Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: N9t6Hl2dFkP3nB6icBaUr1OpZMgEVe0eJXFhCRTHaTY=
Subject key identifier: 9F:1F:9F:EB:19:2F:B7:A3:BC:1A:B0:E8:A5:D8:EE:C2:71:80:1B:81
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 019E311779272F3660CCCF28731BC94888EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 0C79
Signing time: Sat 16 May 2026 14:01:22 +0000
Manifest this update: Sat 16 May 2026 14:01:22 +0000
Manifest next update: Sun 17 May 2026 14:01:22 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: POz13G7H82IEW6CISaWO6YBFK71WKsrvdg62OO6RlLA=)
2: GKyDs47a7BqJFaT8Ozcx1DPKrA4.roa (hash: IeQFtuvzwY+Djd9V29XWo6xDkNMsoIv44LxRAtukIHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:79:27:2f:36:60:cc:cf:28:73:1b:c9:48:88:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: May 16 14:01:22 2026 GMT
Not After : May 17 14:01:22 2026 GMT
Subject: CN=9f1f9feb192fb7a3bc1ab0e8a5d8eec271801b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:66:02:d7:08:de:70:a0:ee:ae:72:a8:eb:e4:
cc:d3:02:19:ed:08:4b:97:ab:5d:5a:ac:b3:da:5a:
4d:47:8c:24:ca:e2:57:33:4b:8d:d7:d1:e7:25:d3:
db:7d:4d:95:bc:d9:bd:26:4b:24:cc:9f:a4:78:e6:
a3:76:ca:16:35:02:13:63:e2:c6:c1:11:c7:64:30:
3b:d6:a7:7b:f9:ac:e5:46:86:f5:55:9d:84:51:dd:
41:85:00:a6:7a:4c:88:5b:b5:54:e4:f8:be:b8:55:
e0:d2:38:9e:77:d4:ac:76:bf:4e:1f:b3:23:25:1f:
77:60:44:16:cd:be:1e:d4:97:ad:30:80:62:94:6b:
1e:8d:1d:b4:73:47:e1:c4:51:1c:05:f4:19:d5:e2:
f3:da:c6:02:92:5e:99:7d:a9:54:52:9b:13:cc:a4:
1f:22:27:b2:4d:d8:8f:a1:4c:bc:cf:66:1d:ca:f8:
28:23:ab:da:f4:8b:ab:e1:24:9e:30:ed:de:b9:0b:
af:ad:fc:fe:11:81:82:5b:41:86:00:45:9b:b7:c9:
4a:bb:29:91:09:f1:46:73:ba:b8:68:ca:77:fb:8b:
00:07:e3:74:8c:62:e6:03:3b:b0:e9:48:c9:fe:b1:
83:44:73:d5:30:b5:f0:a6:40:1a:28:e6:9b:51:9f:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1F:9F:EB:19:2F:B7:A3:BC:1A:B0:E8:A5:D8:EE:C2:71:80:1B:81
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:00:eb:e8:1c:c5:70:7b:8b:7c:fb:df:76:53:a8:1e:c2:ad:
4b:a5:37:14:b0:be:52:e2:ec:bd:b7:ce:0b:b3:21:e9:4d:87:
dd:dc:6c:7a:1b:2f:39:f1:9b:fd:af:75:c9:85:89:85:5e:11:
e8:45:e5:e7:6a:7c:1e:4f:2f:4f:f0:bd:39:0d:96:91:0b:69:
39:7a:2c:31:12:42:08:1c:67:21:67:05:2e:e5:08:2f:14:72:
52:c8:03:b2:77:80:aa:a8:8b:e9:c3:a7:3e:74:cf:4a:ab:65:
ae:ef:a0:00:8c:21:54:fa:9d:8e:58:b4:84:4b:f8:d4:9d:04:
b7:fe:ee:fc:9d:ae:12:82:b2:38:70:09:f8:16:a7:fd:ec:e8:
97:c8:14:15:5e:27:b6:8b:fa:3a:76:73:e9:21:13:6a:06:c7:
51:ae:40:eb:43:b8:89:1b:ef:3e:b1:28:5c:88:bb:35:ee:83:
1c:ba:0f:b8:60:3e:10:73:13:29:c9:e6:21:ac:65:bb:f7:f6:
85:a3:c0:af:50:20:3a:8b:71:1f:1f:7d:ef:f1:45:13:e3:c1:
2e:cc:11:9d:2f:8e:e0:19:d2:1f:ad:ea:74:cf:4d:35:79:74:
df:da:f9:98:12:e8:42:c9:fd:49:59:ec:79:39:38:1f:a2:0a:
e9:86:60:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF3knLzZgzM8ocxvJSIjsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MzE0YzFmOWUxMTkzYzIwMjVjYjY3MmI1MjM1NzM5Nzhk
MjU0ZDkwHhcNMjYwNTE2MTQwMTIyWhcNMjYwNTE3MTQwMTIyWjAzMTEwLwYDVQQD
Eyg5ZjFmOWZlYjE5MmZiN2EzYmMxYWIwZThhNWQ4ZWVjMjcxODAxYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GYC1wjecKDurnKo6+TM0wIZ7QhL
l6tdWqyz2lpNR4wkyuJXM0uN19HnJdPbfU2VvNm9JkskzJ+keOajdsoWNQITY+LG
wRHHZDA71qd7+azlRob1VZ2EUd1BhQCmekyIW7VU5Pi+uFXg0jied9Ssdr9OH7Mj
JR93YEQWzb4e1JetMIBilGsejR20c0fhxFEcBfQZ1eLz2sYCkl6ZfalUUpsTzKQf
IieyTdiPoUy8z2YdyvgoI6va9Iur4SSeMO3euQuvrfz+EYGCW0GGAEWbt8lKuymR
CfFGc7q4aMp3+4sAB+N0jGLmAzuw6UjJ/rGDRHPVMLXwpkAaKOabUZ9GjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8fn+sZL7ejvBqw6KXY7sJxgBuBMB8GA1UdIwQY
MBaAFPUxTB+eEZPCAly2crUjVzl40lTZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8xZDA5ZTYtYWU3Yi00MzRjLTk5ZWMt
NzM4Yzc0OTJmNzY4LzEvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8xZDA5ZTYtYWU3Yi00MzRjLTk5ZWMtNzM4Yzc0OTJmNzY4
LzEvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgDr6BzF
cHuLfPvfdlOoHsKtS6U3FLC+UuLsvbfOC7Mh6U2H3dxsehsvOfGb/a91yYWJhV4R
6EXl52p8Hk8vT/C9OQ2WkQtpOXosMRJCCBxnIWcFLuUILxRyUsgDsneAqqiL6cOn
PnTPSqtlru+gAIwhVPqdjli0hEv41J0Et/7u/J2uEoKyOHAJ+Ban/ezol8gUFV4n
tov6OnZz6SETagbHUa5A60O4iRvvPrEoXIi7Ne6DHLoPuGA+EHMTKcnmIaxlu/f2
haPAr1AgOotxHx997/FFE+PBLswRnS+O4BnSH63qdM9NNXl039r5mBLoQsn9SVns
eTk4H6IK6YZgBQ==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:34 2026 by rpki-client