Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: nefDhEks2ZzK63c3wf//jBZ1fbKZBWOa03I+FALykho=
Subject key identifier: 66:F9:8C:B2:3F:3D:A9:0B:D4:7B:1B:0D:A8:7B:24:9B:8A:53:8E:E0
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 019E303B607E492DBDB6F0DE300AB08711FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 10:00:58 +0000
Manifest this update: Sat 16 May 2026 10:00:58 +0000
Manifest next update: Sun 17 May 2026 10:00:58 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: VRyYgVULoNTd6Q+kxGp2o4/YjzCwdlI8TM3fcZa0yKs=)
2: BqRJvB_nPRiPWuTGUs43OFgE1cg.roa (hash: CouaUfaCJlCnH6IGbuUpQJc4a6XZQ+ovYHzWhnqUp88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:60:7e:49:2d:bd:b6:f0:de:30:0a:b0:87:11:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: May 16 10:00:58 2026 GMT
Not After : May 17 10:00:58 2026 GMT
Subject: CN=66f98cb23f3da90bd47b1b0da87b249b8a538ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2e:57:c4:a0:79:47:e6:ad:3f:44:de:a1:4d:
ae:d2:2b:a6:c3:01:f8:89:e1:b2:1c:2b:9b:25:dc:
95:87:a0:3d:01:f0:50:2b:c1:cd:85:58:42:77:03:
d8:69:7c:b6:27:1a:9b:16:57:9f:14:e9:b2:35:98:
60:8b:7a:ca:ed:a8:1f:40:1b:5b:26:be:9c:37:04:
d9:3a:31:b9:6d:d5:09:4d:b5:87:58:24:bc:51:57:
77:d3:89:27:4c:e4:ca:dc:51:3d:8a:5b:a5:5a:63:
5a:a1:b2:81:23:7b:57:5b:b0:75:1a:93:18:d8:19:
45:14:29:14:f3:14:15:8c:a8:66:d0:81:17:51:07:
41:5c:21:ea:fb:ad:7b:c3:3d:0e:79:e9:6c:5a:0e:
e3:20:1b:36:bc:e0:a7:01:e3:59:a6:6f:bd:e9:1e:
b2:41:c2:9f:d9:fe:ab:68:8c:2c:81:64:4b:fb:4f:
ea:94:12:25:40:5e:28:a4:93:4f:73:b9:19:6f:32:
ad:23:7b:cb:0c:d4:3f:88:37:b6:fd:ea:d0:df:9e:
6e:ed:88:dc:68:ec:3f:8a:42:1e:13:38:30:cc:00:
9b:d2:f9:9d:83:57:ff:d4:63:ac:11:3b:90:c6:21:
75:3f:05:ae:7b:1a:c2:ac:d5:b5:21:60:0d:c3:02:
03:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F9:8C:B2:3F:3D:A9:0B:D4:7B:1B:0D:A8:7B:24:9B:8A:53:8E:E0
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:21:7f:97:be:ac:96:42:72:64:43:99:62:81:78:bf:09:0f:
f3:46:5c:99:fe:ad:78:74:d4:c4:2f:08:39:09:05:a5:5f:c3:
1d:7a:5e:a4:34:5d:67:3f:a8:87:56:f3:77:3c:47:c5:a7:75:
45:f7:9e:d4:7e:5d:65:fe:95:99:04:ea:76:97:f3:a2:a6:45:
de:8f:f1:af:87:94:e8:63:2a:62:0f:db:34:53:50:de:f3:97:
17:2d:3a:d4:00:1c:f8:d6:2b:4b:51:7a:2a:2a:0b:7b:f1:bb:
bf:85:00:40:4a:5b:26:2b:d1:58:3a:ee:78:d7:0c:86:b9:43:
00:81:4f:10:84:63:72:34:b0:42:6b:62:07:c2:a1:06:59:f2:
3a:45:43:d0:d4:9f:a6:9e:9c:90:43:5c:11:79:48:2c:40:26:
98:34:77:65:53:16:a0:bd:b3:12:8b:22:08:27:34:21:2c:2a:
9a:71:1b:ce:3d:f1:3f:1c:20:03:e1:78:c9:a2:5f:80:87:8a:
06:08:a9:41:34:90:d1:84:b9:66:99:f9:10:41:c1:3c:3b:d9:
33:8b:a8:ec:28:ac:b8:13:4c:b2:00:dc:4b:c7:fb:52:4c:1d:
03:c6:61:f4:0a:e6:2a:02:e9:9c:52:1e:36:70:01:cc:a5:a4:
f0:5d:0d:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wO2B+SS29tvDeMAqwhxH/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWEwYTVkMWU4ZDU0MjQ4ZTg3NjY3ZTk4ODNjOTAyZjE3
NWUyZTcwHhcNMjYwNTE2MTAwMDU4WhcNMjYwNTE3MTAwMDU4WjAzMTEwLwYDVQQD
Eyg2NmY5OGNiMjNmM2RhOTBiZDQ3YjFiMGRhODdiMjQ5YjhhNTM4ZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S5XxKB5R+atP0TeoU2u0iumwwH4
ieGyHCubJdyVh6A9AfBQK8HNhVhCdwPYaXy2JxqbFlefFOmyNZhgi3rK7agfQBtb
Jr6cNwTZOjG5bdUJTbWHWCS8UVd304knTOTK3FE9ilulWmNaobKBI3tXW7B1GpMY
2BlFFCkU8xQVjKhm0IEXUQdBXCHq+617wz0OeelsWg7jIBs2vOCnAeNZpm+96R6y
QcKf2f6raIwsgWRL+0/qlBIlQF4opJNPc7kZbzKtI3vLDNQ/iDe2/erQ355u7Yjc
aOw/ikIeEzgwzACb0vmdg1f/1GOsETuQxiF1PwWuexrCrNW1IWANwwIDewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGb5jLI/PakL1HsbDah7JJuKU47gMB8GA1UdIwQY
MBaAFPaaCl0ejVQkjodmfpiDyQLxdeLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85NDQwYTQtMGI0Mi00YTU4LTkwMGEt
ZTk5ZjIyNzcyNjI0LzEvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS85NDQwYTQtMGI0Mi00YTU4LTkwMGEtZTk5ZjIyNzcyNjI0
LzEvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApyF/l76s
lkJyZEOZYoF4vwkP80Zcmf6teHTUxC8IOQkFpV/DHXpepDRdZz+oh1bzdzxHxad1
Rfee1H5dZf6VmQTqdpfzoqZF3o/xr4eU6GMqYg/bNFNQ3vOXFy061AAc+NYrS1F6
KioLe/G7v4UAQEpbJivRWDrueNcMhrlDAIFPEIRjcjSwQmtiB8KhBlnyOkVD0NSf
pp6ckENcEXlILEAmmDR3ZVMWoL2zEosiCCc0ISwqmnEbzj3xPxwgA+F4yaJfgIeK
BgipQTSQ0YS5Zpn5EEHBPDvZM4uo7CisuBNMsgDcS8f7UkwdA8Zh9ArmKgLpnFIe
NnABzKWk8F0NFw==
-----END CERTIFICATE-----
Generated at Sat May 16 17:54:38 2026 by rpki-client