Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: n+47T0WoyulPgDIWDkHU/ZLYmdO5yblqkVFVPT89CTs=
Subject key identifier: 5C:66:62:CA:67:C1:A5:20:FE:DF:41:41:FC:AD:54:CA:89:A8:EB:E0
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 019D99D0D3522B90F5D76DE4651066506C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 11A9
Signing time: Fri 17 Apr 2026 05:01:32 +0000
Manifest this update: Fri 17 Apr 2026 05:01:32 +0000
Manifest next update: Sat 18 Apr 2026 05:01:32 +0000
Files and hashes: 1: 6YI5rJ7BlGzxSIRA8GPA9weBdeE.roa (hash: Rjqr+vNFn+Ln+ETYNFvgxdo2liKvZUHKE0VAbwfjlW8=)
2: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: QR0mQl6NL6R+d8wio4PRdFJ/ajXbEiujmwdXzADfBOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:d3:52:2b:90:f5:d7:6d:e4:65:10:66:50:6c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: Apr 17 05:01:32 2026 GMT
Not After : Apr 18 05:01:32 2026 GMT
Subject: CN=5c6662ca67c1a520fedf4141fcad54ca89a8ebe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:be:9d:2b:4b:b7:23:bb:fc:f7:f7:c2:e1:
c2:eb:78:da:32:fe:3b:d7:22:98:6b:39:e7:38:ce:
7a:a2:88:45:13:be:a3:21:17:94:ec:76:8f:2e:30:
bc:88:0d:b2:f9:4d:f8:8d:7a:ea:44:ae:6e:22:ad:
a2:41:30:6e:db:54:c6:90:14:cf:27:0d:97:04:85:
fc:e3:cd:b2:fa:aa:fa:0d:1a:f8:40:be:de:1b:d5:
24:44:98:9f:c7:2e:ed:7a:5f:b7:6a:a1:6e:9a:6b:
65:f9:c5:8f:52:29:4c:e9:bb:c4:bd:2c:b4:a2:a2:
9c:84:32:a2:a5:80:c9:91:ef:2f:05:d8:07:9c:e6:
74:23:58:3f:18:7e:71:28:24:ea:dc:c1:d4:62:3c:
9f:7f:93:86:e4:11:44:63:bd:b3:7e:15:ce:de:a6:
60:0d:d0:26:1d:6e:f0:d5:49:2a:c7:61:5b:4e:e0:
92:e3:4f:09:14:f2:b0:35:aa:c0:12:e7:c1:45:d8:
95:43:0d:c0:5c:8a:a8:f7:1b:a7:8f:39:45:33:08:
29:61:6e:c9:11:30:5c:83:5c:fc:ff:28:25:54:f5:
24:1d:ff:37:6a:d6:0f:a4:42:81:b7:19:8a:6a:c8:
e3:62:52:50:ab:9c:40:d9:87:e4:a4:cc:09:0e:46:
32:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:66:62:CA:67:C1:A5:20:FE:DF:41:41:FC:AD:54:CA:89:A8:EB:E0
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d0:d7:bf:20:02:4a:a5:a5:b8:2f:15:13:07:16:a1:64:ea:
4b:c0:cb:cf:81:1a:a4:48:28:2b:ba:0d:3f:6f:d1:24:2d:ec:
b9:ed:89:50:a9:99:44:8d:c9:99:85:a2:3b:5f:92:28:cb:68:
32:09:96:4b:e5:d2:ec:06:32:26:31:35:be:eb:01:86:84:cd:
4f:38:a8:62:ae:dd:47:17:1b:46:2c:7a:71:6a:39:a4:35:a3:
66:a5:b2:13:98:e0:94:92:fa:a9:75:30:ba:30:6a:c1:cf:52:
7d:c5:f4:27:de:d8:1b:ba:c0:34:50:6f:e7:db:3b:68:a0:ae:
b1:99:d8:5b:c1:bd:14:a8:bc:12:32:63:00:01:93:78:3f:9c:
59:74:42:d6:13:cd:36:e0:43:2b:eb:d8:eb:42:ae:c1:a2:ae:
e5:8c:8c:df:83:b9:76:a5:97:4e:c4:35:a7:94:ee:bc:4b:50:
0b:d3:10:e2:ca:a1:ab:90:30:d3:fa:5b:a4:2a:b9:88:4c:f3:
8c:da:d1:ec:d0:57:58:ef:c0:e8:76:61:88:72:e3:17:7e:49:
42:71:1d:f7:79:cc:36:c5:be:66:46:e3:eb:99:31:dc:1c:89:
ae:b1:c7:40:2f:6d:f8:9c:3d:f7:51:87:d2:30:fe:1c:94:2d:
cb:54:7d:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0NNSK5D1123kZRBmUGw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2Y2IwYzhmMjA4NDMzMDIwMzRmNjM2NTZlYTI5ZWJkNmQx
MTYzYWEwHhcNMjYwNDE3MDUwMTMyWhcNMjYwNDE4MDUwMTMyWjAzMTEwLwYDVQQD
Eyg1YzY2NjJjYTY3YzFhNTIwZmVkZjQxNDFmY2FkNTRjYTg5YThlYmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwga+nStLtyO7/Pf3wuHC63jaMv47
1yKYaznnOM56oohFE76jIReU7HaPLjC8iA2y+U34jXrqRK5uIq2iQTBu21TGkBTP
Jw2XBIX8482y+qr6DRr4QL7eG9UkRJifxy7tel+3aqFummtl+cWPUilM6bvEvSy0
oqKchDKipYDJke8vBdgHnOZ0I1g/GH5xKCTq3MHUYjyff5OG5BFEY72zfhXO3qZg
DdAmHW7w1Ukqx2FbTuCS408JFPKwNarAEufBRdiVQw3AXIqo9xunjzlFMwgpYW7J
ETBcg1z8/yglVPUkHf83atYPpEKBtxmKasjjYlJQq5xA2YfkpMwJDkYyQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxmYspnwaUg/t9BQfytVMqJqOvgMB8GA1UdIwQY
MBaAFPbLDI8ghDMCA09jZW6inr1tEWOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUt
MmFmM2Q2MmJlN2YyLzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUtMmFmM2Q2MmJlN2Yy
LzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9DXvyAC
SqWluC8VEwcWoWTqS8DLz4EapEgoK7oNP2/RJC3sue2JUKmZRI3JmYWiO1+SKMto
MgmWS+XS7AYyJjE1vusBhoTNTzioYq7dRxcbRix6cWo5pDWjZqWyE5jglJL6qXUw
ujBqwc9SfcX0J97YG7rANFBv59s7aKCusZnYW8G9FKi8EjJjAAGTeD+cWXRC1hPN
NuBDK+vY60KuwaKu5YyM34O5dqWXTsQ1p5TuvEtQC9MQ4sqhq5Aw0/pbpCq5iEzz
jNrR7NBXWO/A6HZhiHLjF35JQnEd93nMNsW+Zkbj65kx3ByJrrHHQC9t+Jw991GH
0jD+HJQty1R9Aw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:15 2026 by rpki-client