Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
File: 9RDHudzJJZg-WbWGzVmrVUviWYI.mft (raw, json)
Hash identifier: mSVG+VsboBaMdeYB+qI5Mopv14gR5EXI5kpvFou24fg=
Subject key identifier: 51:35:E8:B8:38:D0:8A:21:4D:A0:90:30:3D:30:4D:50:B9:BF:77:D3
Authority key identifier: F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82
Certificate issuer: /CN=f510c7b9dcc925983e59b586cd59ab554be25982
Certificate serial: 019DF9F2566A377925C49DB9F4F125A843A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
Manifest number: 018C
Signing time: Tue 05 May 2026 21:01:41 +0000
Manifest this update: Tue 05 May 2026 21:01:41 +0000
Manifest next update: Wed 06 May 2026 21:01:41 +0000
Files and hashes: 1: 9RDHudzJJZg-WbWGzVmrVUviWYI.crl (hash: uNoxLy2GvqP6VYijoY4V3qUK1kLo+8f8pfiFLSTQQ/I=)
2: wTA4ZoIz75kHn1WMirNEgMY65FE.roa (hash: ashXJm/A/tacrnrBady83etVIast6DpVJH2Dt/iNOM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:f2:56:6a:37:79:25:c4:9d:b9:f4:f1:25:a8:43:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f510c7b9dcc925983e59b586cd59ab554be25982
Validity
Not Before: May 5 21:01:41 2026 GMT
Not After : May 6 21:01:41 2026 GMT
Subject: CN=5135e8b838d08a214da090303d304d50b9bf77d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d5:76:64:8c:62:f8:06:e5:4a:5f:59:69:93:
60:0b:7a:4e:f6:2b:a2:aa:f9:2b:80:e1:f8:37:24:
5d:a0:36:87:cd:bc:f7:9e:02:0a:d2:31:96:36:e4:
5b:f0:1a:c2:d1:7e:bc:13:0e:ad:12:4e:28:a4:03:
8f:d9:ac:60:1b:ef:7b:bf:5c:14:3f:90:ef:f1:7b:
f5:da:33:b3:fc:dd:a4:be:74:37:d4:52:57:a0:28:
d4:7b:73:21:16:fb:e8:71:08:e8:33:e1:21:03:11:
89:7d:da:c9:74:0f:da:7b:42:37:cd:2a:1d:89:84:
9e:bc:51:c9:b7:26:a9:b6:04:37:53:cd:2f:bf:6c:
af:f2:40:a5:53:75:17:2e:4a:b5:5a:78:e5:8d:d2:
0b:da:3a:bd:8f:ee:74:11:7c:6f:3d:29:df:02:d6:
8d:af:36:9e:8b:ae:b7:70:db:f0:50:fd:21:68:82:
47:05:8a:bf:03:14:62:39:2c:3f:c8:2c:1b:9b:b1:
d2:58:9e:c6:a9:2c:69:10:e1:1f:3c:18:cc:b1:fc:
7b:93:35:6b:58:a6:f9:c9:e8:b7:1b:6d:3b:e6:ee:
97:c6:ba:63:2e:0d:3d:6f:70:bf:9a:b7:de:07:fc:
32:2a:da:7a:9d:41:3d:06:6a:cf:6f:1b:cd:36:f9:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:35:E8:B8:38:D0:8A:21:4D:A0:90:30:3D:30:4D:50:B9:BF:77:D3
X509v3 Authority Key Identifier:
keyid:F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a6:dd:12:ea:4b:45:0e:ae:3d:a7:63:42:39:39:1f:35:38:
04:4b:3a:15:b7:12:57:6f:c5:77:06:f6:ba:9d:74:55:11:64:
8a:2b:9e:7b:04:74:18:5e:66:f9:37:2e:dc:76:e9:3c:d8:89:
a6:53:fb:6b:d5:fe:c0:cc:cf:60:0b:dc:bb:40:47:2e:e1:41:
d6:ab:90:e2:cf:3c:62:d5:12:57:6b:5b:6c:f9:30:b3:06:97:
ad:d7:cc:43:ad:76:e0:8a:35:59:cd:35:b3:87:e7:9d:4e:02:
f7:9c:58:7b:41:b6:55:d7:b2:04:fd:b7:88:08:eb:38:6b:fe:
72:6e:4f:2a:0a:51:03:d8:7c:89:65:c4:07:fc:c1:cb:51:92:
3f:5e:69:94:f1:77:9d:e7:cc:c3:a2:a5:de:63:37:fe:30:02:
c7:ee:67:5e:5a:58:f8:d1:64:9c:8c:ae:17:ec:fc:44:45:b9:
d9:aa:5b:b3:e2:d9:d6:c7:0a:f3:64:43:bd:27:8f:10:0e:13:
45:2a:31:51:e3:86:a0:b2:e2:42:bc:b1:6a:1c:e1:d3:38:fc:
6a:d7:a7:1f:8d:5a:8e:48:a8:f6:f6:c1:9d:ea:2a:14:f0:91:
c4:c6:f8:67:01:11:2c:67:fa:5c:cb:a8:5e:5b:55:26:36:48:
f3:60:8e:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ358lZqN3klxJ259PElqEOmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTBjN2I5ZGNjOTI1OTgzZTU5YjU4NmNkNTlhYjU1NGJl
MjU5ODIwHhcNMjYwNTA1MjEwMTQxWhcNMjYwNTA2MjEwMTQxWjAzMTEwLwYDVQQD
Eyg1MTM1ZThiODM4ZDA4YTIxNGRhMDkwMzAzZDMwNGQ1MGI5YmY3N2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNV2ZIxi+AblSl9ZaZNgC3pO9iui
qvkrgOH4NyRdoDaHzbz3ngIK0jGWNuRb8BrC0X68Ew6tEk4opAOP2axgG+97v1wU
P5Dv8Xv12jOz/N2kvnQ31FJXoCjUe3MhFvvocQjoM+EhAxGJfdrJdA/ae0I3zSod
iYSevFHJtyaptgQ3U80vv2yv8kClU3UXLkq1WnjljdIL2jq9j+50EXxvPSnfAtaN
rzaei663cNvwUP0haIJHBYq/AxRiOSw/yCwbm7HSWJ7GqSxpEOEfPBjMsfx7kzVr
WKb5yei3G2075u6XxrpjLg09b3C/mrfeB/wyKtp6nUE9BmrPbxvNNvlwywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFE16Lg40IohTaCQMD0wTVC5v3fTMB8GA1UdIwQY
MBaAFPUQx7ncySWYPlm1hs1Zq1VL4lmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYt
YTFiMmI2YTcwMjcyLzEvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYtYTFiMmI2YTcwMjcy
LzEvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIabdEupL
RQ6uPadjQjk5HzU4BEs6FbcSV2/Fdwb2up10VRFkiiueewR0GF5m+Tcu3HbpPNiJ
plP7a9X+wMzPYAvcu0BHLuFB1quQ4s88YtUSV2tbbPkwswaXrdfMQ6124Io1Wc01
s4fnnU4C95xYe0G2VdeyBP23iAjrOGv+cm5PKgpRA9h8iWXEB/zBy1GSP15plPF3
nefMw6Kl3mM3/jACx+5nXlpY+NFknIyuF+z8REW52apbs+LZ1scK82RDvSePEA4T
RSoxUeOGoLLiQryxahzh0zj8atenH41ajkio9vbBneoqFPCRxMb4ZwERLGf6XMuo
XltVJjZI82COLw==
-----END CERTIFICATE-----
Generated at Wed May 6 00:21:02 2026 by rpki-client