Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier: n6OPMWl+0N5NypjkGKDJEcCkONb7XGZXPAtdchxB/jg=
Subject key identifier: E7:EB:E8:E0:10:33:4A:6E:58:E1:D7:95:85:19:4A:47:4D:7D:36:E5
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 019F17C2C8A925E5B1C12F0C25A795B1D3A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number: 1573
Signing time: Tue 30 Jun 2026 09:01:08 +0000
Manifest this update: Tue 30 Jun 2026 09:01:08 +0000
Manifest next update: Wed 01 Jul 2026 09:01:08 +0000
Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: QQy5p/LXyQ4AbDWMaVn9x/pJlin458TpvhvOIt45izo=)
2: YlUOJaq43NpuLvhyIjdUpjtIh5k.roa (hash: CQMT/ddbiL7hLzG2QkDs7berkHQrguNEVB/e2zlXUlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:c8:a9:25:e5:b1:c1:2f:0c:25:a7:95:b1:d3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: Jun 30 09:01:08 2026 GMT
Not After : Jul 1 09:01:08 2026 GMT
Subject: CN=e7ebe8e010334a6e58e1d79585194a474d7d36e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:f7:91:35:f8:43:b1:0b:c8:7f:f1:24:ea:
d6:0b:0e:7e:ce:53:40:e3:7e:57:40:67:c0:f4:a6:
8c:ec:fa:c5:e7:3f:43:f1:ac:a8:0f:f4:16:53:37:
ed:be:e6:5d:1d:b4:52:13:55:2c:3c:06:53:c0:4c:
6c:7d:5c:17:22:be:83:a1:36:fb:18:11:9d:74:9b:
75:f3:d2:83:f0:db:ca:b5:e2:7e:91:ef:80:05:1a:
fc:f2:e7:fe:d5:0b:f3:e2:cd:6f:b4:89:88:7f:dd:
af:d1:91:3d:76:1b:da:55:d3:bb:56:4c:e4:56:ab:
d9:80:d7:84:a6:1b:82:a3:af:6b:fb:12:f2:e0:97:
8d:e8:f3:a0:b0:1c:7f:37:b2:3c:6e:96:b6:b9:bd:
ee:ba:29:3e:af:8a:a4:cd:2f:9a:1c:79:29:14:e2:
f6:c0:ef:e1:f3:36:8f:b2:88:8c:dd:15:02:40:5f:
80:0a:6e:3b:c2:f7:6a:46:da:68:f1:ee:d4:1f:48:
37:d6:f2:85:04:39:87:77:f9:48:93:3e:ea:27:fb:
f8:5a:a0:0b:bb:75:8f:26:d2:a3:2a:9a:d0:58:6b:
c6:b3:76:71:af:f1:e0:01:0b:d0:01:33:26:8a:f8:
71:ee:cb:a8:73:81:34:0d:05:a5:58:1b:de:4f:55:
14:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EB:E8:E0:10:33:4A:6E:58:E1:D7:95:85:19:4A:47:4D:7D:36:E5
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0b:48:2a:ee:1e:2f:a9:76:0a:10:dd:46:9e:38:12:9a:75:
d4:9a:f2:31:5d:69:20:8e:05:ea:e7:bc:4d:48:22:b9:e3:4d:
72:2d:82:fc:f3:11:2f:ea:1f:f8:95:2a:18:a1:b3:18:1d:07:
ff:03:bd:b9:ff:54:a0:dd:19:8d:6d:30:2e:5e:a5:50:44:cb:
68:70:12:34:9f:12:2b:a4:48:c3:02:5e:48:a3:9e:42:d0:56:
43:4d:59:9f:52:90:b6:b3:8d:d3:d0:06:32:1e:1c:db:4a:75:
10:7e:7d:c7:9f:4d:b8:f8:03:73:c1:93:5a:b4:6b:2f:09:66:
ab:e9:91:27:d1:02:c2:72:59:5b:54:81:32:fd:e7:11:ca:59:
64:09:ef:6d:93:fd:d5:a4:4c:7f:a2:ad:10:28:7e:e1:4b:38:
f8:71:4e:ce:6c:c3:c8:f1:66:7c:10:25:f2:2c:15:69:1d:07:
a3:5b:20:48:ea:60:b0:5f:43:b9:45:ea:3e:57:8c:d3:93:5c:
37:27:c8:10:76:de:8b:24:c5:96:43:4e:8e:e9:47:1c:37:cd:
f0:9b:de:30:d3:90:09:f3:6c:75:5a:6b:1f:ad:3f:ca:24:82:
62:59:e9:57:4e:2f:97:5b:13:1b:41:cf:c5:41:8d:11:d1:f0:
c0:20:d6:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XwsipJeWxwS8MJaeVsdOlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZmY0NmJhNmNkOGUyZjM1YWZkYjViNWY5Zjg2NTAyZjgz
NGMzNGEwHhcNMjYwNjMwMDkwMTA4WhcNMjYwNzAxMDkwMTA4WjAzMTEwLwYDVQQD
EyhlN2ViZThlMDEwMzM0YTZlNThlMWQ3OTU4NTE5NGE0NzRkN2QzNmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykf3kTX4Q7ELyH/xJOrWCw5+zlNA
435XQGfA9KaM7PrF5z9D8ayoD/QWUzftvuZdHbRSE1UsPAZTwExsfVwXIr6DoTb7
GBGddJt189KD8NvKteJ+ke+ABRr88uf+1Qvz4s1vtImIf92v0ZE9dhvaVdO7Vkzk
VqvZgNeEphuCo69r+xLy4JeN6POgsBx/N7I8bpa2ub3uuik+r4qkzS+aHHkpFOL2
wO/h8zaPsoiM3RUCQF+ACm47wvdqRtpo8e7UH0g31vKFBDmHd/lIkz7qJ/v4WqAL
u3WPJtKjKprQWGvGs3Zxr/HgAQvQATMmivhx7suoc4E0DQWlWBveT1UUCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfr6OAQM0puWOHXlYUZSkdNfTblMB8GA1UdIwQY
MBaAFPX/Rrps2OLzWv21tfn4ZQL4NMNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUt
NmFkMjBhMmVhY2I4LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUtNmFkMjBhMmVhY2I4
LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQtIKu4e
L6l2ChDdRp44Epp11JryMV1pII4F6ue8TUgiueNNci2C/PMRL+of+JUqGKGzGB0H
/wO9uf9UoN0ZjW0wLl6lUETLaHASNJ8SK6RIwwJeSKOeQtBWQ01Zn1KQtrON09AG
Mh4c20p1EH59x59NuPgDc8GTWrRrLwlmq+mRJ9ECwnJZW1SBMv3nEcpZZAnvbZP9
1aRMf6KtECh+4Us4+HFOzmzDyPFmfBAl8iwVaR0Ho1sgSOpgsF9DuUXqPleM05Nc
NyfIEHbeiyTFlkNOjulHHDfN8JveMNOQCfNsdVprH60/yiSCYlnpV04vl1sTG0HP
xUGNEdHwwCDWXw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:36 2026 by rpki-client