Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
File: 9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json)
Hash identifier: vrsaOnCdz1rkCc6Z3jX/vsBJM26wQIlwT9RhTD68vFA=
Subject key identifier: 50:98:13:88:CA:64:C1:0F:31:CB:A7:E4:F8:89:86:10:BB:8C:5B:03
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Certificate issuer: /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial: 019F17C2D3A618B88F2BF84AEFF87A8A1BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
Manifest number: 08F1
Signing time: Tue 30 Jun 2026 09:01:11 +0000
Manifest this update: Tue 30 Jun 2026 09:01:11 +0000
Manifest next update: Wed 01 Jul 2026 09:01:11 +0000
Files and hashes: 1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: rLLd74lruMw9Sts7XjZ1Q0UNrvt+n3MYP8gWStDjJ/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:d3:a6:18:b8:8f:2b:f8:4a:ef:f8:7a:8a:1b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Validity
Not Before: Jun 30 09:01:11 2026 GMT
Not After : Jul 1 09:01:11 2026 GMT
Subject: CN=50981388ca64c10f31cba7e4f8898610bb8c5b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:ca:cf:c4:2d:4b:9c:a2:bd:bb:b3:8c:24:
ac:ea:9b:0c:03:72:f1:2f:be:15:f8:23:f0:29:62:
de:98:ad:79:7d:9f:ae:3a:5a:88:43:7f:fc:83:5b:
8c:2f:54:c1:d4:3e:60:96:66:20:45:ca:42:50:6e:
13:67:b8:77:14:0d:04:c2:9b:d2:42:d5:e4:5a:06:
61:cc:bc:58:b4:85:45:12:fc:ec:ee:19:09:c0:a1:
4c:9e:28:da:c2:34:70:3d:22:26:60:97:2c:78:8e:
7a:f6:b1:98:4b:81:67:38:02:f9:c4:d2:7a:73:ee:
30:34:74:86:64:17:35:d1:65:63:eb:c3:67:4d:18:
e0:51:4b:03:b3:0d:3f:81:d1:d3:c0:4c:ab:60:a4:
85:86:fe:7d:6c:50:6b:09:e4:34:33:eb:02:d7:84:
19:a8:28:06:cd:47:8b:32:4f:63:83:b3:42:26:81:
b4:f1:c1:14:b6:8a:8b:68:bc:3f:a7:cb:e0:c4:6f:
f0:f4:93:83:9f:35:45:38:23:72:27:21:a0:21:67:
34:a5:af:a8:81:39:e1:1c:9c:9c:b7:0f:f7:e1:82:
20:ba:12:c9:75:39:f4:aa:17:74:7d:09:58:f1:84:
6a:bf:90:c3:c3:80:90:55:44:6f:10:af:9f:9a:5b:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:98:13:88:CA:64:C1:0F:31:CB:A7:E4:F8:89:86:10:BB:8C:5B:03
X509v3 Authority Key Identifier:
keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:47:03:97:61:a8:e1:e8:8b:31:43:0f:66:31:19:69:ba:0f:
9e:53:b1:97:2b:54:c3:3b:5d:ea:ec:48:fb:22:85:e0:e9:1b:
11:c7:34:4e:10:9d:82:f4:a9:ad:19:09:1c:b8:c4:5d:7c:05:
31:67:3f:d6:38:b3:f4:4b:d1:de:ad:56:56:31:68:7c:78:45:
91:6e:46:20:41:a3:75:06:23:1e:bd:dd:e8:30:58:b9:79:3f:
11:07:ba:e8:34:0f:93:d4:a4:f5:ef:49:13:db:2d:bd:a6:62:
16:f3:8e:0a:7e:99:c2:1a:3c:d0:7d:30:f4:ee:fc:8c:a3:07:
f7:aa:e3:bd:d0:04:77:22:fc:ad:0a:48:3e:15:7b:dc:f5:9d:
dd:9d:a3:09:0d:92:ba:ee:14:a3:14:bf:5c:59:49:e2:08:0e:
80:05:03:71:7c:e0:58:23:0f:bf:08:44:d7:f9:ff:47:42:88:
62:c4:6e:9f:f3:0e:e3:ea:66:98:ef:c0:24:14:41:e0:79:c8:
34:ff:a5:79:ea:88:83:ae:ab:a2:a2:e3:13:ed:43:2f:a1:a2:
a4:26:22:23:49:2e:9f:6e:94:6c:39:f6:09:dc:08:09:ae:fa:
fd:54:b5:5a:cb:a2:60:00:6b:9e:a4:44:d1:ba:db:75:28:90:
1a:49:db:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XwtOmGLiPK/hK7/h6ihvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NWY3OTFmOWQwY2Y2Y2I2YmUzODljOTQ1NjhjODc3NDA1
ZTUxNDQwHhcNMjYwNjMwMDkwMTExWhcNMjYwNzAxMDkwMTExWjAzMTEwLwYDVQQD
Eyg1MDk4MTM4OGNhNjRjMTBmMzFjYmE3ZTRmODg5ODYxMGJiOGM1YjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKTKz8QtS5yivbuzjCSs6psMA3Lx
L74V+CPwKWLemK15fZ+uOlqIQ3/8g1uML1TB1D5glmYgRcpCUG4TZ7h3FA0EwpvS
QtXkWgZhzLxYtIVFEvzs7hkJwKFMnijawjRwPSImYJcseI569rGYS4FnOAL5xNJ6
c+4wNHSGZBc10WVj68NnTRjgUUsDsw0/gdHTwEyrYKSFhv59bFBrCeQ0M+sC14QZ
qCgGzUeLMk9jg7NCJoG08cEUtoqLaLw/p8vgxG/w9JODnzVFOCNyJyGgIWc0pa+o
gTnhHJyctw/34YIguhLJdTn0qhd0fQlY8YRqv5DDw4CQVURvEK+fmluemwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCYE4jKZMEPMcun5PiJhhC7jFsDMB8GA1UdIwQY
MBaAFPZfeR+dDPbLa+OJyUVoyHdAXlFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWw5NUg1ME05c3RyNDRuSlJXaklkMEJlVVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xNzM4OTQtMjBkNS00ZDA0LWJlNzAt
Y2QwMzc0MWQyNmI1LzEvOWw5NUg1ME05c3RyNDRuSlJXaklkMEJlVVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xNzM4OTQtMjBkNS00ZDA0LWJlNzAtY2QwMzc0MWQyNmI1
LzEvOWw5NUg1ME05c3RyNDRuSlJXaklkMEJlVVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkcDl2Go
4eiLMUMPZjEZaboPnlOxlytUwztd6uxI+yKF4OkbEcc0ThCdgvSprRkJHLjEXXwF
MWc/1jiz9EvR3q1WVjFofHhFkW5GIEGjdQYjHr3d6DBYuXk/EQe66DQPk9Sk9e9J
E9stvaZiFvOOCn6Zwho80H0w9O78jKMH96rjvdAEdyL8rQpIPhV73PWd3Z2jCQ2S
uu4UoxS/XFlJ4ggOgAUDcXzgWCMPvwhE1/n/R0KIYsRun/MO4+pmmO/AJBRB4HnI
NP+leeqIg66roqLjE+1DL6GipCYiI0kun26UbDn2CdwICa76/VS1WsuiYABrnqRE
0brbdSiQGknboQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:56 2026 by rpki-client