Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
File: 9ONr1L84JXQMkFpnzcFrMBhyqnE.mft (raw, json)
Hash identifier: LknORJPqd5s9lDG6PUQcEvs2AwHItRX/lL3/e6wDQCo=
Subject key identifier: 0A:FD:17:28:4C:BF:DA:9E:B8:B7:0D:76:4D:19:37:4A:9A:A9:0E:66
Authority key identifier: F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
Certificate issuer: /CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Certificate serial: 019E28216187D25B038A0C47985E9C455B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
Manifest number: 42
Signing time: Thu 14 May 2026 20:15:36 +0000
Manifest this update: Thu 14 May 2026 20:15:36 +0000
Manifest next update: Fri 15 May 2026 20:15:36 +0000
Files and hashes: 1: 9ONr1L84JXQMkFpnzcFrMBhyqnE.crl (hash: cCd89prunlnlIrrgKnSGnoB1dTd40vnFTb2J57hNpWM=)
2: 9ucYMXzD3vMFsgmHtXsfLM2eUok.roa (hash: 2Afj0FJ5MpmIC7C8wUu5YNyOvGucTv6qksj+PJFjUto=)
3: LLDfBKtlCeW3eI7057StcwRGUvc.asa (hash: FU+roj6w95slO9NnUEl8Tx6t8gdfs68bD1W8S1h/R64=)
4: Vr9B-zHNKLHeB8Xx57Kq7jsYtHM.roa (hash: OzngqieZsxcHJ4EZWwYuegusT/oah57Gh4sMFZUQ7jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 20:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:21:61:87:d2:5b:03:8a:0c:47:98:5e:9c:45:5b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Validity
Not Before: May 14 20:15:36 2026 GMT
Not After : May 15 20:15:36 2026 GMT
Subject: CN=0afd17284cbfda9eb8b70d764d19374a9aa90e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:4b:05:97:96:d0:b3:2a:51:4a:18:eb:ee:
ff:8d:9e:22:fd:af:53:21:74:d0:53:3e:f3:aa:84:
8b:26:43:27:99:63:b0:99:47:3c:fc:b8:af:be:e2:
16:ee:23:a3:ad:f1:b6:af:5e:bc:98:99:6c:6f:2b:
27:fd:b1:46:24:ed:f7:39:84:9a:99:7a:57:f9:0c:
f0:61:3a:d3:ed:be:1a:0e:1a:9a:1d:ef:26:3a:24:
99:47:4c:b0:06:3c:ba:49:ef:1b:7e:fa:67:e2:83:
5a:73:63:b8:ac:5a:78:d4:22:32:1b:4d:73:ec:88:
29:24:29:9c:8b:d9:0e:19:57:4a:72:aa:5e:a1:72:
77:aa:de:e3:21:20:3f:ee:e9:2c:df:df:9f:62:2f:
6c:01:e8:90:14:7b:15:13:78:b6:7b:93:8f:fa:7a:
50:8a:b8:7e:af:47:45:2f:c0:a7:c2:39:2d:7f:e9:
32:a1:99:ef:cb:29:ce:ef:0c:33:0d:1d:1b:42:51:
87:06:1c:04:30:69:a7:3f:40:bd:ae:03:08:30:20:
85:e1:d7:75:ca:a3:70:fc:a2:15:c9:b2:de:2c:8d:
8e:1c:e5:dd:62:85:01:0b:d5:25:75:e7:b9:cb:d6:
30:fb:5f:49:ce:9d:56:82:33:36:d4:b9:69:32:72:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FD:17:28:4C:BF:DA:9E:B8:B7:0D:76:4D:19:37:4A:9A:A9:0E:66
X509v3 Authority Key Identifier:
keyid:F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e8:28:ab:ae:23:46:30:db:27:45:5d:61:e8:3a:4f:aa:26:
