Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier: 6qNRK3fnVoXG28hF6NJGPnpwhz/TWbhsOdjwXybfvLU=
Subject key identifier: CA:69:3D:C5:17:F5:1A:2F:4C:BD:5B:2D:F9:1F:39:44:0F:C1:B3:1D
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial: 019E30E00E312747E4194755B314440F210B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number: 185F
Signing time: Sat 16 May 2026 13:00:50 +0000
Manifest this update: Sat 16 May 2026 13:00:50 +0000
Manifest next update: Sun 17 May 2026 13:00:50 +0000
Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: cBP5EvMhoAFEzmE9hyjydVwnenaxa4tWFE2oioPkVu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:0e:31:27:47:e4:19:47:55:b3:14:44:0f:21:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
Validity
Not Before: May 16 13:00:50 2026 GMT
Not After : May 17 13:00:50 2026 GMT
Subject: CN=ca693dc517f51a2f4cbd5b2df91f39440fc1b31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:fe:74:62:37:b9:b6:84:47:f8:68:e9:94:
e3:23:98:48:09:cd:ef:53:30:2d:40:42:fe:a1:fb:
39:f4:1e:c7:ac:2a:0c:89:71:9e:35:b4:4f:02:48:
4e:45:e2:5f:f3:98:db:16:a5:bc:75:5f:e4:2e:eb:
be:70:f0:76:e4:2d:be:91:da:99:bd:64:32:f0:94:
38:0e:e5:aa:02:19:d9:47:d5:1c:bd:f8:fd:f3:75:
5d:6f:4f:a5:9f:92:6b:ff:51:25:16:ec:bc:f5:15:
4b:ab:f4:b2:d2:ee:9c:69:95:83:70:a6:c8:86:fc:
a2:b3:d3:d2:72:2c:17:88:8b:03:c7:72:a0:18:71:
72:f9:0b:81:09:85:6c:b9:87:c8:b5:ac:ec:8b:65:
6a:c2:75:4a:5c:5d:13:21:35:8a:1b:19:8b:2e:a0:
ec:d1:e5:72:36:72:2b:16:e4:79:e5:ae:79:ce:b6:
bb:6a:63:85:3c:6d:4a:b1:35:ac:f8:24:f7:f4:8a:
6f:5d:68:e8:d6:2a:87:16:3a:57:49:c0:e2:ab:f3:
f2:ab:92:af:95:94:1b:d9:bd:a6:01:54:18:25:6a:
3a:79:a5:74:8b:15:0a:9b:fa:2f:78:21:e1:45:16:
b2:ac:a6:e8:56:64:0c:46:52:91:5c:b3:93:6d:53:
f6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:69:3D:C5:17:F5:1A:2F:4C:BD:5B:2D:F9:1F:39:44:0F:C1:B3:1D
X509v3 Authority Key Identifier:
keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b4:c0:4c:60:07:7c:9d:8f:ec:04:83:22:53:01:54:f7:30:
0b:cc:8d:89:f6:ae:c9:5d:c7:be:6d:be:8a:9d:87:66:d0:70:
9d:f0:4c:b4:dd:76:f5:fa:2c:65:20:c7:76:a9:51:94:4a:29:
88:75:ba:17:9e:ce:71:fd:22:6a:b1:66:4f:bb:a5:2c:9a:68:
e2:6b:b7:d4:1f:60:6c:1d:2b:7e:d0:01:01:52:ce:e4:25:6e:
27:17:3e:42:22:5f:10:3b:a0:83:21:8d:23:b1:6b:ce:0f:99:
22:a4:d4:3c:bf:94:6f:c6:96:8f:58:4d:89:75:c6:9f:14:95:
b3:6a:33:11:bd:bc:6f:dc:dd:c6:25:ba:d7:24:57:86:37:0a:
f2:90:69:39:69:ad:c4:54:8c:31:c2:24:b2:4f:86:36:0c:c3:
b5:d4:be:4c:eb:92:22:8b:72:ff:83:1d:55:ef:80:e6:61:30:
ee:bc:38:82:9b:ef:45:1f:d6:85:c3:b8:1a:de:5b:8f:aa:df:
1e:d8:cd:a9:4e:17:d1:67:e5:04:42:cd:23:1b:90:81:ff:4e:
05:17:cf:5a:43:68:62:30:d5:93:6a:e1:96:1b:d8:68:84:ad:
5f:0f:d2:fa:91:df:5f:c5:c5:b4:ee:80:f9:16:9b:41:9f:6a:
19:98:49:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4A4xJ0fkGUdVsxREDyELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YjExMmQ0YmVkYmE2ZjM1ODUyOGE4MzcxNDFiNzRiMDky
OTg1OTMwHhcNMjYwNTE2MTMwMDUwWhcNMjYwNTE3MTMwMDUwWjAzMTEwLwYDVQQD
EyhjYTY5M2RjNTE3ZjUxYTJmNGNiZDViMmRmOTFmMzk0NDBmYzFiMzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a/+dGI3ubaER/ho6ZTjI5hICc3v
UzAtQEL+ofs59B7HrCoMiXGeNbRPAkhOReJf85jbFqW8dV/kLuu+cPB25C2+kdqZ
vWQy8JQ4DuWqAhnZR9Ucvfj983Vdb0+ln5Jr/1ElFuy89RVLq/Sy0u6caZWDcKbI
hvyis9PSciwXiIsDx3KgGHFy+QuBCYVsuYfItazsi2VqwnVKXF0TITWKGxmLLqDs
0eVyNnIrFuR55a55zra7amOFPG1KsTWs+CT39IpvXWjo1iqHFjpXScDiq/Pyq5Kv
lZQb2b2mAVQYJWo6eaV0ixUKm/oveCHhRRayrKboVmQMRlKRXLOTbVP27wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMppPcUX9RovTL1bLfkfOUQPwbMdMB8GA1UdIwQY
MBaAFPaxEtS+26bzWFKKg3FBt0sJKYWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjkxNjctNjZlZS00NTNiLTllYTAt
NGMzZWY0MWFlZDdmLzEvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zZjkxNjctNjZlZS00NTNiLTllYTAtNGMzZWY0MWFlZDdm
LzEvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLTATGAH
fJ2P7ASDIlMBVPcwC8yNifauyV3Hvm2+ip2HZtBwnfBMtN129fosZSDHdqlRlEop
iHW6F57Ocf0iarFmT7ulLJpo4mu31B9gbB0rftABAVLO5CVuJxc+QiJfEDuggyGN
I7Frzg+ZIqTUPL+Ub8aWj1hNiXXGnxSVs2ozEb28b9zdxiW61yRXhjcK8pBpOWmt
xFSMMcIksk+GNgzDtdS+TOuSIoty/4MdVe+A5mEw7rw4gpvvRR/WhcO4Gt5bj6rf
HtjNqU4X0WflBELNIxuQgf9OBRfPWkNoYjDVk2rhlhvYaIStXw/S+pHfX8XFtO6A
+RabQZ9qGZhJbQ==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:24 2026 by rpki-client