Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
File: 9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json)
Hash identifier: H7f25fPCZQgab+pu4G0CpLTPWB8UVHItJ6f/86cdWck=
Subject key identifier: 51:D2:BA:63:01:AF:C5:16:81:45:90:E8:D5:47:51:49:08:56:87:15
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial: 019F178C14C0568A48E89B9FC292B75D1658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 08:01:24 +0000
Manifest this update: Tue 30 Jun 2026 08:01:24 +0000
Manifest next update: Wed 01 Jul 2026 08:01:24 +0000
Files and hashes: 1: 6WW-5nEcLXyYysohxbswx53KUC4.roa (hash: YGye3VGtaY9dIe257yt+Ywof1sTn+vKBOCXTqKl9UZo=)
2: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: fp00NqYBiHoYqwvjNgmo8diHYyifXCHNjoGmtWcsdQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8c:14:c0:56:8a:48:e8:9b:9f:c2:92:b7:5d:16:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Validity
Not Before: Jun 30 08:01:24 2026 GMT
Not After : Jul 1 08:01:24 2026 GMT
Subject: CN=51d2ba6301afc516814590e8d547514908568715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:18:b0:9c:7c:fa:f5:6b:39:73:91:cb:a1:
a5:b4:b8:bc:f5:d7:42:10:08:b8:5e:9c:cd:ac:51:
c1:c1:4d:f2:5f:f5:d8:5c:78:cf:4d:89:7f:a8:64:
52:7d:f8:bf:4e:78:c6:6f:47:08:c4:89:f4:0e:cb:
55:e4:94:40:84:e4:0e:a5:72:d3:f6:a3:ab:c6:c3:
cf:41:cb:0d:1d:a7:53:ab:6f:31:f4:70:29:36:26:
7f:3a:c2:dd:b6:f6:09:75:e3:78:60:5e:f9:27:82:
9f:54:98:cd:25:9f:30:2c:40:31:70:6f:fd:d2:38:
df:a0:7b:c1:d7:fc:5c:49:ab:38:d9:31:db:2c:40:
31:90:c4:c9:6b:bc:78:25:16:6f:8c:69:98:40:3c:
c0:35:45:ec:1b:b4:ea:fe:02:82:e2:d5:9e:3a:e0:
1c:02:6d:5c:93:8a:0b:8a:cb:43:a0:53:6b:76:b1:
6d:b5:ae:9f:0b:f6:a6:77:27:88:5b:2c:17:fc:3e:
37:70:4b:e3:78:ca:94:5e:84:d6:2f:3d:76:64:72:
93:5d:f1:83:ee:46:d6:82:ea:c3:36:02:1e:9b:1b:
8e:00:75:31:8c:8e:36:9d:f3:05:e5:c7:99:1e:44:
5f:a4:f4:93:8d:e0:98:d7:02:ac:28:ae:e3:1c:85:
12:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D2:BA:63:01:AF:C5:16:81:45:90:E8:D5:47:51:49:08:56:87:15
X509v3 Authority Key Identifier:
keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:50:cb:a6:df:61:2c:4f:30:10:c7:7e:54:66:e3:3a:bf:d1:
7c:7f:7c:c1:57:07:0a:0c:04:21:50:15:06:19:f1:76:92:fd:
88:96:f8:4a:d6:55:3c:37:47:af:a5:43:49:ea:ca:cc:bc:a2:
51:bf:11:b5:15:b4:ee:93:5e:cb:e0:df:7d:9e:b7:01:4c:95:
fe:b5:d4:11:b8:74:6d:9b:4a:ab:01:c3:91:4d:0b:06:7f:8f:
84:78:36:04:d8:6a:77:c7:79:ce:8c:23:9e:71:3d:f8:34:8c:
83:f6:19:73:1f:a8:fe:45:45:ba:05:20:35:72:ee:4b:8b:89:
ee:79:de:83:f7:6d:77:44:ea:dc:73:e0:dc:5f:35:c8:86:c1:
8d:3d:e1:c5:f7:06:22:44:93:11:47:2e:8c:63:67:e6:0a:03:
63:8e:48:a2:37:70:39:18:f1:c7:de:d6:21:8e:6b:2b:19:87:
dc:b6:55:4a:7b:37:f4:9d:9a:2b:89:66:8f:28:f0:9d:34:6c:
89:e0:f4:73:04:15:39:4c:d5:8c:e6:e9:a3:59:2e:86:b4:94:
da:a7:2c:26:85:74:06:09:46:d9:2f:43:98:94:75:f5:eb:17:
2b:a5:52:d0:3b:58:c3:5a:fd:b4:5c:a3:d7:1a:1f:b8:1a:14:
a3:8b:84:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XjBTAVopI6JufwpK3XRZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MmIyZWIyMWY2YjA2NzIxNGRjZmFkYjI5MDI1M2RhNzE3
ZDYyZTMwHhcNMjYwNjMwMDgwMTI0WhcNMjYwNzAxMDgwMTI0WjAzMTEwLwYDVQQD
Eyg1MWQyYmE2MzAxYWZjNTE2ODE0NTkwZThkNTQ3NTE0OTA4NTY4NzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxcYsJx8+vVrOXORy6GltLi89ddC
EAi4XpzNrFHBwU3yX/XYXHjPTYl/qGRSffi/TnjGb0cIxIn0DstV5JRAhOQOpXLT
9qOrxsPPQcsNHadTq28x9HApNiZ/OsLdtvYJdeN4YF75J4KfVJjNJZ8wLEAxcG/9
0jjfoHvB1/xcSas42THbLEAxkMTJa7x4JRZvjGmYQDzANUXsG7Tq/gKC4tWeOuAc
Am1ck4oListDoFNrdrFtta6fC/amdyeIWywX/D43cEvjeMqUXoTWLz12ZHKTXfGD
7kbWgurDNgIemxuOAHUxjI42nfMF5ceZHkRfpPSTjeCY1wKsKK7jHIUSGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHSumMBr8UWgUWQ6NVHUUkIVocVMB8GA1UdIwQY
MBaAFPQrLrIfawZyFNz62ykCU9pxfWLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUNzdXNoOXJCbklVM1ByYktRSlQybkY5WXVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80NzI4ODgtZjE3MC00NjY2LTg1YmQt
MTgzMzU2NTMwMTc3LzEvOUNzdXNoOXJCbklVM1ByYktRSlQybkY5WXVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80NzI4ODgtZjE3MC00NjY2LTg1YmQtMTgzMzU2NTMwMTc3
LzEvOUNzdXNoOXJCbklVM1ByYktRSlQybkY5WXVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1DLpt9h
LE8wEMd+VGbjOr/RfH98wVcHCgwEIVAVBhnxdpL9iJb4StZVPDdHr6VDSerKzLyi
Ub8RtRW07pNey+DffZ63AUyV/rXUEbh0bZtKqwHDkU0LBn+PhHg2BNhqd8d5zowj
nnE9+DSMg/YZcx+o/kVFugUgNXLuS4uJ7nneg/dtd0Tq3HPg3F81yIbBjT3hxfcG
IkSTEUcujGNn5goDY45IojdwORjxx97WIY5rKxmH3LZVSns39J2aK4lmjyjwnTRs
ieD0cwQVOUzVjObpo1kuhrSU2qcsJoV0BglG2S9DmJR19esXK6VS0DtYw1r9tFyj
1xofuBoUo4uEHA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:20:00 2026 by rpki-client