3c:98:80:a6:fe:5e:52:a5:7c:5e:20:a0:c8:1b:fe:33:68:24:
a3:55:93:8c:e1:14:a5:26:39:d1:82:52:32:c4:bf:79:3d:0d:
76:d5:d6:7c:40:b4:c5:b7:93:88:aa:45:b8:b5:23:0b:2e:e5:
4c:21:ab:28:e4:2f:a0:19:d3:43:03:fb:ff:68:1b:0f:c0:85:
34:5a:bc:ff:d2:2e:6b:92:fb:65:10:3e:9f:fd:49:fe:7f:5d:
0f:5b:8e:83:88:5c:44:fa:d5:a1:f9:72:80:10:bc:c9:cd:e7:
92:e5:23:4e:e0:20:80:b3:45:d3:ef:46:90:6d:30:a0:21:fc:
af:cb:b3:d6:f2:60:9e:bf:2e:f2:25:22:f4:69:0b:82:0a:06:
4e:6f:8d:40:14:49:bd:29:11:e3:0b:d3:55:c8:6f:75:07:25:
1a:fc:47:d9:7a:12:99:6e:90:0f:f6:52:57:59:50:21:b7:cf:
c5:51:3e:db:cb:d7:a9:5f:b4:03:87:8a:36:24:61:1e:e0:e2:
ff:3c:28:b1:79:14:11:ea:92:c9:7e:40:09:d7:6c:95:55:0b:
c7:5e:d7:a4:e6:21:8e:0f:4e:66:c7:ae:e9:95:0d:f9:0b:3a:
f2:36:f4:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4oIWGH0lsDigxHmF6cRVsNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTM2YmQ0YmYzODI1NzQwYzkwNWE2N2NkYzE2YjMwMTg3
MmFhNzEwHhcNMjYwNTE0MjAxNTM2WhcNMjYwNTE1MjAxNTM2WjAzMTEwLwYDVQQD
EygwYWZkMTcyODRjYmZkYTllYjhiNzBkNzY0ZDE5Mzc0YTlhYTkwZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp75LBZeW0LMqUUoY6+7/jZ4i/a9T
IXTQUz7zqoSLJkMnmWOwmUc8/LivvuIW7iOjrfG2r168mJlsbysn/bFGJO33OYSa
mXpX+QzwYTrT7b4aDhqaHe8mOiSZR0ywBjy6Se8bfvpn4oNac2O4rFp41CIyG01z
7IgpJCmci9kOGVdKcqpeoXJ3qt7jISA/7uks39+fYi9sAeiQFHsVE3i2e5OP+npQ
irh+r0dFL8Cnwjktf+kyoZnvyynO7wwzDR0bQlGHBhwEMGmnP0C9rgMIMCCF4dd1
yqNw/KIVybLeLI2OHOXdYoUBC9Uldee5y9Yw+19Jzp1WgjM21LlpMnIlkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAr9FyhMv9qeuLcNdk0ZN0qaqQ5mMB8GA1UdIwQY
MBaAFPTja9S/OCV0DJBaZ83BazAYcqpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9OcjFMODRKWFFNa0ZwbnpjRnJNQmh5cW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80ZjgxMjQtNDE0Mi00ZGQ1LThjNjIt
MDdjOGI1YTk4NWJhLzEvOU9OcjFMODRKWFFNa0ZwbnpjRnJNQmh5cW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80ZjgxMjQtNDE0Mi00ZGQ1LThjNjItMDdjOGI1YTk4NWJh
LzEvOU9OcjFMODRKWFFNa0ZwbnpjRnJNQmh5cW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlegoq64j
RjDbJ0VdYeg6T6omPJiApv5eUqV8XiCgyBv+M2gko1WTjOEUpSY50YJSMsS/eT0N
dtXWfEC0xbeTiKpFuLUjCy7lTCGrKOQvoBnTQwP7/2gbD8CFNFq8/9Iua5L7ZRA+
n/1J/n9dD1uOg4hcRPrVoflygBC8yc3nkuUjTuAggLNF0+9GkG0woCH8r8uz1vJg
nr8u8iUi9GkLggoGTm+NQBRJvSkR4wvTVchvdQclGvxH2XoSmW6QD/ZSV1lQIbfP
xVE+28vXqV+0A4eKNiRhHuDi/zwosXkUEeqSyX5ACddslVULx17XpOYhjg9OZseu
6ZUN+Qs68jb0OA==
-----END CERTIFICATE-----
Generated at Fri May 15 06:14:51 2026 by rpki-client