Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
File: 9nKGX4FRC5RVt-qbyMfa15k9U5o.mft (raw, json)
Hash identifier: y34q4K59I84J67xRIG262ijkhZgYiAJ1lIUOZcK9Fl0=
Subject key identifier: F1:A1:50:0D:FF:4E:1A:97:E3:47:64:3A:60:69:8B:A7:78:06:A9:BD
Authority key identifier: F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
Certificate issuer: /CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Certificate serial: 019E57EDEC438D0FF826E4A8529BE40AC5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
Manifest number: 025F
Signing time: Sun 24 May 2026 03:01:10 +0000
Manifest this update: Sun 24 May 2026 03:01:10 +0000
Manifest next update: Mon 25 May 2026 03:01:10 +0000
Files and hashes: 1: 9nKGX4FRC5RVt-qbyMfa15k9U5o.crl (hash: eFLi6OnR2Cw+273Cvic1PRzGHkKYi2METCAlWwgbzV8=)
2: tbayT3vxpj9F6-hjVdEL1Ty6y0U.roa (hash: Ko/+YeSqgQQmx5PHs3jC/GfjdrV44JmmirXuegDNGWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:57:ed:ec:43:8d:0f:f8:26:e4:a8:52:9b:e4:0a:c5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Validity
Not Before: May 24 03:01:10 2026 GMT
Not After : May 25 03:01:10 2026 GMT
Subject: CN=f1a1500dff4e1a97e347643a60698ba77806a9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:59:db:7e:ee:e2:dd:a5:7b:99:a8:39:2b:
6d:ba:1f:42:fd:3d:30:47:cd:41:11:b6:7c:73:88:
87:32:8a:8c:bd:d7:12:43:ed:6a:69:9f:a0:ef:8c:
1e:8f:8e:25:e0:16:cb:2a:73:e0:5b:d5:8d:2f:8d:
0b:b9:4a:70:ba:e5:0f:2e:66:0b:ad:9c:04:ec:2f:
e3:52:00:a6:dc:b1:52:66:28:3d:89:f8:a9:a1:c2:
cd:0c:b1:92:5f:c9:ad:3d:a6:46:ed:32:3c:7e:2d:
81:c6:d0:40:01:ab:4b:8b:29:a5:8f:1b:a4:2f:56:
71:e3:33:3f:38:a0:32:32:3e:b0:50:78:82:18:4b:
f4:d1:4a:af:28:13:a2:1f:05:0f:50:d8:dc:f7:80:
da:e0:50:c0:42:14:97:14:e9:f2:33:c6:a4:8e:12:
b8:1f:46:f2:7d:54:ac:23:b8:ef:25:a4:f8:fe:58:
42:e8:35:55:89:19:e3:a4:02:c2:14:06:34:e3:15:
0b:54:eb:fc:4c:6c:3f:12:ed:7a:ad:43:ff:c6:dc:
d7:96:c0:7a:bf:cf:57:06:e9:47:38:4a:f7:b5:05:
3a:3e:ad:9d:f8:42:56:4b:8b:25:62:f0:7b:82:87:
e1:38:37:b5:b1:e3:bd:c6:e6:1c:97:5e:d0:92:d6:
48:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A1:50:0D:FF:4E:1A:97:E3:47:64:3A:60:69:8B:A7:78:06:A9:BD
X509v3 Authority Key Identifier:
keyid:F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:52:42:86:26:00:74:39:58:c5:c4:f8:ec:3c:ec:38:78:6a:
70:3a:fe:60:c1:8f:0d:0b:16:e8:78:ab:46:87:9b:aa:13:09:
