Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier: EbnYMZPYKw66+rB100GawVZf+C56CK9x/zmAEOjtbuc=
Subject key identifier: 3C:B0:FA:B7:42:39:FF:0A:00:04:8C:C7:D6:6A:98:CA:72:17:24:7E
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 019E4D6A33B2C3603FE56383C84364C28EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number: 1713
Signing time: Fri 22 May 2026 02:01:06 +0000
Manifest this update: Fri 22 May 2026 02:01:06 +0000
Manifest next update: Sat 23 May 2026 02:01:06 +0000
Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: 4F09u9KnI7KXb1Ebdk0JsFStYoQxituJoGCCZlRBgiY=)
2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4d:6a:33:b2:c3:60:3f:e5:63:83:c8:43:64:c2:8e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: May 22 02:01:06 2026 GMT
Not After : May 23 02:01:06 2026 GMT
Subject: CN=3cb0fab74239ff0a00048cc7d66a98ca7217247e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:78:86:d5:4e:ec:39:18:99:8e:04:b9:d7:77:
c2:96:bf:4a:1d:5d:1b:e9:14:4f:40:83:73:c6:e7:
3b:b9:05:b5:85:9d:fa:bd:9e:71:b4:07:fd:d3:b5:
52:70:73:a7:a7:62:8b:b2:dc:43:29:1d:d8:2c:46:
3f:0b:85:97:8f:4b:ce:b9:aa:83:89:37:15:e2:2c:
51:59:28:2b:26:94:fd:7d:31:2c:29:3d:22:bc:d3:
6f:85:18:27:41:4c:81:1c:a9:3b:7c:08:e0:ff:08:
d6:85:83:23:8e:ab:5c:1a:b8:c3:5f:a0:7d:2f:be:
06:ef:14:7b:48:1f:eb:24:0e:d2:1e:17:b1:48:25:
02:77:68:34:6b:d4:c6:ed:45:2d:03:2e:0c:19:78:
77:3c:56:a0:22:fd:cd:9c:9b:be:99:8c:cc:b8:f9:
2c:00:90:b0:89:b6:82:c1:89:b8:25:04:a9:8f:eb:
65:26:70:22:c2:ef:31:ce:e0:9b:37:b1:81:16:22:
50:dd:82:b5:9e:55:ae:ea:56:fe:88:2e:30:2d:34:
54:d0:22:f6:ba:c5:66:2b:69:c7:18:92:d7:9e:ab:
14:01:b2:43:4b:cb:2a:4c:d6:c4:51:e5:96:bf:78:
26:0f:02:c3:62:9a:5c:9f:ba:67:3d:6b:9a:2e:f2:
f9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B0:FA:B7:42:39:FF:0A:00:04:8C:C7:D6:6A:98:CA:72:17:24:7E
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d3:67:47:aa:c6:f5:d4:b8:6d:93:72:42:0d:0d:de:57:af:
06:1c:3d:a1:d5:99:83:42:c6:8b:30:48:aa:9a:96:45:6e:e4:
4c:c7:da:17:67:3e:8f:82:14:66:0f:88:a1:0d:f4:65:ed:eb:
97:fb:d7:55:b7:18:d2:c9:9e:c5:54:4f:0b:63:0e:9f:81:ae:
12:a9:0f:c2:36:4e:dd:d0:75:81:d4:f9:13:f9:22:4c:50:a9:
19:5b:32:f8:f9:13:42:48:45:6b:d6:2f:ad:0f:12:12:3f:af:
3f:14:10:df:db:30:3f:d8:8f:68:ac:a3:cb:98:d2:95:63:bd:
60:bf:df:c3:55:25:9a:38:3a:8b:0c:cd:24:96:34:20:35:2e:
3b:ef:12:df:ce:b2:63:69:7a:0a:cb:03:8b:66:49:57:d3:ed:
c0:8d:0d:bc:35:86:78:2e:0a:02:4d:a1:a8:21:6d:2b:f9:8f:
78:50:e8:e8:82:e9:39:a1:64:66:6d:92:83:95:af:72:de:6d:
7e:21:e7:f3:93:70:0f:aa:dc:d5:d6:6b:6c:5a:b7:c0:1d:39:
47:a0:53:c6:3c:73:96:e9:00:42:f5:65:47:a6:fc:0b:37:9f:
98:49:dd:48:5e:d3:ad:df:85:c0:c2:51:2b:12:61:f1:7c:69:
9b:0e:97:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5NajOyw2A/5WODyENkwo7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk
NDE1OGEwHhcNMjYwNTIyMDIwMTA2WhcNMjYwNTIzMDIwMTA2WjAzMTEwLwYDVQQD
EygzY2IwZmFiNzQyMzlmZjBhMDAwNDhjYzdkNjZhOThjYTcyMTcyNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHiG1U7sORiZjgS513fClr9KHV0b
6RRPQINzxuc7uQW1hZ36vZ5xtAf907VScHOnp2KLstxDKR3YLEY/C4WXj0vOuaqD
iTcV4ixRWSgrJpT9fTEsKT0ivNNvhRgnQUyBHKk7fAjg/wjWhYMjjqtcGrjDX6B9
L74G7xR7SB/rJA7SHhexSCUCd2g0a9TG7UUtAy4MGXh3PFagIv3NnJu+mYzMuPks
AJCwibaCwYm4JQSpj+tlJnAiwu8xzuCbN7GBFiJQ3YK1nlWu6lb+iC4wLTRU0CL2
usVmK2nHGJLXnqsUAbJDS8sqTNbEUeWWv3gmDwLDYppcn7pnPWuaLvL5pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyw+rdCOf8KAASMx9ZqmMpyFyR+MB8GA1UdIwQY
MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt
MDc1MTAzODE0MjBhLzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh
LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9NnR6rG
9dS4bZNyQg0N3levBhw9odWZg0LGizBIqpqWRW7kTMfaF2c+j4IUZg+IoQ30Ze3r
l/vXVbcY0smexVRPC2MOn4GuEqkPwjZO3dB1gdT5E/kiTFCpGVsy+PkTQkhFa9Yv
rQ8SEj+vPxQQ39swP9iPaKyjy5jSlWO9YL/fw1Ulmjg6iwzNJJY0IDUuO+8S386y
Y2l6CssDi2ZJV9PtwI0NvDWGeC4KAk2hqCFtK/mPeFDo6ILpOaFkZm2Sg5Wvct5t
fiHn85NwD6rc1dZrbFq3wB05R6BTxjxzlukAQvVlR6b8CzefmEndSF7Trd+FwMJR
KxJh8Xxpmw6X6w==
-----END CERTIFICATE-----
Generated at Fri May 22 07:53:31 2026 by rpki-client