Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
File: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json)
Hash identifier: ILpvDRCGdNltrLbK/XITxNlSsfO5bJLQwdIsyX+m9OA=
Subject key identifier: 4C:78:18:94:21:46:19:61:4B:7D:4C:FB:E2:7B:FA:CC:62:68:9A:4A
Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
Certificate issuer: /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Certificate serial: 019FA93E320EBE288208A1541A24F0B79B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
Manifest number: 0954
Signing time: Tue 28 Jul 2026 15:00:53 +0000
Manifest this update: Tue 28 Jul 2026 15:00:53 +0000
Manifest next update: Wed 29 Jul 2026 15:00:53 +0000
Files and hashes: 1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: 5VQ2FOJtit7uRT9i//K7yvmpVrbpAUddCZz31iLSk6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:32:0e:be:28:82:08:a1:54:1a:24:f0:b7:9b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Validity
Not Before: Jul 28 15:00:53 2026 GMT
Not After : Jul 29 15:00:53 2026 GMT
Subject: CN=4c781894214619614b7d4cfbe27bfacc62689a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:16:9d:33:6e:d4:bc:02:81:18:63:88:65:b3:
94:19:54:97:9d:f0:a6:de:90:dd:d4:13:0a:d2:3d:
37:50:cb:13:0c:ce:05:f2:05:f6:f0:74:32:6c:fc:
fb:60:00:bf:54:92:6b:4f:b9:cd:79:0f:87:d4:a1:
9f:ea:14:a8:7e:8b:60:0d:10:2b:a6:66:46:68:de:
56:fa:b4:d5:13:5e:07:9d:61:e1:4e:31:56:40:a8:
43:fd:4d:f9:14:e4:f2:06:a5:19:33:e1:8c:aa:8d:
1b:a7:91:e9:5e:34:31:22:93:39:bf:8f:43:ca:8f:
28:d1:20:7d:89:0b:d7:91:ea:2b:e8:3d:7b:da:fe:
34:3e:7a:2b:77:9f:2e:21:54:b6:41:6d:55:80:78:
04:48:ae:1e:11:a2:1b:0b:e1:bc:08:58:65:1f:b7:
71:6c:19:67:f1:15:06:c8:6a:15:92:2c:8d:71:13:
7c:22:d4:9c:f5:ca:69:86:67:46:ba:73:99:27:93:
0b:ca:dc:44:75:f4:c3:46:2c:ba:3a:5f:50:69:01:
a5:14:6c:8a:fd:a9:a1:02:77:a8:0f:39:ad:26:f7:
f1:09:d1:0d:e3:d1:0d:16:f2:84:7a:27:1a:0c:e2:
95:5a:21:91:e5:50:3c:99:b4:60:b3:74:c6:73:8a:
e9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:78:18:94:21:46:19:61:4B:7D:4C:FB:E2:7B:FA:CC:62:68:9A:4A
X509v3 Authority Key Identifier:
keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:cc:b8:f3:98:a7:84:60:e0:7c:4e:71:a9:a5:e1:e0:43:59:
3f:23:ba:3a:10:7a:2e:b6:f9:f0:56:c9:d8:bc:11:8b:87:8f:
53:63:82:ef:41:72:a6:65:4f:2b:6d:1f:51:04:84:10:73:a2:
e9:f5:9c:70:f3:7e:91:5e:0b:b2:97:64:41:73:ad:d7:c9:43:
b3:77:ea:7c:3e:bd:80:34:72:9a:2a:3f:ab:90:a3:b8:28:3b:
d5:cd:c4:7d:b5:0b:22:5c:1c:6c:2a:f6:48:a4:c5:92:47:c8:
54:ab:ad:54:98:43:49:5d:51:7c:3a:d9:89:81:0a:2a:33:10:
91:3e:ee:c5:17:0c:a1:83:bd:31:71:98:26:9e:98:4b:da:8d:
fb:37:9a:ab:bc:4f:61:eb:b0:c0:50:5e:61:52:9f:cc:a0:ae:
ff:5e:20:cb:a2:a6:36:3e:8c:3e:22:61:5e:0a:07:a9:1f:9a:
3c:7c:c3:99:d3:64:fb:c8:7e:ef:d2:72:0d:0b:ff:38:50:78:
08:da:2a:c1:fc:aa:59:e9:bd:05:bc:4b:5a:76:6b:6b:5d:10:
c0:0d:c6:6d:6f:5f:37:f4:c4:fc:e1:1d:4e:97:b1:09:de:75:
90:29:aa:eb:39:b0:5c:d8:f3:8a:8c:2d:f2:bc:3f:fe:ad:a9:
e9:78:79:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPjIOviiCCKFUGiTwt5uQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MzkxY2ZkMjhiMDdlNmE5ZTFjYTMyNTZjZGI4MjAxN2Iy
YjU2MjEwHhcNMjYwNzI4MTUwMDUzWhcNMjYwNzI5MTUwMDUzWjAzMTEwLwYDVQQD
Eyg0Yzc4MTg5NDIxNDYxOTYxNGI3ZDRjZmJlMjdiZmFjYzYyNjg5YTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxadM27UvAKBGGOIZbOUGVSXnfCm
3pDd1BMK0j03UMsTDM4F8gX28HQybPz7YAC/VJJrT7nNeQ+H1KGf6hSofotgDRAr
pmZGaN5W+rTVE14HnWHhTjFWQKhD/U35FOTyBqUZM+GMqo0bp5HpXjQxIpM5v49D
yo8o0SB9iQvXkeor6D172v40Pnord58uIVS2QW1VgHgESK4eEaIbC+G8CFhlH7dx
bBln8RUGyGoVkiyNcRN8ItSc9cpphmdGunOZJ5MLytxEdfTDRiy6Ol9QaQGlFGyK
/amhAneoDzmtJvfxCdEN49ENFvKEeicaDOKVWiGR5VA8mbRgs3TGc4rpaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEx4GJQhRhlhS31M++J7+sxiaJpKMB8GA1UdIwQY
MBaAFPQ5HP0osH5qnhyjJWzbggF7K1YhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iNmVhM2UtY2M5MS00OGJmLTg2YmMt
ZTVhOWJhOGY1NmFlLzEvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9iNmVhM2UtY2M5MS00OGJmLTg2YmMtZTVhOWJhOGY1NmFl
LzEvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUsy485in
hGDgfE5xqaXh4ENZPyO6OhB6Lrb58FbJ2LwRi4ePU2OC70FypmVPK20fUQSEEHOi
6fWccPN+kV4LspdkQXOt18lDs3fqfD69gDRymio/q5CjuCg71c3EfbULIlwcbCr2
SKTFkkfIVKutVJhDSV1RfDrZiYEKKjMQkT7uxRcMoYO9MXGYJp6YS9qN+zeaq7xP
YeuwwFBeYVKfzKCu/14gy6KmNj6MPiJhXgoHqR+aPHzDmdNk+8h+79JyDQv/OFB4
CNoqwfyqWem9BbxLWnZra10QwA3GbW9fN/TE/OEdTpexCd51kCmq6zmwXNjziowt
8rw//q2p6Xh5ww==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:19 2026 by rpki-client