Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
File: 9RMq2BqEohEhxQRHsgidzl5LI4o.mft (raw, json)
Hash identifier: 1q+GdQCht4+7DKZ8/168lM7b4iqoc0hBasdojEtE9Gw=
Subject key identifier: A3:31:70:81:9C:6A:4B:86:E4:86:FB:5F:69:02:3A:F6:71:A4:52:DA
Authority key identifier: F5:13:2A:D8:1A:84:A2:11:21:C5:04:47:B2:08:9D:CE:5E:4B:23:8A
Certificate issuer: /CN=f5132ad81a84a21121c50447b2089dce5e4b238a
Certificate serial: 019E31F374021DB3A3CB62789149491773ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
Manifest number: 57
Signing time: Sat 16 May 2026 18:01:38 +0000
Manifest this update: Sat 16 May 2026 18:01:38 +0000
Manifest next update: Sun 17 May 2026 18:01:38 +0000
Files and hashes: 1: 810BVakNXZc-eZCkm84wPbkx0zw.roa (hash: 4W7QJcIB5zQfI2eP/65KAZgZifjdrkX8vzWfoESNuGg=)
2: 9RMq2BqEohEhxQRHsgidzl5LI4o.crl (hash: yqgOKluCzYR43yS9zBByizKP4q0UfLjX5s3yKfKsay8=)
3: T7Q4ZInr7nmTwTSXGOP2lYQS6SE.roa (hash: Y1/e/IgPvhokjR0rrttCkxlf/wWiyXtQnZX5Qj+ssXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f3:74:02:1d:b3:a3:cb:62:78:91:49:49:17:73:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5132ad81a84a21121c50447b2089dce5e4b238a
Validity
Not Before: May 16 18:01:38 2026 GMT
Not After : May 17 18:01:38 2026 GMT
Subject: CN=a33170819c6a4b86e486fb5f69023af671a452da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:1d:38:6e:ae:54:a8:ea:80:c4:f6:23:f6:
4f:e0:81:e2:20:15:29:cb:dc:c1:b8:e4:91:d4:76:
30:7b:7e:95:aa:4f:da:cb:2a:1a:57:82:70:00:c3:
45:d6:41:c6:35:2b:e6:d2:47:5c:ae:f5:b2:4e:71:
33:95:cb:ae:93:52:6e:4d:d1:be:a1:ea:dd:e3:84:
3c:49:b6:d7:15:99:07:73:58:0f:cc:1d:03:bd:a9:
e4:97:93:e5:8c:2f:3b:d5:d0:c3:e2:b4:d0:50:52:
7b:b0:d9:ca:00:30:84:9c:d6:ba:60:08:e5:bd:76:
92:7b:c9:6f:45:15:c4:29:22:8e:76:d5:61:64:65:
ee:cd:a1:62:84:7e:59:ee:ed:03:aa:8c:e8:4c:4b:
58:ac:c6:3c:ee:62:77:5b:6c:7c:51:a2:6f:9d:13:
f3:0d:37:30:37:b3:d8:8e:98:c9:54:84:ef:5a:01:
81:41:22:eb:92:5a:b3:b0:f2:c8:53:de:ee:20:06:
bc:96:40:3a:0a:49:d4:43:92:c6:3e:57:73:fb:96:
db:da:a2:60:f0:2a:3c:85:e8:d5:12:bb:1f:84:2f:
b7:33:a1:02:eb:3f:7c:75:b6:74:05:d4:a2:4a:1e:
4a:0d:20:fd:07:c0:a7:33:85:86:54:53:b5:74:39:
fb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:31:70:81:9C:6A:4B:86:E4:86:FB:5F:69:02:3A:F6:71:A4:52:DA
X509v3 Authority Key Identifier:
keyid:F5:13:2A:D8:1A:84:A2:11:21:C5:04:47:B2:08:9D:CE:5E:4B:23:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:43:8e:93:82:4f:7d:48:70:f8:c6:d2:ae:d9:cb:80:b3:9d:
65:06:f2:52:f1:fe:1f:c2:65:a4:b5:83:bb:49:a8:5f:e0:07:
62:c2:7a:90:b8:fa:e3:ca:1f:9e:23:9e:59:5d:b3:d4:3e:6f:
5a:79:fd:93:70:62:1e:f0:64:ae:62:e3:da:e1:22:84:a6:75:
b8:72:2f:d0:d6:b0:b5:99:6f:13:a1:cf:9f:c1:5b:69:30:10:
d5:65:c6:03:02:8f:83:8b:19:94:4a:f4:f3:b4:1f:0b:f6:3f:
ae:55:67:d3:ac:0d:9f:a2:c2:c5:5c:75:19:7d:b8:1e:0e:02:
5e:c5:a5:55:ad:45:5f:27:e8:81:b0:6f:9f:33:2c:5a:97:43:
30:5b:e2:b8:fb:bd:01:be:40:f3:25:4c:67:ff:91:0e:39:f6:
68:a7:7b:d9:ee:31:55:7d:cc:83:69:3d:b2:29:46:7b:84:b9:
f5:96:27:76:30:bf:0d:30:f9:ec:35:05:07:69:bb:62:6e:da:
5b:6d:30:d1:35:5c:86:17:7c:d3:79:b2:a2:5e:44:b5:e2:f1:
ad:30:0a:e4:19:9b:f0:4e:35:b1:c3:31:82:70:49:a9:c8:5c:
d7:21:b6:80:3e:7e:5b:2e:1b:74:16:f1:ac:7b:59:74:3a:95:
38:35:d2:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4x83QCHbOjy2J4kUlJF3PtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTMyYWQ4MWE4NGEyMTEyMWM1MDQ0N2IyMDg5ZGNlNWU0
YjIzOGEwHhcNMjYwNTE2MTgwMTM4WhcNMjYwNTE3MTgwMTM4WjAzMTEwLwYDVQQD
EyhhMzMxNzA4MTljNmE0Yjg2ZTQ4NmZiNWY2OTAyM2FmNjcxYTQ1MmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSYdOG6uVKjqgMT2I/ZP4IHiIBUp
y9zBuOSR1HYwe36Vqk/ayyoaV4JwAMNF1kHGNSvm0kdcrvWyTnEzlcuuk1JuTdG+
oerd44Q8SbbXFZkHc1gPzB0Dvankl5PljC871dDD4rTQUFJ7sNnKADCEnNa6YAjl
vXaSe8lvRRXEKSKOdtVhZGXuzaFihH5Z7u0DqozoTEtYrMY87mJ3W2x8UaJvnRPz
DTcwN7PYjpjJVITvWgGBQSLrklqzsPLIU97uIAa8lkA6CknUQ5LGPldz+5bb2qJg
8Co8hejVErsfhC+3M6EC6z98dbZ0BdSiSh5KDSD9B8CnM4WGVFO1dDn7twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMxcIGcakuG5Ib7X2kCOvZxpFLaMB8GA1UdIwQY
MBaAFPUTKtgahKIRIcUER7IInc5eSyOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJNcTJCcUVvaEVoeFFSSHNnaWR6bDVMSTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85ZThiNGItMDkyMC00ZmM3LTg5NzIt
ZWE4NDFlNjdjNWQ2LzEvOVJNcTJCcUVvaEVoeFFSSHNnaWR6bDVMSTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85ZThiNGItMDkyMC00ZmM3LTg5NzItZWE4NDFlNjdjNWQ2
LzEvOVJNcTJCcUVvaEVoeFFSSHNnaWR6bDVMSTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0OOk4JP
fUhw+MbSrtnLgLOdZQbyUvH+H8JlpLWDu0moX+AHYsJ6kLj648ofniOeWV2z1D5v
Wnn9k3BiHvBkrmLj2uEihKZ1uHIv0NawtZlvE6HPn8FbaTAQ1WXGAwKPg4sZlEr0
87QfC/Y/rlVn06wNn6LCxVx1GX24Hg4CXsWlVa1FXyfogbBvnzMsWpdDMFviuPu9
Ab5A8yVMZ/+RDjn2aKd72e4xVX3Mg2k9silGe4S59ZYndjC/DTD57DUFB2m7Ym7a
W20w0TVchhd803myol5EteLxrTAK5Bmb8E41scMxgnBJqchc1yG2gD5+Wy4bdBbx
rHtZdDqVODXSng==
-----END CERTIFICATE-----
Generated at Sat May 16 22:38:06 2026 by rpki-client