Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: KZLLfuGnfeuujS7801e2n4cdd/F0ck6bwVVNBbpbWrE=
Subject key identifier: 33:FF:A4:13:66:35:17:A6:EE:EA:1F:F2:46:89:D9:E6:3C:A7:35:64
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 019FA9AC34659DFDD3819B508344530A82A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 0D3C
Signing time: Tue 28 Jul 2026 17:01:02 +0000
Manifest this update: Tue 28 Jul 2026 17:01:02 +0000
Manifest next update: Wed 29 Jul 2026 17:01:02 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: hSiBmwfkYL/5WQopxmMvPpcK3ZN+Z5ZKJtt10g3w9Ts=)
2: GKyDs47a7BqJFaT8Ozcx1DPKrA4.roa (hash: IeQFtuvzwY+Djd9V29XWo6xDkNMsoIv44LxRAtukIHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:34:65:9d:fd:d3:81:9b:50:83:44:53:0a:82:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Jul 28 17:01:02 2026 GMT
Not After : Jul 29 17:01:02 2026 GMT
Subject: CN=33ffa413663517a6eeea1ff24689d9e63ca73564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:15:00:1e:d0:d6:d5:0d:ec:de:51:7f:c5:99:
81:78:5a:40:73:ec:0d:36:9f:f6:3b:23:d9:e4:2e:
0b:63:73:86:de:72:05:fc:27:ee:b9:de:86:11:06:
73:bc:47:5a:81:d8:c7:9a:cf:01:e7:b4:00:2f:75:
72:50:f8:dd:93:0e:c6:2a:ea:c7:a4:ad:f6:ea:38:
bf:9e:13:ff:74:da:24:f3:38:e4:8d:9b:62:ea:c7:
36:bf:41:93:aa:ca:88:f2:30:6a:47:eb:2a:0e:c2:
81:54:a5:35:f1:79:be:23:81:2c:e0:56:3a:b7:68:
98:77:fb:ee:19:9d:cf:d4:b7:53:ef:b6:86:29:e7:
b1:4a:2f:a7:26:e2:91:3e:8b:c1:57:9a:4c:f0:f3:
4c:9a:99:19:26:75:09:f9:ab:fd:c5:ec:4a:c6:e8:
c0:b2:09:aa:61:0e:a8:20:f8:88:c8:0d:a1:06:37:
2f:15:77:fe:6d:44:70:99:dc:e7:ef:64:b6:fe:1b:
54:1a:f5:02:b2:4a:08:12:c6:a1:4c:b4:bd:61:1c:
eb:0b:42:12:39:49:f5:ab:1d:de:89:e8:a1:38:ec:
c8:40:85:bb:47:58:fa:b7:0d:c7:bb:30:34:11:1b:
2d:3a:41:99:e1:bd:af:f7:e4:b9:23:f8:98:cf:eb:
20:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FF:A4:13:66:35:17:A6:EE:EA:1F:F2:46:89:D9:E6:3C:A7:35:64
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9d:56:7d:15:e4:4c:ce:49:55:a7:3f:bf:f4:84:83:fd:c2:
20:86:55:b4:6b:29:a7:8d:77:56:6c:55:bf:12:60:4e:8a:22:
03:15:eb:11:09:16:8c:28:48:e1:41:40:20:fd:02:77:59:7b:
71:9e:59:a4:8f:b0:13:84:61:b4:cc:05:e4:de:08:5d:80:b7:
6e:45:01:f2:5f:06:55:4d:18:60:7a:a7:f1:00:bb:01:8f:95:
37:2a:50:ff:a3:16:54:1f:c9:61:49:a9:65:e2:17:c7:cb:f3:
76:5a:6a:91:62:bf:d3:3d:cd:5b:02:15:0d:d2:73:38:ad:0b:
e4:8e:2f:9d:01:97:38:97:ac:da:11:86:a5:8f:13:6c:a0:10:
f1:69:dc:3f:96:4a:2b:c7:48:2a:80:54:28:ac:24:30:3f:af:
d2:4d:73:a4:12:68:64:81:cf:70:f4:20:12:6d:fc:1c:8e:fe:
e9:f3:95:39:ed:bd:ed:3b:b1:e5:0a:cd:31:13:3c:d1:af:b8:
a4:6d:89:02:18:df:6a:90:15:6c:c0:81:ea:9e:56:26:a5:d1:
7a:96:08:8b:2d:aa:aa:a5:1e:06:d8:49:ff:3b:75:7c:93:25:
e3:78:7f:4e:ef:31:26:e9:d2:55:1f:2a:f4:d0:3f:eb:82:72:
96:66:b2:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prDRlnf3TgZtQg0RTCoKpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MzE0YzFmOWUxMTkzYzIwMjVjYjY3MmI1MjM1NzM5Nzhk
MjU0ZDkwHhcNMjYwNzI4MTcwMTAyWhcNMjYwNzI5MTcwMTAyWjAzMTEwLwYDVQQD
EygzM2ZmYTQxMzY2MzUxN2E2ZWVlYTFmZjI0Njg5ZDllNjNjYTczNTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRUAHtDW1Q3s3lF/xZmBeFpAc+wN
Np/2OyPZ5C4LY3OG3nIF/Cfuud6GEQZzvEdagdjHms8B57QAL3VyUPjdkw7GKurH
pK326ji/nhP/dNok8zjkjZti6sc2v0GTqsqI8jBqR+sqDsKBVKU18Xm+I4Es4FY6
t2iYd/vuGZ3P1LdT77aGKeexSi+nJuKRPovBV5pM8PNMmpkZJnUJ+av9xexKxujA
sgmqYQ6oIPiIyA2hBjcvFXf+bURwmdzn72S2/htUGvUCskoIEsahTLS9YRzrC0IS
OUn1qx3eieihOOzIQIW7R1j6tw3HuzA0ERstOkGZ4b2v9+S5I/iYz+sgiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDP/pBNmNRem7uof8kaJ2eY8pzVkMB8GA1UdIwQY
MBaAFPUxTB+eEZPCAly2crUjVzl40lTZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8xZDA5ZTYtYWU3Yi00MzRjLTk5ZWMt
NzM4Yzc0OTJmNzY4LzEvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8xZDA5ZTYtYWU3Yi00MzRjLTk5ZWMtNzM4Yzc0OTJmNzY4
LzEvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJ1WfRXk
TM5JVac/v/SEg/3CIIZVtGspp413VmxVvxJgTooiAxXrEQkWjChI4UFAIP0Cd1l7
cZ5ZpI+wE4RhtMwF5N4IXYC3bkUB8l8GVU0YYHqn8QC7AY+VNypQ/6MWVB/JYUmp
ZeIXx8vzdlpqkWK/0z3NWwIVDdJzOK0L5I4vnQGXOJes2hGGpY8TbKAQ8WncP5ZK
K8dIKoBUKKwkMD+v0k1zpBJoZIHPcPQgEm38HI7+6fOVOe297Tux5QrNMRM80a+4
pG2JAhjfapAVbMCB6p5WJqXRepYIiy2qqqUeBthJ/zt1fJMl43h/Tu8xJunSVR8q
9NA/64JylmayWg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:16:10 2026 by rpki-client