Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
File: 9aUA85diOrHVYASDVGf8zz0KOw8.mft (raw, json)
Hash identifier: H+n4c9yN8hKbG3OTHCFh+grxF3MzID+Wdff/ULXtOuY=
Subject key identifier: 17:EE:23:B0:59:56:70:76:DE:09:9E:13:58:0B:5C:9D:29:4F:54:E2
Authority key identifier: F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
Certificate issuer: /CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Certificate serial: 019E30049B9B60C3358A70CBECDE4CBA4F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
Manifest number: 0FA9
Signing time: Sat 16 May 2026 09:01:08 +0000
Manifest this update: Sat 16 May 2026 09:01:08 +0000
Manifest next update: Sun 17 May 2026 09:01:08 +0000
Files and hashes: 1: 9aUA85diOrHVYASDVGf8zz0KOw8.crl (hash: Qxh9j18LOyCJcfhIGYqo01AmbH1AhiMyZK61UTSruVA=)
2: TgwXo42orCf9sT1fT8jrPa56jeU.roa (hash: GfcY69aJuiib4Ntp1/VS83/ai4i4eQHgc9DzBgB534U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:9b:9b:60:c3:35:8a:70:cb:ec:de:4c:ba:4f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Validity
Not Before: May 16 09:01:08 2026 GMT
Not After : May 17 09:01:08 2026 GMT
Subject: CN=17ee23b059567076de099e13580b5c9d294f54e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:ac:c7:34:9e:aa:0a:39:a2:a9:7e:11:00:
f1:ae:64:4a:72:1f:a2:3f:ea:48:f8:c0:35:26:2c:
11:9d:05:12:a4:0d:59:ae:ae:19:f6:f4:8c:e3:68:
19:a3:d6:5f:36:c9:38:1e:34:6b:b8:89:b2:9c:a4:
21:ac:7e:cc:f2:20:8f:59:a6:95:04:a4:2b:b6:a8:
7b:3b:2a:2c:cd:2c:1e:50:5d:68:b6:7d:09:09:5b:
55:9a:eb:16:6b:0c:07:72:33:ea:5c:59:4d:16:c0:
9a:e1:d1:b6:8e:33:f0:1b:14:a6:52:2a:84:bd:90:
54:0f:f7:44:cd:5b:a6:4b:9a:6b:35:6e:9e:6d:b1:
77:0d:6f:41:2f:29:eb:a8:70:84:0a:eb:b4:29:42:
3b:8c:85:79:40:3b:1b:3b:4e:4a:36:96:6b:96:2b:
4d:d1:95:98:7b:1a:e7:ec:12:f6:bf:73:45:71:da:
a9:1b:f4:e0:32:b1:b4:59:34:ff:b1:bf:8b:19:2d:
35:54:64:6e:74:34:80:85:c2:f9:fc:8e:1a:ee:49:
0c:03:5c:26:9e:4e:f1:d0:9f:a3:e3:aa:84:ae:f0:
33:69:8a:e0:ef:26:ef:c3:b8:63:1c:67:cc:5e:4f:
9e:aa:e1:28:d7:d8:ae:24:36:54:11:95:23:d7:5f:
62:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EE:23:B0:59:56:70:76:DE:09:9E:13:58:0B:5C:9D:29:4F:54:E2
X509v3 Authority Key Identifier:
keyid:F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c3:dd:43:9a:00:99:74:23:46:d3:60:c7:c7:f6:e3:1d:dd:
92:d0:32:c7:f0:6e:9e:f0:33:13:54:39:29:3d:94:2f:61:94:
