Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: NLtJqtenDptF4sb16aLdZ+KunCAGH+R/bPmotnp7zBI=
Subject key identifier: 18:CD:73:49:C6:3C:E2:74:C1:40:48:62:72:1C:61:06:3E:5E:DF:9B
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 019F13419BBF7CDE87E11FF75AE8D976D108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 0B01
Signing time: Mon 29 Jun 2026 12:01:34 +0000
Manifest this update: Mon 29 Jun 2026 12:01:34 +0000
Manifest next update: Tue 30 Jun 2026 12:01:34 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: 0mQphZLQ0lyW6CcR06ceIWs9jflaLFdNouZhEVNG2ZM=)
2: BcFq67gt-RKOvupOqp8wx9B2E4U.roa (hash: by17HKxYLGTRqXTNejn/CxcA/Hu0QDCXw3xviknWPjI=)
3: vlpxtqpjpQxPD5I7h8_GagReIJQ.roa (hash: TD2wCDrzMV1HjU3in4n/cQ4TcCR7y/LDU6bd62cCGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:41:9b:bf:7c:de:87:e1:1f:f7:5a:e8:d9:76:d1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Jun 29 12:01:34 2026 GMT
Not After : Jun 30 12:01:34 2026 GMT
Subject: CN=18cd7349c63ce274c1404862721c61063e5edf9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:27:1e:18:c2:b6:82:b5:fd:89:4d:cf:9a:
5c:e9:52:12:5f:a9:31:58:74:c7:dc:8e:81:32:c0:
81:11:72:95:cd:88:0b:22:00:c9:30:9c:c7:2a:fb:
c7:87:c1:68:17:1c:f4:ca:6e:9e:94:bb:c7:20:03:
9e:70:f5:7b:d1:51:5c:67:e3:ff:0a:d0:e7:4e:3c:
ac:e7:12:9a:30:d6:4f:0c:ce:19:bc:1f:fe:38:6b:
e4:59:2c:04:80:04:9f:3b:cd:79:ad:13:82:3a:54:
8e:5a:20:67:f1:33:0f:7e:10:42:a7:6e:bb:ef:82:
1d:26:3b:29:bb:14:72:14:ce:31:e5:5b:0d:4a:4c:
56:d9:1a:8e:73:21:2d:7e:13:ed:22:56:a0:37:47:
42:57:d5:bf:75:f6:a0:b0:11:b6:2a:bf:ba:28:eb:
16:5f:2a:4a:c7:c0:92:08:3d:f2:cd:8f:38:4b:50:
71:d6:77:06:62:0d:8d:8b:9d:d6:5d:fa:f3:a3:c7:
79:b2:92:64:a6:b0:59:f2:b0:18:0b:aa:09:99:93:
90:b1:1a:8e:72:27:3a:22:22:2d:d7:5c:51:fe:d5:
2a:ef:38:4f:6c:60:d3:79:e9:6e:75:6f:9a:79:8e:
f2:e6:17:89:67:b2:bb:fb:40:c3:91:e2:e0:0f:41:
cc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CD:73:49:C6:3C:E2:74:C1:40:48:62:72:1C:61:06:3E:5E:DF:9B
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:75:ab:25:87:47:60:84:79:c5:77:4e:74:5a:cb:d0:2b:7e:
35:df:c4:8c:1b:ad:26:3c:0e:85:94:90:37:1b:6f:23:ea:68:
e6:26:ea:61:f5:bd:77:3b:1c:a5:e5:a7:ac:22:3e:16:30:f0:
7f:6d:a4:76:f1:e0:57:a6:d1:53:93:8c:2c:f6:63:28:4b:8c:
72:b3:71:a9:34:48:96:5d:e2:e3:fa:fb:8e:fd:f2:a5:ee:8c:
72:86:7e:3f:4e:cf:4a:00:c1:55:d6:c9:97:c4:63:dd:79:b7:
9a:5d:b2:d9:e6:0f:68:8b:f1:c8:7b:1a:48:d2:c6:7a:5e:83:
1c:36:07:fe:b7:8b:f5:1e:c1:19:8d:4f:55:1c:6f:1b:b4:4a:
48:06:2d:a8:f9:7c:1a:d0:ba:96:ae:cf:ac:9d:50:cb:ba:71:
72:54:a9:71:7a:ea:97:7b:dc:87:2d:76:16:45:c0:f6:13:85:
13:0c:41:fd:c0:48:35:0e:a4:84:a2:02:d2:60:cb:61:15:3c:
da:12:1a:ce:4e:94:53:4e:07:08:4d:d6:40:74:40:c2:33:44:
f3:66:54:ab:24:1d:27:d3:6c:55:0c:a9:64:59:67:26:ca:c1:
93:24:a5:57:d0:f0:d0:81:24:26:77:4d:ab:91:8f:e3:7e:9d:
04:90:4c:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8TQZu/fN6H4R/3WujZdtEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjY3YTQwY2Y1ZTg1YzJkMmI2NTU4YjQwOTlhZjEyNWQx
MDUwZWUwHhcNMjYwNjI5MTIwMTM0WhcNMjYwNjMwMTIwMTM0WjAzMTEwLwYDVQQD
EygxOGNkNzM0OWM2M2NlMjc0YzE0MDQ4NjI3MjFjNjEwNjNlNWVkZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWknHhjCtoK1/YlNz5pc6VISX6kx
WHTH3I6BMsCBEXKVzYgLIgDJMJzHKvvHh8FoFxz0ym6elLvHIAOecPV70VFcZ+P/
CtDnTjys5xKaMNZPDM4ZvB/+OGvkWSwEgASfO815rROCOlSOWiBn8TMPfhBCp267
74IdJjspuxRyFM4x5VsNSkxW2RqOcyEtfhPtIlagN0dCV9W/dfagsBG2Kr+6KOsW
XypKx8CSCD3yzY84S1Bx1ncGYg2Ni53WXfrzo8d5spJkprBZ8rAYC6oJmZOQsRqO
cic6IiIt11xR/tUq7zhPbGDTeeludW+aeY7y5heJZ7K7+0DDkeLgD0HMRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjNc0nGPOJ0wUBIYnIcYQY+Xt+bMB8GA1UdIwQY
MBaAFPT2ekDPXoXC0rZVi0CZrxJdEFDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83MDdiNGYtNmNkNi00ODhhLThkZWYt
M2E1YzcxZjg2ODIxLzEvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83MDdiNGYtNmNkNi00ODhhLThkZWYtM2E1YzcxZjg2ODIx
LzEvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXWrJYdH
YIR5xXdOdFrL0Ct+Nd/EjButJjwOhZSQNxtvI+po5ibqYfW9dzscpeWnrCI+FjDw
f22kdvHgV6bRU5OMLPZjKEuMcrNxqTRIll3i4/r7jv3ype6McoZ+P07PSgDBVdbJ
l8Rj3Xm3ml2y2eYPaIvxyHsaSNLGel6DHDYH/reL9R7BGY1PVRxvG7RKSAYtqPl8
GtC6lq7PrJ1Qy7pxclSpcXrql3vchy12FkXA9hOFEwxB/cBINQ6khKIC0mDLYRU8
2hIazk6UU04HCE3WQHRAwjNE82ZUqyQdJ9NsVQypZFlnJsrBkySlV9Dw0IEkJndN
q5GP436dBJBMyA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 15:40:58 2026 by rpki-client