b5:4e:14:1d:1f:52:52:d3:b2:35:bb:b8:8c:de:44:ce:c9:98:
77:5f:32:d9:98:9f:0a:6b:14:88:67:a4:2f:27:f5:41:eb:64:
62:19:2e:92:2d:b5:60:0b:91:52:1a:b2:5c:84:10:b8:e0:ce:
70:b3:cd:b8:51:02:0c:18:91:7e:a5:f3:7f:a3:74:d2:4c:a6:
5d:fc:3b:51:f8:43:80:90:bb:90:e4:33:eb:f5:5b:38:13:e7:
fb:a4:2e:c1:24:5b:af:8d:cf:b5:a5:5e:d2:81:47:a4:18:45:
27:2d:97:44:43:8a:76:e3:df:d4:c7:ab:0e:f7:f1:99:a2:dc:
35:d7:6a:39:10:13:d7:9c:ba:e6:3c:8f:98:9d:1d:b6:ad:3e:
fc:09:a9:42:ff:47:92:bf:5b:bd:e1:14:9a:1c:92:d7:9f:a7:
8b:ee:05:66:2f:80:7c:f7:53:f1:6f:06:37:dc:05:d5:67:46:
25:c7:78:2d:01:97:8b:e2:34:8b:eb:cb:fb:eb:33:78:36:cb:
f2:60:6d:e3:f3:b3:2c:45:71:56:d1:ca:78:c8:3a:34:53:79:
17:19:a3:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5X7exDjQ/4JuSoUpvkCsXqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NzI4NjVmODE1MTBiOTQ1NWI3ZWE5YmM4YzdkYWQ3OTkz
ZDUzOWEwHhcNMjYwNTI0MDMwMTEwWhcNMjYwNTI1MDMwMTEwWjAzMTEwLwYDVQQD
EyhmMWExNTAwZGZmNGUxYTk3ZTM0NzY0M2E2MDY5OGJhNzc4MDZhOWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu5Z237u4t2le5moOSttuh9C/T0w
R81BEbZ8c4iHMoqMvdcSQ+1qaZ+g74wej44l4BbLKnPgW9WNL40LuUpwuuUPLmYL
rZwE7C/jUgCm3LFSZig9ifipocLNDLGSX8mtPaZG7TI8fi2BxtBAAatLiymljxuk
L1Zx4zM/OKAyMj6wUHiCGEv00UqvKBOiHwUPUNjc94Da4FDAQhSXFOnyM8akjhK4
H0byfVSsI7jvJaT4/lhC6DVViRnjpALCFAY04xULVOv8TGw/Eu16rUP/xtzXlsB6
v89XBulHOEr3tQU6Pq2d+EJWS4slYvB7gofhODe1seO9xuYcl17QktZIwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGhUA3/ThqX40dkOmBpi6d4Bqm9MB8GA1UdIwQY
MBaAFPZyhl+BUQuUVbfqm8jH2teZPVOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW5LR1g0RlJDNVJWdC1xYnlNZmExNWs5VTVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xNDM1MWMtYjFlZC00MThlLWJhZTQt
YTE5MjI3MDk3ZmYzLzEvOW5LR1g0RlJDNVJWdC1xYnlNZmExNWs5VTVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xNDM1MWMtYjFlZC00MThlLWJhZTQtYTE5MjI3MDk3ZmYz
LzEvOW5LR1g0RlJDNVJWdC1xYnlNZmExNWs5VTVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElJChiYA
dDlYxcT47DzsOHhqcDr+YMGPDQsW6HirRoebqhMJtU4UHR9SUtOyNbu4jN5EzsmY
d18y2ZifCmsUiGekLyf1QetkYhkuki21YAuRUhqyXIQQuODOcLPNuFECDBiRfqXz
f6N00kymXfw7UfhDgJC7kOQz6/VbOBPn+6QuwSRbr43PtaVe0oFHpBhFJy2XREOK
duPf1MerDvfxmaLcNddqORAT15y65jyPmJ0dtq0+/AmpQv9Hkr9bveEUmhyS15+n
i+4FZi+AfPdT8W8GN9wF1WdGJcd4LQGXi+I0i+vL++szeDbL8mBt4/OzLEVxVtHK
eMg6NFN5Fxmjww==
-----END CERTIFICATE-----
Generated at Sun May 24 04:37:52 2026 by rpki-client