Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier: ip61lfcu0/KxbQy2DKep1bWrt8RoREzoRSCXu4SlE70=
Subject key identifier: 7C:F1:4C:5C:10:99:8B:E1:82:BB:C0:16:EC:3C:2D:70:F8:16:38:CA
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial: 019F189EA6CCFBE5ED841271A8EB5DBFC5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number: 1983
Signing time: Tue 30 Jun 2026 13:01:18 +0000
Manifest this update: Tue 30 Jun 2026 13:01:18 +0000
Manifest next update: Wed 01 Jul 2026 13:01:18 +0000
Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: OJJMaPbXXwujnUDdw1T0VvXCQ0mrqrbTtTVhxKhxFYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:a6:cc:fb:e5:ed:84:12:71:a8:eb:5d:bf:c5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Validity
Not Before: Jun 30 13:01:18 2026 GMT
Not After : Jul 1 13:01:18 2026 GMT
Subject: CN=7cf14c5c10998be182bbc016ec3c2d70f81638ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ab:fb:2c:96:29:89:b2:7f:2c:1d:19:99:d8:
31:0d:29:42:65:32:28:0b:8f:5d:32:eb:42:de:4d:
a3:a4:7a:72:97:00:9c:ce:08:2a:64:8c:b1:88:40:
ac:fd:61:7d:49:06:f9:4b:da:b5:aa:b9:d1:10:a1:
44:52:dc:0b:ee:95:87:a7:aa:81:7e:dd:dd:c4:e1:
28:89:9b:f6:cf:78:8d:eb:3c:fb:83:24:ff:7c:ec:
57:f0:1a:c8:b8:1b:15:d7:c6:ef:2d:98:e6:c1:dc:
84:4e:41:f6:6a:dd:a6:48:67:61:d8:e1:6f:3f:b2:
b7:e0:ef:67:d1:7a:b9:35:5a:9a:95:51:8e:32:93:
22:4b:d7:83:a2:df:e7:4e:94:d8:ac:e1:5a:16:a3:
ac:76:58:35:a2:e0:47:d1:24:5c:11:54:57:2f:32:
a2:aa:24:4c:5a:c4:aa:4b:6f:78:ef:ff:33:bc:92:
69:f5:09:6f:c6:86:5a:c2:ae:e9:93:f3:be:58:7a:
ff:c3:5b:2b:82:ef:e5:f1:05:07:aa:f4:8d:61:7d:
be:bc:f3:30:db:b7:f2:5b:5d:79:d2:12:f0:b9:f8:
b5:49:90:b4:28:40:5a:bb:eb:9c:f5:b4:bf:13:27:
64:18:9a:b7:45:23:97:aa:d2:29:f4:ce:42:62:6b:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F1:4C:5C:10:99:8B:E1:82:BB:C0:16:EC:3C:2D:70:F8:16:38:CA
X509v3 Authority Key Identifier:
keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:99:76:f8:4a:3e:6b:08:a8:cd:02:40:4e:be:1e:41:22:7d:
0e:3c:5f:47:e4:03:a4:f2:cc:92:9e:e9:47:f7:8a:51:5b:b5:
70:38:f6:4a:b1:7e:04:a7:d2:b0:71:6c:89:89:2f:24:92:e7:
58:b7:68:60:93:96:a4:97:03:39:34:64:e3:75:ac:f9:df:c6:
ac:66:3e:58:cc:92:4f:db:22:ff:ad:ac:62:89:e8:fc:f0:66:
0c:d4:37:d0:8e:5c:4c:45:b7:c3:5c:0a:99:4c:90:14:be:08:
ba:1a:d3:71:22:ac:ae:4f:7f:d0:38:ef:59:41:c8:e9:a2:2e:
27:4c:3c:15:ca:da:99:01:3f:90:37:7b:c0:ac:5d:97:72:a6:
c9:32:23:d1:83:5d:94:9b:a9:32:07:22:03:0d:8f:d6:d7:79:
c6:4d:b5:7d:63:32:57:3c:35:0d:9d:26:85:95:65:47:ae:9a:
f9:1b:77:26:df:83:6e:29:9f:9d:0c:67:6a:15:6d:8a:b9:11:
1e:ef:26:e6:49:55:ea:1e:02:fb:de:26:d6:a4:89:37:59:02:
f6:25:8c:cc:9e:2e:35:73:3a:df:92:a7:f9:14:91:54:f6:16:
1d:d5:9e:d0:06:56:85:d8:97:fc:57:0a:1d:28:1b:bc:68:a8:
fd:52:65:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnqbM++XthBJxqOtdv8XTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MjQ3NWIwNjRkZThhODlmMTUwM2VhZWZjN2Q3MmFkY2Nm
MzhhMTYwHhcNMjYwNjMwMTMwMTE4WhcNMjYwNzAxMTMwMTE4WjAzMTEwLwYDVQQD
Eyg3Y2YxNGM1YzEwOTk4YmUxODJiYmMwMTZlYzNjMmQ3MGY4MTYzOGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qv7LJYpibJ/LB0ZmdgxDSlCZTIo
C49dMutC3k2jpHpylwCczggqZIyxiECs/WF9SQb5S9q1qrnREKFEUtwL7pWHp6qB
ft3dxOEoiZv2z3iN6zz7gyT/fOxX8BrIuBsV18bvLZjmwdyETkH2at2mSGdh2OFv
P7K34O9n0Xq5NVqalVGOMpMiS9eDot/nTpTYrOFaFqOsdlg1ouBH0SRcEVRXLzKi
qiRMWsSqS2947/8zvJJp9QlvxoZawq7pk/O+WHr/w1srgu/l8QUHqvSNYX2+vPMw
27fyW1150hLwufi1SZC0KEBau+uc9bS/EydkGJq3RSOXqtIp9M5CYmuCxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzxTFwQmYvhgrvAFuw8LXD4FjjKMB8GA1UdIwQY
MBaAFPckdbBk3oqJ8VA+rvx9cq3M84oWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85MGYzNmUtZDM4Zi00ZWU5LWFjZWIt
MjgzMjBhNWMwNzdiLzEvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy85MGYzNmUtZDM4Zi00ZWU5LWFjZWItMjgzMjBhNWMwNzdi
LzEvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZl2+Eo+
awiozQJATr4eQSJ9DjxfR+QDpPLMkp7pR/eKUVu1cDj2SrF+BKfSsHFsiYkvJJLn
WLdoYJOWpJcDOTRk43Ws+d/GrGY+WMyST9si/62sYono/PBmDNQ30I5cTEW3w1wK
mUyQFL4IuhrTcSKsrk9/0DjvWUHI6aIuJ0w8FcramQE/kDd7wKxdl3KmyTIj0YNd
lJupMgciAw2P1td5xk21fWMyVzw1DZ0mhZVlR66a+Rt3Jt+DbimfnQxnahVtirkR
Hu8m5klV6h4C+94m1qSJN1kC9iWMzJ4uNXM635Kn+RSRVPYWHdWe0AZWhdiX/FcK
HSgbvGio/VJl2w==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:04 2026 by rpki-client