Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier: LO4XisDEehQ+rg7P2oHyd7lCyyv2bk08BqqAnO7DK9Q=
Subject key identifier: DE:D9:0B:23:CF:B0:90:15:65:FF:85:D9:EB:40:2C:B6:FE:7C:40:C0
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial: 01A001018E9266C79E50C1436C4BCD5BEFE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number: 0FC9
Signing time: Fri 14 Aug 2026 16:01:14 +0000
Manifest this update: Fri 14 Aug 2026 16:01:14 +0000
Manifest next update: Sat 15 Aug 2026 16:01:14 +0000
Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: G80iBte1dYGRytXnmO6FP9atO8poCkGMqG3IYLcYV1Y=)
2: I3Cwe_JfIHDw-5FguYkJbkBPot8.roa (hash: NhXNbLKSK6Zii6NTvjleq3atjNt9Qq9hOl62FzoteKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:8e:92:66:c7:9e:50:c1:43:6c:4b:cd:5b:ef:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Validity
Not Before: Aug 14 16:01:14 2026 GMT
Not After : Aug 15 16:01:14 2026 GMT
Subject: CN=ded90b23cfb0901565ff85d9eb402cb6fe7c40c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:6c:0b:b4:a4:cf:f8:07:fd:09:f6:c4:8e:
74:4d:b2:b8:cb:9c:3b:46:01:cd:dd:68:a8:52:6a:
7b:2b:cd:92:d6:26:72:64:ae:bd:6a:0f:c2:19:2f:
f8:69:e8:bd:8d:6b:e6:e6:5d:40:32:a6:d4:c1:34:
5a:67:42:ff:7b:22:69:70:e5:04:41:cf:4f:a9:a3:
b7:3d:61:d7:5f:76:22:2a:83:ed:39:e8:ef:8d:0e:
34:7e:fe:1f:05:6c:c5:d9:f9:90:f8:43:47:fb:c9:
36:37:f3:2f:96:d5:25:29:44:b9:0a:27:f0:6e:28:
7b:93:6e:c1:e9:41:a6:ea:fa:f0:32:8a:d7:ce:ac:
1e:14:58:b0:c4:a9:ba:57:0f:bf:4b:49:69:b8:83:
e0:4b:ab:d6:11:30:a9:cd:fb:91:51:de:e1:02:47:
c1:ef:3f:f0:e5:eb:70:54:5f:60:03:52:f4:79:60:
11:fa:48:02:73:c4:55:ed:b4:3c:9b:1d:0c:c4:58:
36:ef:d3:0c:69:4d:d7:19:88:e2:76:ce:a7:14:a7:
87:a9:ea:d8:13:4a:14:f3:e8:b5:13:c6:14:38:a7:
94:6c:9e:8d:b5:99:43:87:b6:81:45:cf:8a:22:61:
82:bb:a6:52:c5:87:39:6c:cf:98:f6:5d:fa:dc:2c:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D9:0B:23:CF:B0:90:15:65:FF:85:D9:EB:40:2C:B6:FE:7C:40:C0
X509v3 Authority Key Identifier:
keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bb:68:91:94:a9:5e:f7:89:25:81:df:3a:db:f6:4c:78:c4:
7b:f0:36:fb:66:02:fd:40:5a:5d:30:d1:d3:4e:86:b2:ae:a3:
39:95:14:16:50:70:9f:2f:d7:db:b4:2f:77:76:f1:31:41:61:
a6:3c:f3:9f:bb:38:65:63:f8:2f:18:9c:9d:5f:03:00:fc:aa:
bd:0f:5b:70:80:dc:20:d4:8b:34:c2:63:80:3d:50:7e:23:cc:
1a:a2:c5:2d:c9:b4:7f:13:7a:a7:03:35:71:89:55:17:dd:68:
59:ef:e6:4f:3a:52:9d:36:1c:cf:2b:47:85:00:53:fc:cf:cc:
4c:77:8d:33:9a:8f:dc:2e:80:dc:71:07:5b:f6:48:58:51:d1:
b0:7b:df:de:b0:bc:30:24:5d:ed:85:ca:64:c2:6f:7c:ec:ef:
7d:f3:68:bc:0d:fe:8a:97:55:d4:7a:ad:bb:17:50:e0:5e:e6:
40:e0:b7:e2:b0:a9:b0:4f:2b:b1:63:21:54:d2:f6:1a:2f:cf:
41:cf:a7:96:b2:c7:c6:40:80:0d:f1:d7:03:7b:4e:82:1e:ae:
78:bd:cb:1f:43:99:dd:91:ae:65:2a:a9:a9:a0:19:52:15:16:
36:1d:b1:cc:db:03:13:a9:60:35:c6:44:d3:b9:60:07:a8:09:
f5:f4:98:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAY6SZseeUMFDbEvNW+/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTUyN2EwNmEwMzVjYmNhZWNmMDBkYWNhMmZkODgzOTlj
ZjlkMTIwHhcNMjYwODE0MTYwMTE0WhcNMjYwODE1MTYwMTE0WjAzMTEwLwYDVQQD
EyhkZWQ5MGIyM2NmYjA5MDE1NjVmZjg1ZDllYjQwMmNiNmZlN2M0MGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySJsC7Skz/gH/Qn2xI50TbK4y5w7
RgHN3WioUmp7K82S1iZyZK69ag/CGS/4aei9jWvm5l1AMqbUwTRaZ0L/eyJpcOUE
Qc9PqaO3PWHXX3YiKoPtOejvjQ40fv4fBWzF2fmQ+ENH+8k2N/MvltUlKUS5Cifw
bih7k27B6UGm6vrwMorXzqweFFiwxKm6Vw+/S0lpuIPgS6vWETCpzfuRUd7hAkfB
7z/w5etwVF9gA1L0eWAR+kgCc8RV7bQ8mx0MxFg279MMaU3XGYjids6nFKeHqerY
E0oU8+i1E8YUOKeUbJ6NtZlDh7aBRc+KImGCu6ZSxYc5bM+Y9l363CwfmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7ZCyPPsJAVZf+F2etALLb+fEDAMB8GA1UdIwQY
MBaAFPaVJ6BqA1y8rs8A2sov2IOZz50SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNDU1MzEtZDZjOC00ZGNlLWI2MDYt
ODVjODU1MjI3YjIzLzEvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kNDU1MzEtZDZjOC00ZGNlLWI2MDYtODVjODU1MjI3YjIz
LzEvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLtokZSp
XveJJYHfOtv2THjEe/A2+2YC/UBaXTDR006Gsq6jOZUUFlBwny/X27Qvd3bxMUFh
pjzzn7s4ZWP4LxicnV8DAPyqvQ9bcIDcINSLNMJjgD1QfiPMGqLFLcm0fxN6pwM1
cYlVF91oWe/mTzpSnTYczytHhQBT/M/MTHeNM5qP3C6A3HEHW/ZIWFHRsHvf3rC8
MCRd7YXKZMJvfOzvffNovA3+ipdV1HqtuxdQ4F7mQOC34rCpsE8rsWMhVNL2Gi/P
Qc+nlrLHxkCADfHXA3tOgh6ueL3LH0OZ3ZGuZSqpqaAZUhUWNh2xzNsDE6lgNcZE
07lgB6gJ9fSYpQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:07 2026 by rpki-client