
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier: l8CaAoiYy0YgXHvsLpPiyTq9r7cNHMkcnxQ3bEnzn+Y=
Subject key identifier: F2:53:39:60:2A:C3:21:A9:9A:36:D4:DE:51:81:96:E0:90:77:C6:0B
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer: /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial: 019F189EB2744444B3354F73BCC19426D4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number: 10B5
Signing time: Tue 30 Jun 2026 13:01:21 +0000
Manifest this update: Tue 30 Jun 2026 13:01:21 +0000
Manifest next update: Wed 01 Jul 2026 13:01:21 +0000
Files and hashes: 1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: YBuJuDgHz1gRu3xi6WWP9WrrDtmAYbpT65pkC907ZEU=)
2: ylsyREe54U569Cbya5kHu3je-G4.asa (hash: 6/SDvz7I7Rk9Q9eges7LMoyhQg8zkiVuxvYbU53cDDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:b2:74:44:44:b3:35:4f:73:bc:c1:94:26:d4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
Validity
Not Before: Jun 30 13:01:21 2026 GMT
Not After : Jul 1 13:01:21 2026 GMT
Subject: CN=f25339602ac321a99a36d4de518196e09077c60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:92:d4:e9:d7:20:eb:50:37:16:da:98:46:
64:90:e9:89:83:63:37:6c:31:c8:19:01:6b:21:8b:
c9:68:53:8b:46:9a:0f:de:87:97:d8:65:93:15:bf:
be:52:0c:27:20:37:47:8a:c7:31:d6:e7:c8:33:9a:
fe:94:cd:ce:6f:84:1d:65:ec:dd:ca:26:3f:5f:8e:
ca:a3:67:63:06:ec:98:94:95:d4:c3:32:e4:74:a3:
7c:39:cc:f9:84:7f:a8:1e:55:4a:d7:33:63:12:4c:
0b:13:9f:51:9f:7f:5a:30:99:86:a0:b1:aa:d2:36:
d2:23:0f:c8:06:85:bd:15:17:f5:cb:81:95:14:ef:
f2:c6:3e:e4:83:9d:14:29:d5:e4:b1:2e:fc:07:f3:
c8:fe:d3:7b:49:64:bf:62:98:92:59:f8:27:b3:4e:
b7:f7:d0:4a:76:a4:ed:7c:6c:92:30:82:9c:62:aa:
57:b5:0d:95:a6:09:8c:54:53:61:7c:2d:8a:33:71:
a5:37:a2:04:d0:ca:25:6e:3e:53:1f:c0:2f:3f:ab:
f1:c1:f0:c4:32:dd:0f:7e:4b:95:b0:3d:1f:3b:c6:
78:44:15:b9:df:dc:ec:48:c5:97:1d:65:e9:a1:c6:
50:85:eb:67:58:3e:7e:68:cf:30:08:9b:96:33:5b:
ab:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:53:39:60:2A:C3:21:A9:9A:36:D4:DE:51:81:96:E0:90:77:C6:0B
X509v3 Authority Key Identifier:
keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fa:07:b3:80:fd:a8:13:a5:0b:c4:bd:14:d0:4e:97:d6:7e:
c4:41:96:a3:5f:72:c6:27:58:b5:73:cb:1e:37:04:8e:4f:5d:
88:7d:22:f9:23:c5:13:3e:11:ab:cf:db:60:cd:c5:8a:e9:80:
6b:dd:ae:f4:2e:12:22:64:47:d9:38:3a:db:ed:59:97:32:58:
f7:5a:ce:a0:ee:47:27:75:b3:ae:6f:72:a2:cf:61:f5:5f:2f:
e4:80:73:55:26:00:d0:91:e7:eb:42:f5:a3:39:1c:09:b4:13:
10:b3:49:02:22:83:f3:8a:b9:5d:2f:6c:2e:aa:6c:40:7e:20:
c3:38:2b:39:86:8c:72:b8:90:58:9a:98:f8:c8:02:66:a6:1e:
99:90:5b:c9:3b:19:87:f8:65:e8:17:90:8e:4a:12:0d:07:95:
88:96:b0:96:cd:1a:02:65:6d:26:10:f4:aa:ed:c8:76:42:83:
55:24:00:82:9c:a3:83:30:f7:ce:c7:25:25:11:ef:64:fa:4a:
a1:f8:6c:1f:ba:f4:4d:35:f4:60:a9:e7:c0:a1:d4:d9:5b:90:
1a:03:4b:9c:e2:68:b0:25:5d:85:e2:1d:09:b7:d6:db:21:d7:
a5:e6:4e:52:0c:08:e1:de:7e:63:0b:62:db:6a:17:d8:4e:e6:
26:69:1c:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnrJ0RESzNU9zvMGUJtSpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Nzc2NmYwNzI2Y2ZmODYxOGFmOTY4MjU4ZjViYjIyOWU5
MzdjNmUwHhcNMjYwNjMwMTMwMTIxWhcNMjYwNzAxMTMwMTIxWjAzMTEwLwYDVQQD
EyhmMjUzMzk2MDJhYzMyMWE5OWEzNmQ0ZGU1MTgxOTZlMDkwNzdjNjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb+S1OnXIOtQNxbamEZkkOmJg2M3
bDHIGQFrIYvJaFOLRpoP3oeX2GWTFb++UgwnIDdHiscx1ufIM5r+lM3Ob4QdZezd
yiY/X47Ko2djBuyYlJXUwzLkdKN8Ocz5hH+oHlVK1zNjEkwLE59Rn39aMJmGoLGq
0jbSIw/IBoW9FRf1y4GVFO/yxj7kg50UKdXksS78B/PI/tN7SWS/YpiSWfgns063
99BKdqTtfGySMIKcYqpXtQ2VpgmMVFNhfC2KM3GlN6IE0Molbj5TH8AvP6vxwfDE
Mt0PfkuVsD0fO8Z4RBW539zsSMWXHWXpocZQhetnWD5+aM8wCJuWM1urNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJTOWAqwyGpmjbU3lGBluCQd8YLMB8GA1UdIwQY
MBaAFPV3ZvBybP+GGK+Wglj1uyKek3xuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81OTBiN2YtYmJkMi00NjY2LWI4ZmMt
YTgwMjI0NjA0ZjI1LzEvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81OTBiN2YtYmJkMi00NjY2LWI4ZmMtYTgwMjI0NjA0ZjI1
LzEvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/oHs4D9
qBOlC8S9FNBOl9Z+xEGWo19yxidYtXPLHjcEjk9diH0i+SPFEz4Rq8/bYM3FiumA
a92u9C4SImRH2Tg62+1ZlzJY91rOoO5HJ3Wzrm9yos9h9V8v5IBzVSYA0JHn60L1
ozkcCbQTELNJAiKD84q5XS9sLqpsQH4gwzgrOYaMcriQWJqY+MgCZqYemZBbyTsZ
h/hl6BeQjkoSDQeViJawls0aAmVtJhD0qu3IdkKDVSQAgpyjgzD3zsclJRHvZPpK
ofhsH7r0TTX0YKnnwKHU2VuQGgNLnOJosCVdheIdCbfW2yHXpeZOUgwI4d5+Ywti
22oX2E7mJmkc5Q==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:43 2026 by rpki-client