66:e6:ea:3d:8d:3b:46:07:99:2e:fc:39:e4:f7:0f:00:ed:c6:
59:34:34:86:82:8a:f0:bc:9d:bf:46:76:2e:3b:78:ef:56:e6:
a9:73:ba:ca:da:df:e7:73:06:3c:84:68:e4:86:33:9a:b5:91:
0f:cd:b3:53:e8:c8:2c:2a:fb:01:33:f4:43:2a:63:88:ed:fd:
cf:1f:4c:24:28:17:82:80:be:16:12:e2:c8:15:72:e4:8b:33:
d3:43:4e:b5:ad:57:88:98:99:46:40:4b:54:bb:9b:9c:09:6e:
2d:06:e0:2a:53:e6:b7:20:50:df:c9:34:f0:07:37:73:7c:8e:
c3:41:e0:64:0b:58:75:18:95:e5:1b:18:2b:e5:fe:64:4e:99:
d9:9c:93:6c:a9:de:e0:15:78:04:a8:47:0e:2f:a7:89:c9:49:
91:e1:03:f1:ee:9a:81:5a:41:12:ca:5f:16:72:32:f2:51:8f:
3c:85:f3:45:e6:0f:54:a6:c0:6e:0e:b7:03:e5:99:e2:25:2f:
3f:6c:c6:ca:5b:b9:3e:7b:46:35:d6:60:7a:74:c9:3f:93:34:
a3:2a:90:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBJubYMM1inDL7N5Muk9iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YTUwMGYzOTc2MjNhYjFkNTYwMDQ4MzU0NjdmY2NmM2Qw
YTNiMGYwHhcNMjYwNTE2MDkwMTA4WhcNMjYwNTE3MDkwMTA4WjAzMTEwLwYDVQQD
EygxN2VlMjNiMDU5NTY3MDc2ZGUwOTllMTM1ODBiNWM5ZDI5NGY1NGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwasxzSeqgo5oql+EQDxrmRKch+i
P+pI+MA1JiwRnQUSpA1Zrq4Z9vSM42gZo9ZfNsk4HjRruImynKQhrH7M8iCPWaaV
BKQrtqh7OyoszSweUF1otn0JCVtVmusWawwHcjPqXFlNFsCa4dG2jjPwGxSmUiqE
vZBUD/dEzVumS5prNW6ebbF3DW9BLynrqHCECuu0KUI7jIV5QDsbO05KNpZrlitN
0ZWYexrn7BL2v3NFcdqpG/TgMrG0WTT/sb+LGS01VGRudDSAhcL5/I4a7kkMA1wm
nk7x0J+j46qErvAzaYrg7ybvw7hjHGfMXk+equEo19iuJDZUEZUj119iGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfuI7BZVnB23gmeE1gLXJ0pT1TiMB8GA1UdIwQY
MBaAFPWlAPOXYjqx1WAEg1Rn/M89CjsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWFVQTg1ZGlPckhWWUFTRFZHZjh6ejBLT3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hNzYwZjMtMDA2Mi00Mzc0LTgyOTAt
ZTc2ZmQ5YzlkYzhjLzEvOWFVQTg1ZGlPckhWWUFTRFZHZjh6ejBLT3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9hNzYwZjMtMDA2Mi00Mzc0LTgyOTAtZTc2ZmQ5YzlkYzhj
LzEvOWFVQTg1ZGlPckhWWUFTRFZHZjh6ejBLT3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcPdQ5oA
mXQjRtNgx8f24x3dktAyx/BunvAzE1Q5KT2UL2GUZubqPY07RgeZLvw55PcPAO3G
WTQ0hoKK8Lydv0Z2Ljt471bmqXO6ytrf53MGPIRo5IYzmrWRD82zU+jILCr7ATP0
QypjiO39zx9MJCgXgoC+FhLiyBVy5Isz00NOta1XiJiZRkBLVLubnAluLQbgKlPm
tyBQ38k08Ac3c3yOw0HgZAtYdRiV5RsYK+X+ZE6Z2ZyTbKne4BV4BKhHDi+niclJ
keED8e6agVpBEspfFnIy8lGPPIXzReYPVKbAbg63A+WZ4iUvP2zGylu5PntGNdZg
enTJP5M0oyqQOg==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:54 2026 by rpki-client