Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
File: 9bulXh8L-GE-qbu-KXooGzyDgYA.mft (raw, json)
Hash identifier: tevtzokzIoYoPXgrMGxSdjqUJBUn3TSjvHI3bMk+//c=
Subject key identifier: 08:2D:F2:6B:BA:83:E9:B7:B7:53:F5:F5:3E:AE:00:DD:A8:68:9F:74
Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
Certificate issuer: /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Certificate serial: 019E31176E82813A7E7E04A6B0BFE0F1728B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 14:01:19 +0000
Manifest this update: Sat 16 May 2026 14:01:19 +0000
Manifest next update: Sun 17 May 2026 14:01:19 +0000
Files and hashes: 1: 9bulXh8L-GE-qbu-KXooGzyDgYA.crl (hash: low+yDolRttHQ1GBNLDYSYuHaXKSpUaKneXA54MSFAg=)
2: sB9rgefHa3sSt6ZYnW1BwCOgmaU.roa (hash: svJIfKZ/TOmm8xXRzXlM/7QXfhtfTNna41fpYKpF970=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:6e:82:81:3a:7e:7e:04:a6:b0:bf:e0:f1:72:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Validity
Not Before: May 16 14:01:19 2026 GMT
Not After : May 17 14:01:19 2026 GMT
Subject: CN=082df26bba83e9b7b753f5f53eae00dda8689f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:25:66:ac:1d:fb:df:60:54:6f:b1:48:36:
eb:d3:80:a5:4c:78:00:86:9c:87:b0:4d:b3:b8:eb:
90:cd:8f:24:83:5a:7a:11:43:6e:93:84:4f:b1:65:
63:ec:0b:b0:3d:e3:82:2c:d1:0c:a6:04:c4:44:16:
e1:0e:e6:2d:59:03:75:b7:41:65:de:2e:e9:18:9b:
3a:2f:af:78:32:26:94:d1:64:08:6f:c4:af:68:bb:
1d:2c:f2:f0:0a:aa:3c:09:15:da:ac:6d:d4:ec:8f:
41:42:e1:f2:25:cd:32:80:47:cd:48:f4:54:bb:51:
48:52:ba:77:c0:16:b3:43:27:38:aa:75:6d:dc:84:
3e:3b:c0:2f:d4:66:89:f8:68:89:61:6f:9b:3b:00:
e6:91:df:d4:90:00:3e:c6:6f:0c:36:71:b9:a2:8a:
46:fc:18:6e:0e:65:a3:1f:0c:d1:32:3a:91:c2:76:
7b:e1:29:ab:da:17:d8:c9:9c:2f:53:74:e0:35:9b:
70:8e:a2:ad:b9:2e:cc:f8:62:96:8b:e3:3e:1f:75:
07:09:b3:a9:a6:82:52:1a:71:e8:ac:6d:a2:7f:a1:
4b:c9:64:6e:60:ce:d8:26:8d:1a:ea:6f:ae:d3:e9:
57:83:02:0e:52:16:c5:db:7a:9d:24:41:67:db:25:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2D:F2:6B:BA:83:E9:B7:B7:53:F5:F5:3E:AE:00:DD:A8:68:9F:74
X509v3 Authority Key Identifier:
keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b4:b9:66:41:17:b6:09:3b:6a:67:8f:f2:90:62:cb:c8:a9:
31:08:ee:b7:55:75:45:9a:69:f4:ea:fd:2d:12:02:a3:fa:53:
52:ae:bc:c6:81:80:c1:7b:78:3a:cc:62:0a:9e:57:a5:d0:14:
81:69:86:d7:3b:fc:de:1c:53:d4:d3:96:2f:7c:bc:c0:07:13:
f7:24:54:ba:8e:2c:f4:e8:88:a7:38:27:b5:0d:ff:42:6d:89:
62:bc:86:b2:3d:a3:41:69:85:02:20:7f:ea:6d:4b:5d:bc:87:
6d:1f:3e:84:33:26:ff:88:ef:cc:cf:d3:7b:a4:ec:d8:1e:f5:
7a:37:8b:04:8a:0c:f0:00:9c:07:c4:45:0c:c4:db:2a:97:69:
31:1b:93:10:6f:cc:c0:ca:93:25:04:2e:19:72:7a:84:ca:28:
01:dc:b2:74:a2:ab:79:6c:c7:d5:0c:e3:80:ce:1a:ae:5c:e2:
be:4d:87:3e:56:f8:90:35:b8:40:64:3a:7b:c9:dc:8a:d9:21:
97:d2:bb:97:23:3b:ed:c4:0b:b3:0e:0a:a7:4c:e9:5c:e8:66:
6a:71:e3:3f:6d:38:07:55:c9:1a:5a:e8:9a:5b:b4:4d:09:59:
e2:f6:25:37:6f:f2:39:17:ff:34:9f:2e:ec:c3:65:aa:69:14:
bc:5a:97:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF26CgTp+fgSmsL/g8XKLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YmJhNTVlMWYwYmY4NjEzZWE5YmJiZTI5N2EyODFiM2M4
MzgxODAwHhcNMjYwNTE2MTQwMTE5WhcNMjYwNTE3MTQwMTE5WjAzMTEwLwYDVQQD
EygwODJkZjI2YmJhODNlOWI3Yjc1M2Y1ZjUzZWFlMDBkZGE4Njg5Zjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+ElZqwd+99gVG+xSDbr04ClTHgA
hpyHsE2zuOuQzY8kg1p6EUNuk4RPsWVj7AuwPeOCLNEMpgTERBbhDuYtWQN1t0Fl
3i7pGJs6L694MiaU0WQIb8SvaLsdLPLwCqo8CRXarG3U7I9BQuHyJc0ygEfNSPRU
u1FIUrp3wBazQyc4qnVt3IQ+O8Av1GaJ+GiJYW+bOwDmkd/UkAA+xm8MNnG5oopG
/BhuDmWjHwzRMjqRwnZ74Smr2hfYyZwvU3TgNZtwjqKtuS7M+GKWi+M+H3UHCbOp
poJSGnHorG2if6FLyWRuYM7YJo0a6m+u0+lXgwIOUhbF23qdJEFn2yXhSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgt8mu6g+m3t1P19T6uAN2oaJ90MB8GA1UdIwQY
MBaAFPW7pV4fC/hhPqm7vil6KBs8g4GAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xN2NjNGEtMjkyYy00ZDUwLThkM2Ut
ZjViOTdjMGYwZjI0LzEvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8xN2NjNGEtMjkyYy00ZDUwLThkM2UtZjViOTdjMGYwZjI0
LzEvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLS5ZkEX
tgk7ameP8pBiy8ipMQjut1V1RZpp9Or9LRICo/pTUq68xoGAwXt4OsxiCp5XpdAU
gWmG1zv83hxT1NOWL3y8wAcT9yRUuo4s9OiIpzgntQ3/Qm2JYryGsj2jQWmFAiB/
6m1LXbyHbR8+hDMm/4jvzM/Te6Ts2B71ejeLBIoM8ACcB8RFDMTbKpdpMRuTEG/M
wMqTJQQuGXJ6hMooAdyydKKreWzH1QzjgM4arlzivk2HPlb4kDW4QGQ6e8ncitkh
l9K7lyM77cQLsw4Kp0zpXOhmanHjP204B1XJGlromlu0TQlZ4vYlN2/yORf/NJ8u
7MNlqmkUvFqXLg==
-----END CERTIFICATE-----
Generated at Sat May 16 16:26:49 2026 by rpki-client