Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
File: f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft (raw, json)
Hash identifier: HLm2eYI9cqQ73LGj2T+ZMuRr067RutHl2Dxbq07f8Ng=
Subject key identifier: 1C:B2:21:EB:2D:D1:4C:79:25:89:5C:71:DF:FB:B0:5C:15:63:92:50
Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
Certificate issuer: /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Certificate serial: 019EB84594EB48E48B93F3854C27CB9874CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
Manifest number: 14DE
Signing time: Thu 11 Jun 2026 20:00:28 +0000
Manifest this update: Thu 11 Jun 2026 20:00:28 +0000
Manifest next update: Fri 12 Jun 2026 20:00:28 +0000
Files and hashes: 1: G6WXhyvVtMAy_hDzbTynLKDz6nI.roa (hash: hU50SCH6HViVYgZI7FoCwUv3dNNmWkj31LMFtbg1FRw=)
2: f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl (hash: fyGDU97ZZzdYHwt2+nOQHxDWyvYXnvcN77NQglJPmXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:94:eb:48:e4:8b:93:f3:85:4c:27:cb:98:74:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Validity
Not Before: Jun 11 20:00:28 2026 GMT
Not After : Jun 12 20:00:28 2026 GMT
Subject: CN=1cb221eb2dd14c7925895c71dffbb05c15639250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a9:b0:6c:c1:da:62:f8:a4:3b:d5:74:df:a5:
46:85:d8:33:27:52:46:b4:bc:b5:e8:ed:45:df:48:
fb:24:29:7a:96:d7:b2:7b:22:07:18:3e:19:7a:09:
f9:8b:a2:71:18:6d:f5:f8:ff:58:63:84:5a:44:cc:
21:3b:9e:1d:ed:ef:c1:3e:3b:f2:dc:38:5c:91:81:
50:9b:e7:ad:d9:5b:ad:ac:37:f8:6d:82:ff:80:f8:
eb:fe:dc:14:2e:75:a9:4a:e7:5d:c4:b1:71:6d:47:
4c:e3:21:24:82:95:8f:09:8e:2f:95:fc:1e:8f:92:
65:a9:5f:7d:de:df:1a:7e:ef:6e:f7:eb:16:4f:44:
fd:0e:a4:ac:bf:58:71:19:99:c4:84:6d:7b:78:41:
25:9b:6e:e6:a1:bc:d6:71:70:53:37:a6:fc:3a:54:
63:7e:e7:20:52:21:18:53:bb:3f:fd:a4:00:82:dc:
06:4c:41:99:e6:80:11:31:0f:2d:5b:da:2d:f6:05:
7a:4a:3d:4f:8a:c0:d8:7b:60:96:ce:49:e7:a5:6c:
09:9f:58:6c:21:c5:1c:01:f7:20:0c:6c:e1:b9:da:
bd:43:10:af:1f:56:1a:e7:95:85:2b:85:0f:6b:5e:
ef:d8:88:e4:80:b7:1d:e8:cd:e5:e5:66:86:3a:c8:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B2:21:EB:2D:D1:4C:79:25:89:5C:71:DF:FB:B0:5C:15:63:92:50
X509v3 Authority Key Identifier:
keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bc:e9:cf:a6:04:49:98:de:30:92:ba:56:df:a4:ce:15:4d:
ec:cf:ce:03:21:84:18:f7:99:b1:18:0e:ba:84:ac:de:c5:ea:
61:de:57:c6:0b:1b:61:9a:bd:1a:ba:8a:8b:03:3c:9d:d2:bd:
92:0f:da:3a:5a:9f:aa:d9:82:64:23:d2:4c:3a:d5:48:fa:26:
1b:d1:35:17:b1:28:2a:d0:a4:c3:e1:f1:8e:33:a4:33:12:90:
77:15:02:2c:99:92:25:8d:02:0d:6d:4d:13:2b:96:2e:35:a9:
05:42:ed:12:7f:1e:52:d6:8a:7e:a0:e7:f0:c4:f4:b3:c5:83:
80:e8:47:02:64:49:de:36:6c:20:c0:aa:2d:ce:bc:9b:86:eb:
e5:f5:7f:17:5b:10:f3:22:3e:aa:3b:e1:3c:86:3e:5b:8f:12:
47:fa:f0:70:55:ca:e1:01:5c:bd:19:00:51:eb:d0:50:43:2b:
8d:12:a3:86:fa:be:53:7d:45:7c:67:47:bf:5a:24:ec:eb:96:
dc:97:30:fb:e8:bd:2c:ff:3f:57:b5:5f:ef:3b:48:ca:10:88:
89:2b:51:a2:33:07:06:e6:15:6b:51:fe:99:f4:7f:45:55:10:
bd:5f:f6:a0:79:ab:1b:05:7a:1c:48:e2:ce:1f:fd:ef:3c:fb:
69:c3:37:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64RZTrSOSLk/OFTCfLmHTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZDYyZTQyYzA4ZTE2MDFjNDU3MWUwZDg4YTM0OWEwNTA5
ZGVhNWUwHhcNMjYwNjExMjAwMDI4WhcNMjYwNjEyMjAwMDI4WjAzMTEwLwYDVQQD
EygxY2IyMjFlYjJkZDE0Yzc5MjU4OTVjNzFkZmZiYjA1YzE1NjM5MjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqmwbMHaYvikO9V036VGhdgzJ1JG
tLy16O1F30j7JCl6lteyeyIHGD4Zegn5i6JxGG31+P9YY4RaRMwhO54d7e/BPjvy
3DhckYFQm+et2VutrDf4bYL/gPjr/twULnWpSuddxLFxbUdM4yEkgpWPCY4vlfwe
j5JlqV993t8afu9u9+sWT0T9DqSsv1hxGZnEhG17eEElm27mobzWcXBTN6b8OlRj
fucgUiEYU7s//aQAgtwGTEGZ5oARMQ8tW9ot9gV6Sj1PisDYe2CWzknnpWwJn1hs
IcUcAfcgDGzhudq9QxCvH1Ya55WFK4UPa17v2IjkgLcd6M3l5WaGOsio9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByyIest0Ux5JYlccd/7sFwVY5JQMB8GA1UdIwQY
MBaAFH/WLkLAjhYBxFceDYijSaBQnepeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjlZdVFzQ09GZ0hFVng0TmlLTkpvRkNkNmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iOTM0ZWUtYzRiYS00MzkxLTgwYjAt
ZTc1YTVlYTg5ZmQxLzEvZjlZdVFzQ09GZ0hFVng0TmlLTkpvRkNkNmw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iOTM0ZWUtYzRiYS00MzkxLTgwYjAtZTc1YTVlYTg5ZmQx
LzEvZjlZdVFzQ09GZ0hFVng0TmlLTkpvRkNkNmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7zpz6YE
SZjeMJK6Vt+kzhVN7M/OAyGEGPeZsRgOuoSs3sXqYd5XxgsbYZq9GrqKiwM8ndK9
kg/aOlqfqtmCZCPSTDrVSPomG9E1F7EoKtCkw+HxjjOkMxKQdxUCLJmSJY0CDW1N
EyuWLjWpBULtEn8eUtaKfqDn8MT0s8WDgOhHAmRJ3jZsIMCqLc68m4br5fV/F1sQ
8yI+qjvhPIY+W48SR/rwcFXK4QFcvRkAUevQUEMrjRKjhvq+U31FfGdHv1ok7OuW
3Jcw++i9LP8/V7Vf7ztIyhCIiStRojMHBuYVa1H+mfR/RVUQvV/2oHmrGwV6HEji
zh/97zz7acM3sQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:51:20 2026 by rpki-client