7c:5f:db:ea:be:
54:e0:01:1a:78:c4:b4:f2:79:4c:64:54:3c:3b:18:
79:6b:a4:b3:95:de:19:6a:33:56:cf:91:de:4d:4f:
67:03:bb:ad:ec:66:18:cd:c7:46:0c:47:e6:2a:e5:
71:2f:4f:90:9e:27:2f:54:72:73:46:6f:ba:01:26:
db:5c:7f:b6:55:80:50:f4:79:e0:61:18:9f:10:a0:
32:f7:fa:11:ef:f2:b7:57:c6:64:2f:a5:1a:35:34:
dc:14:1f:8f:a4:f2:a6:5d:5b:2a:c5:a9:64:5b:4d:
17:d7:90:0c:fb:0a:04:61:60:b5:eb:d8:3f:3d:7d:
b3:1c:0d:7d:d7:29:06:5a:23:73:e1:00:ca:1b:68:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:06:B6:45:87:53:2F:60:A3:A5:FA:8F:73:66:CC:FC:38:2D:E2:31
X509v3 Authority Key Identifier:
keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e9:0d:a0:eb:24:02:1f:1f:ab:35:dc:78:2f:98:b9:9f:a2:
a2:36:a8:87:aa:f6:7f:f5:e3:03:57:60:2d:a9:70:19:ae:64:
b4:98:7a:4c:01:5f:72:d4:5f:25:57:51:0d:c6:eb:dd:53:28:
02:f3:27:ed:1b:60:51:ab:14:3e:88:ac:5a:f8:5c:e4:c3:c6:
39:db:93:a6:b2:06:a3:b2:cc:86:65:87:30:78:33:6b:b5:e2:
78:fb:27:cd:1f:2d:33:c7:6d:31:7b:aa:32:d9:59:10:4f:9c:
fe:fa:1f:ff:4a:15:2b:28:e1:0d:a6:f5:db:e7:6d:70:7d:70:
e2:fd:9c:58:03:7d:38:22:b2:59:43:fd:4a:02:09:bb:c9:3c:
5b:b8:96:15:a0:47:3f:c6:9b:91:50:b1:05:10:a0:f9:ff:a2:
b8:2e:15:a9:e7:d5:d0:fd:94:46:10:36:5e:81:e8:fb:72:37:
a7:30:4d:e3:4e:ef:2f:c6:77:95:52:08:9e:30:a0:fc:08:7a:
20:22:b1:9a:17:f3:d4:cc:90:a5:e2:5e:f2:6d:34:d1:e9:75:
ee:ba:89:67:ca:22:2f:4a:94:9b:45:af:85:85:36:57:e1:cf:
66:eb:28:14:49:d2:1c:e7:16:bf:0e:e3:67:e4:f2:d6:bb:bd:
8a:71:d2:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkKfWRNeGFEZgDZ9Y9t1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NTdjMDIwY2RjMjJiNjhkYTI2YTQ2OWY2ZmZhNmI0NDgz
NzBkMWQwHhcNMjYwNTEyMTkwMTE5WhcNMjYwNTEzMTkwMTE5WjAzMTEwLwYDVQQD
EyhiNDA2YjY0NTg3NTMyZjYwYTNhNWZhOGY3MzY2Y2NmYzM4MmRlMjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5w7cXjAqLw+pkknDGes1QzFaNR5
/6i+1KWn/NDsTsN5HutYFBIj+oIrv2S8wQqVjzuqhfIij1ITAItuVZxwJJPJtSGr
ehRCDqs+Sd3UaxEWBMxh6HtPEYVzQMhe+rkLtU9C7BLPfOrknfqm8Z8ng72PfF/b
6r5U4AEaeMS08nlMZFQ8Oxh5a6Szld4ZajNWz5HeTU9nA7ut7GYYzcdGDEfmKuVx
L0+QnicvVHJzRm+6ASbbXH+2VYBQ9HngYRifEKAy9/oR7/K3V8ZkL6UaNTTcFB+P
pPKmXVsqxalkW00X15AM+woEYWC169g/PX2zHA191ykGWiNz4QDKG2hgtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQGtkWHUy9go6X6j3NmzPw4LeIxMB8GA1UdIwQY
MBaAFPRXwCDNwito2iakafb/prRINw0dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAt
N2JhZmQ0M2U3ODYyLzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAtN2JhZmQ0M2U3ODYy
LzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUekNoOsk
Ah8fqzXceC+YuZ+iojaoh6r2f/XjA1dgLalwGa5ktJh6TAFfctRfJVdRDcbr3VMo
AvMn7RtgUasUPoisWvhc5MPGOduTprIGo7LMhmWHMHgza7XiePsnzR8tM8dtMXuq
MtlZEE+c/vof/0oVKyjhDab12+dtcH1w4v2cWAN9OCKyWUP9SgIJu8k8W7iWFaBH
P8abkVCxBRCg+f+iuC4VqefV0P2URhA2XoHo+3I3pzBN407vL8Z3lVIInjCg/Ah6
ICKxmhfz1MyQpeJe8m000el17rqJZ8oiL0qUm0WvhYU2V+HPZusoFEnSHOcWvw7j
Z+Ty1ru9inHS+g==
-----END CERTIFICATE-----
Generated at Wed May 13 01:26:19 2026 by rpki-client