Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
File: 9j_pwTQEHOvaVoufkI4q7zirf3U.mft (raw, json)
Hash identifier: JnM140jjeg/w74PvkHLvSP0rU+LUP+b6lJr+Z7Q5q9Q=
Subject key identifier: F7:D8:DC:7B:BD:E6:89:E9:45:6C:65:52:18:D1:BC:84:3A:C7:74:88
Authority key identifier: F6:3F:E9:C1:34:04:1C:EB:DA:56:8B:9F:90:8E:2A:EF:38:AB:7F:75
Certificate issuer: /CN=f63fe9c134041cebda568b9f908e2aef38ab7f75
Certificate serial: 019E2F9685D25B60E6152CE2DD9931D7CAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
Manifest number: 0F63
Signing time: Sat 16 May 2026 07:00:54 +0000
Manifest this update: Sat 16 May 2026 07:00:54 +0000
Manifest next update: Sun 17 May 2026 07:00:54 +0000
Files and hashes: 1: 9j_pwTQEHOvaVoufkI4q7zirf3U.crl (hash: OFHSBVlBMgMplmq5Kh76yog9AjGcn3egLZc+myvBmBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:85:d2:5b:60:e6:15:2c:e2:dd:99:31:d7:ca:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f63fe9c134041cebda568b9f908e2aef38ab7f75
Validity
Not Before: May 16 07:00:54 2026 GMT
Not After : May 17 07:00:54 2026 GMT
Subject: CN=f7d8dc7bbde689e9456c655218d1bc843ac77488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:70:de:38:82:d9:be:10:b2:ef:85:57:f0:
29:9a:0b:a1:eb:55:f5:45:f2:21:c4:29:95:a9:69:
8d:50:e9:80:37:81:5e:21:87:55:d5:da:78:14:df:
b8:d5:d4:aa:81:dc:4e:cc:69:a8:cd:87:33:48:fd:
16:bb:04:3a:4d:65:27:55:37:ef:2b:68:9d:37:e1:
03:71:6f:b1:db:6c:f4:cf:f9:29:34:e3:3b:95:c9:
10:69:66:f9:86:48:e9:0a:e6:c7:a8:71:9f:6f:2b:
36:f8:4f:97:fa:94:25:5c:9a:9b:55:eb:cb:1a:a3:
18:4f:74:21:25:8c:b9:a2:e0:d0:05:df:4d:c8:3f:
fb:09:6c:bf:c3:ac:47:68:9c:82:ac:b9:df:15:dc:
fa:0e:f4:dc:ff:ef:99:53:4f:44:3e:1c:47:7d:ca:
00:80:91:e8:71:40:d6:b0:6e:19:5b:3a:51:9b:9e:
f9:9c:c4:44:10:c5:f6:0d:a5:26:c5:e5:45:96:64:
bd:27:a8:5a:4c:b2:a7:61:d3:f9:a2:f5:c5:99:85:
df:e4:54:f4:ad:22:67:35:fb:bc:44:f9:e9:f1:c7:
01:c6:49:ae:63:0d:e6:a1:20:7b:97:3d:36:4e:7d:
9e:4e:ba:26:fc:76:13:e6:9f:4c:54:73:00:2e:fd:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D8:DC:7B:BD:E6:89:E9:45:6C:65:52:18:D1:BC:84:3A:C7:74:88
X509v3 Authority Key Identifier:
keyid:F6:3F:E9:C1:34:04:1C:EB:DA:56:8B:9F:90:8E:2A:EF:38:AB:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:16:df:1a:76:b7:e4:85:35:15:2d:3a:ca:60:20:4a:e5:7b:
26:c2:96:71:ee:00:95:20:43:be:71:26:be:fc:7b:56:fe:21:
