
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: GJtGwRbhCO3krcIUgH1xEG7XD9vfzXf9gJXGGpQLD8Q=
Subject key identifier: 16:2D:00:31:EF:CD:03:CD:89:DA:19:65:72:81:10:5B:CB:51:1C:B6
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 019F18312DCBEBCCEDCA623D3F2C9E3219FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 1918
Signing time: Tue 30 Jun 2026 11:01:43 +0000
Manifest this update: Tue 30 Jun 2026 11:01:43 +0000
Manifest next update: Wed 01 Jul 2026 11:01:43 +0000
Files and hashes: 1: 7kGNbroThpMnN96LqRGM-Y-5t9Y.roa (hash: lxPWqX0/OpM/p7/y+8GA/oyT71oB2fzc6nqiYIWie7o=)
2: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: /E0fWGehtTzrKs93VwPsHPHzQ/NDkqOJwowqEZhmqdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:2d:cb:eb:cc:ed:ca:62:3d:3f:2c:9e:32:19:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Jun 30 11:01:43 2026 GMT
Not After : Jul 1 11:01:43 2026 GMT
Subject: CN=162d0031efcd03cd89da19657281105bcb511cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:d0:66:ba:a6:9a:4c:43:48:38:2d:18:c7:
ba:78:d9:5e:94:0c:f1:ef:19:11:81:e2:90:b8:d4:
e9:a9:e0:20:65:b7:b3:be:fc:c7:2a:79:02:8c:e2:
5b:dc:26:e1:4a:8f:81:5d:47:ac:07:ef:8e:f4:63:
ef:6d:67:da:e6:7e:d5:98:c4:9d:d3:23:4c:17:3b:
49:37:d8:16:35:9a:a6:64:63:30:4c:f6:11:b5:e6:
3c:a0:19:81:d5:88:31:ab:c8:de:b8:93:7f:fe:3c:
c9:f4:1c:f1:69:34:f3:a0:e8:56:27:1c:80:fe:cf:
b1:bb:cc:c5:56:4f:ba:b7:99:39:df:94:2f:03:5e:
8b:f4:d8:83:c7:99:89:15:31:f5:96:9c:2d:fb:99:
7c:c5:ef:04:93:77:5a:e8:69:65:2d:58:e9:e4:18:
88:8b:90:1d:6b:b8:77:ce:18:5e:b0:f2:53:d6:c9:
ad:7e:b9:29:ef:6e:d3:a0:dd:af:89:2a:e6:a2:52:
87:1c:0c:14:48:90:0f:26:c9:f4:ea:59:e3:dd:83:
c7:21:67:94:2b:88:c8:4d:d1:e4:79:ab:06:db:c2:
58:b5:de:97:a4:31:cf:a4:6b:cd:b1:17:e4:47:db:
23:03:90:81:12:45:9c:f6:da:98:e0:ea:3e:9c:fd:
28:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2D:00:31:EF:CD:03:CD:89:DA:19:65:72:81:10:5B:CB:51:1C:B6
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ec:d7:6e:4f:d0:a0:d1:94:b4:46:a6:f7:ef:f7:86:cd:36:
3e:37:c0:5e:c6:7f:e1:bf:9c:67:67:0f:99:0f:1f:4a:ec:b1:
57:14:c8:83:16:c1:57:52:15:99:13:bf:a4:cd:9c:05:43:23:
f7:2b:fc:02:a8:29:61:1e:c8:c6:7d:54:7a:f0:e3:6f:90:ae:
b7:55:bb:f4:6a:62:1d:ad:dd:da:a5:0f:c3:b6:e4:a9:66:69:
32:1e:16:ee:58:bd:f1:3b:8f:b4:d5:e0:38:03:d9:35:af:2e:
a4:bd:20:d4:24:f8:1a:22:ea:aa:73:f5:a5:bd:ed:4d:28:e9:
ef:df:e9:c3:bb:c8:f6:20:7a:a7:ff:c6:35:0e:6b:10:29:f6:
22:17:35:5c:92:e3:53:c6:30:ef:a9:04:20:32:f4:76:9c:53:
76:3d:67:65:50:bc:c4:80:28:f6:1f:b8:02:1a:2a:04:bc:20:
24:72:84:b0:ea:ba:04:15:67:2c:d3:d5:63:b6:48:4c:6d:ff:
31:25:cd:b1:9e:d4:2e:41:fd:a2:0d:4d:99:d2:75:25:ae:07:
57:ee:35:1e:52:46:46:25:1e:32:0e:b9:19:2d:bb:a0:bd:82:
e2:6c:fa:58:06:26:8a:b5:74:a9:a1:1f:39:da:07:4d:15:9a:
8f:5a:11:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMS3L68ztymI9PyyeMhn9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjQzMGQwODA1ZjQyZmZhM2JjZDBjMGI3YzU1MDgwNTEx
NzkyM2EwHhcNMjYwNjMwMTEwMTQzWhcNMjYwNzAxMTEwMTQzWjAzMTEwLwYDVQQD
EygxNjJkMDAzMWVmY2QwM2NkODlkYTE5NjU3MjgxMTA1YmNiNTExY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLnQZrqmmkxDSDgtGMe6eNlelAzx
7xkRgeKQuNTpqeAgZbezvvzHKnkCjOJb3CbhSo+BXUesB++O9GPvbWfa5n7VmMSd
0yNMFztJN9gWNZqmZGMwTPYRteY8oBmB1Ygxq8jeuJN//jzJ9BzxaTTzoOhWJxyA
/s+xu8zFVk+6t5k535QvA16L9NiDx5mJFTH1lpwt+5l8xe8Ek3da6GllLVjp5BiI
i5Ada7h3zhhesPJT1smtfrkp727ToN2viSrmolKHHAwUSJAPJsn06lnj3YPHIWeU
K4jITdHkeasG28JYtd6XpDHPpGvNsRfkR9sjA5CBEkWc9tqY4Oo+nP0obwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYtADHvzQPNidoZZXKBEFvLURy2MB8GA1UdIwQY
MBaAFPT0MNCAX0L/o7zQwLfFUIBRF5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAt
ZjBmOTNjY2EyNDc5LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAtZjBmOTNjY2EyNDc5
LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuzXbk/Q
oNGUtEam9+/3hs02PjfAXsZ/4b+cZ2cPmQ8fSuyxVxTIgxbBV1IVmRO/pM2cBUMj
9yv8AqgpYR7Ixn1UevDjb5Cut1W79GpiHa3d2qUPw7bkqWZpMh4W7li98TuPtNXg
OAPZNa8upL0g1CT4GiLqqnP1pb3tTSjp79/pw7vI9iB6p//GNQ5rECn2Ihc1XJLj
U8Yw76kEIDL0dpxTdj1nZVC8xIAo9h+4AhoqBLwgJHKEsOq6BBVnLNPVY7ZITG3/
MSXNsZ7ULkH9og1NmdJ1Ja4HV+41HlJGRiUeMg65GS27oL2C4mz6WAYmirV0qaEf
OdoHTRWaj1oRbw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:20:00 2026 by rpki-client