Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
File: 9q9DOXTfNztwq9drE-HHDHdfVUs.mft (raw, json)
Hash identifier: 7oXdjpif0aHpndtha8TTHvIg5DfHOZup+KVf0L0bZyo=
Subject key identifier: B7:1D:A0:8F:25:52:0C:B9:DE:63:9A:2E:54:01:22:56:AB:40:9B:A2
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 019E307255ACCCBB8F3C66F904E1894F8D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
Manifest number: 11BA
Signing time: Sat 16 May 2026 11:00:59 +0000
Manifest this update: Sat 16 May 2026 11:00:59 +0000
Manifest next update: Sun 17 May 2026 11:00:59 +0000
Files and hashes: 1: 4xcI6-ajxKmP_Ug4IMIxPvlGv34.roa (hash: xrDvVgzmOi/0saXzoSAdi3kdTTIHSg71KS5FPmg6F+8=)
2: 9q9DOXTfNztwq9drE-HHDHdfVUs.crl (hash: s/u+Cx/YxefCCKz/xssD0Vz77M06z3jWcusk0ZHGo8o=)
3: FDQzyl-rmR6oM8fvayGaAbR8jXM.roa (hash: om6dO1jietNjIahTo0heBTOJARVlUpLyjegJk+RlSrc=)
4: UQeZhixfXf_YkfYGyO2Lf14Z6_s.roa (hash: eKAIar7WRAnNke9Qfa+HTZNykSJ9iONQr3Jz7CFyN/A=)
5: W-WRMUisoYffopeZka-JuQ9lRDE.asa (hash: ryCAMnvwf0Fvzg8WAkss+7OL5+phrb+J8sGIzFaGz9k=)
6: XBmkVeuFRD2uueboTgIjRhoEQuE.roa (hash: v9V72yDsw7P8I61J+zB2Rok+f/g1fiD48qiwYR7onlg=)
7: iRdgIX5OxjNM1yQqzGrI-IlFYWU.roa (hash: o1VCuPGQGLom0fvLJJYHwM1EdofsHXcxsnsAuKlYpn4=)
8: rVAZAeOQDvwPVh2Fwei2q2CF_Qg.roa (hash: XaxWalW01B0ra8JXzNNUG2fuhXDskHxvyOQTCE4WGSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:55:ac:cc:bb:8f:3c:66:f9:04:e1:89:4f:8d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: May 16 11:00:59 2026 GMT
Not After : May 17 11:00:59 2026 GMT
Subject: CN=b71da08f25520cb9de639a2e54012256ab409ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f6:bc:c8:59:43:b7:91:a5:26:96:2a:29:03:
ba:1f:b6:7f:5b:48:6d:5f:54:71:5d:f3:9a:1e:27:
f8:ff:bb:8f:4b:1c:17:d9:df:3e:0b:78:db:8b:51:
40:9b:65:ff:dc:50:60:ed:88:a5:aa:bc:2d:19:5d:
ad:d4:8a:10:b5:66:1f:d4:97:86:ba:2d:9e:62:6b:
4d:1c:d2:63:3f:f9:31:ba:52:36:f5:e8:f7:21:01:
3c:b8:ad:21:33:27:2e:ea:46:50:58:7d:61:49:bb:
ea:71:3e:31:35:16:8a:80:53:44:10:08:2c:09:cd:
8f:d3:cd:54:9b:92:58:21:23:a5:7c:45:19:54:fe:
b8:55:9d:c2:76:cc:6f:e8:e8:c4:e9:03:e6:ca:66:
7b:f4:1e:19:13:e4:30:30:a3:50:95:65:fe:6a:1d:
20:87:9d:d2:0d:7d:d3:d8:8d:19:72:92:71:b0:e4:
93:cb:89:a7:6b:fc:f2:4c:8d:75:d9:7b:f1:9a:7a:
78:66:9a:18:7a:d6:fb:76:fb:4f:8b:b6:f4:fd:0f:
f4:76:c7:da:ad:2e:7d:34:14:79:cf:49:13:5e:9e:
ef:27:34:fa:9e:2e:12:ea:92:31:76:cd:48:9f:1b:
ca:d5:b1:96:8b:a9:83:b7:92:d3:6a:91:5c:d7:fc:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1D:A0:8F:25:52:0C:B9:DE:63:9A:2E:54:01:22:56:AB:40:9B:A2
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:99:a0:c7:03:96:e6:35:f2:6c:bc:29:e6:61:99:99:2e:b6:
dd:a3:98:3e:f6:90:5b:04:11:e0:26:2f:c5:17:02:49:9a:a9:
05:ff:2a:70:fa:ae:15:95:59:7f:d6:ad:e6:c4:04:c5:cb:8b:
48:07:59:f8:4a:f1:47:c4:fa:c2:43:65:cb:be:da:55:35:b1:
45:2d:f2:26:ff:2b:89:44:6a:aa:a5:d6:a7:78:79:6c:bc:59:
47:b0:56:15:bc:1c:7e:77:ec:78:b9:e7:a6:b6:28:55:48:d2:
5a:11:f5:bf:e6:63:34:cc:25:66:90:a7:47:b7:ed:cd:2d:5f:
a6:4e:2f:5f:a0:19:b1:a3:c8:ca:c7:31:bb:ac:46:01:c7:ac:
2f:f7:3a:03:09:18:e5:c2:af:a5:1a:c4:99:e3:08:b7:ff:1b:
9b:17:9d:7a:56:c4:67:ce:b2:24:79:10:7d:71:d7:a7:72:6b:
92:55:50:0a:cd:d9:fc:0d:f7:c0:97:77:01:5e:b0:b5:21:aa:
bf:93:b2:a2:fc:ae:f8:b7:c3:14:c2:42:33:7f:d6:77:b8:7e:
9d:b8:69:8e:f6:16:86:79:c1:94:7c:87:1d:cc:ae:b7:20:53:
91:45:2a:31:47:d0:ac:21:70:52:46:1c:75:e6:d8:ee:4e:81:
94:17:23:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:04 2026 by rpki-client