7e:11:ed:6d:87:54:2c:25:f7:c1:e2:be:2f:a9:8c:31:d0:df:
35:69:c3:9a:d0:73:0d:69:ac:6a:d8:94:a1:49:6d:b3:64:f0:
41:e6:d9:73:37:ad:5e:42:67:09:62:3e:97:97:65:b7:b5:c3:
19:01:29:30:0a:12:33:23:b8:55:e1:13:71:06:24:c6:d0:ef:
19:7d:17:d4:7e:7b:5c:81:cc:de:4e:ee:36:3f:95:1a:55:60:
7d:98:5c:a4:80:e9:d3:de:32:56:df:32:9b:62:11:33:c8:e4:
cc:0a:0d:49:a0:43:78:98:5b:3b:64:84:f6:cf:ef:72:61:14:
12:51:23:60:6d:e4:00:eb:83:12:1a:20:d1:4d:17:74:3b:8d:
1c:cd:ca:1c:12:76:7f:7c:14:93:ef:1f:c1:35:cc:76:5d:35:
0a:83:47:0a:fd:21:cc:8e:15:d1:94:b5:42:44:8c:d6:8e:67:
67:84:10:19:cb:1f:06:2d:15:d4:f6:df:24:0f:40:ca:ef:67:
d0:91:03:e5:80:1f:1e:7b:bd:73:89:2b:a5:7e:52:65:15:53:
36:04:de:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vloXSW2DmFSzi3Zkx18rBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2M2ZlOWMxMzQwNDFjZWJkYTU2OGI5ZjkwOGUyYWVmMzhh
YjdmNzUwHhcNMjYwNTE2MDcwMDU0WhcNMjYwNTE3MDcwMDU0WjAzMTEwLwYDVQQD
EyhmN2Q4ZGM3YmJkZTY4OWU5NDU2YzY1NTIxOGQxYmM4NDNhYzc3NDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArklw3jiC2b4Qsu+FV/Apmguh61X1
RfIhxCmVqWmNUOmAN4FeIYdV1dp4FN+41dSqgdxOzGmozYczSP0WuwQ6TWUnVTfv
K2idN+EDcW+x22z0z/kpNOM7lckQaWb5hkjpCubHqHGfbys2+E+X+pQlXJqbVevL
GqMYT3QhJYy5ouDQBd9NyD/7CWy/w6xHaJyCrLnfFdz6DvTc/++ZU09EPhxHfcoA
gJHocUDWsG4ZWzpRm575nMREEMX2DaUmxeVFlmS9J6haTLKnYdP5ovXFmYXf5FT0
rSJnNfu8RPnp8ccBxkmuYw3moSB7lz02Tn2eTrom/HYT5p9MVHMALv0dwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfY3Hu95onpRWxlUhjRvIQ6x3SIMB8GA1UdIwQY
MBaAFPY/6cE0BBzr2laLn5COKu84q391MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWpfcHdUUUVIT3ZhVm91ZmtJNHE3emlyZjNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMzlkM2EtMjc4NC00MjU1LTkwNjYt
NWFlYzc2NmE0OWI0LzEvOWpfcHdUUUVIT3ZhVm91ZmtJNHE3emlyZjNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iMzlkM2EtMjc4NC00MjU1LTkwNjYtNWFlYzc2NmE0OWI0
LzEvOWpfcHdUUUVIT3ZhVm91ZmtJNHE3emlyZjNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehbfGna3
5IU1FS06ymAgSuV7JsKWce4AlSBDvnEmvvx7Vv4hfhHtbYdULCX3weK+L6mMMdDf
NWnDmtBzDWmsatiUoUlts2TwQebZczetXkJnCWI+l5dlt7XDGQEpMAoSMyO4VeET
cQYkxtDvGX0X1H57XIHM3k7uNj+VGlVgfZhcpIDp094yVt8ym2IRM8jkzAoNSaBD
eJhbO2SE9s/vcmEUElEjYG3kAOuDEhog0U0XdDuNHM3KHBJ2f3wUk+8fwTXMdl01
CoNHCv0hzI4V0ZS1QkSM1o5nZ4QQGcsfBi0V1PbfJA9Ayu9n0JED5YAfHnu9c4kr
pX5SZRVTNgTeiA==
-----END CERTIFICATE-----
Generated at Sat May 16 16:26:15 2026 by rpki-client