Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
File: 9h0r7udUOkGpCKGgHs_AqHJqOuI.mft (raw, json)
Hash identifier: ZXIcqVnDQwY7ZooBtSPuOdgDTLANFzuv/pSyd2PFieI=
Subject key identifier: 10:D5:4C:97:4C:EC:CC:90:6D:22:05:C1:97:19:7B:2F:C6:DC:79:4F
Authority key identifier: F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
Certificate issuer: /CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Certificate serial: 019EC17F7C9D4B487F6180EF49AEBD5DB425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
Manifest number: 0DFC
Signing time: Sat 13 Jun 2026 15:00:18 +0000
Manifest this update: Sat 13 Jun 2026 15:00:18 +0000
Manifest next update: Sun 14 Jun 2026 15:00:18 +0000
Files and hashes: 1: 9h0r7udUOkGpCKGgHs_AqHJqOuI.crl (hash: FbMv1gbsSkBYu5o4VzMoaAffJ/21XT7kEQvlUDPiYjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:7c:9d:4b:48:7f:61:80:ef:49:ae:bd:5d:b4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Validity
Not Before: Jun 13 15:00:18 2026 GMT
Not After : Jun 14 15:00:18 2026 GMT
Subject: CN=10d54c974ceccc906d2205c197197b2fc6dc794f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:2e:7c:79:7a:9d:db:49:d7:8a:a5:a9:a8:
53:0e:25:0a:2f:8b:03:c4:8a:59:71:e5:ed:61:5b:
0f:21:49:fc:29:9c:7e:72:2f:cb:e8:b2:b0:20:ba:
c4:03:ce:5d:86:a4:12:5d:ae:a2:db:9f:d0:a2:d9:
7e:61:bb:f3:1d:ee:21:6e:cd:e0:30:5e:45:28:2b:
56:80:66:56:94:aa:f7:98:be:5d:40:12:a9:e8:30:
98:50:ed:09:3f:45:fc:2d:dc:9c:a3:26:49:ee:d7:
ad:0b:1b:a8:85:08:ef:fc:74:04:2e:34:f1:b6:99:
63:0c:f1:60:f2:0a:f8:e5:da:fa:a9:09:77:7e:54:
2a:18:71:f0:d4:32:e2:d1:17:fc:7d:21:4b:66:33:
54:53:69:69:41:77:2c:0d:dc:cf:90:34:ba:28:a4:
6e:40:23:bb:1a:25:ab:3f:09:50:0a:71:13:41:ae:
bd:24:c0:90:ae:d8:df:df:c6:99:80:cf:fe:2c:aa:
27:09:2e:b5:a8:3f:ea:93:cd:6b:51:4d:ff:a0:4d:
e8:f9:da:19:6d:22:52:19:6c:44:b0:89:7b:e1:a0:
c5:86:61:11:07:e4:75:93:0f:a8:78:6b:a7:f5:63:
eb:c1:5e:e0:42:a9:f7:0e:24:9e:a2:9a:a8:81:09:
8a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D5:4C:97:4C:EC:CC:90:6D:22:05:C1:97:19:7B:2F:C6:DC:79:4F
X509v3 Authority Key Identifier:
keyid:F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:47:ee:a0:31:8e:77:dc:9c:8f:0f:31:ea:1b:29:5d:43:58:
92:e8:ca:d8:34:ff:91:f3:78:90:43:30:2f:ba:c9:ec:32:6d:
e8:e7:ce:d7:b9:26:b9:c2:38:42:39:46:c2:b6:9a:98:f1:3f:
cd:c5:1f:8c:9f:c4:4f:7e:b6:c1:7c:b1:30:3b:86:1e:c5:e8:
dd:96:6f:7f:38:20:4b:42:56:79:ec:72:ed:be:f5:13:ab:24:
4f:fa:75:73:42:9c:28:22:95:ed:70:53:20:28:7b:49:a3:21:
6d:50:73:a1:0e:70:18:9c:b0:ed:8d:11:0f:ae:a2:3a:9c:90:
d2:f3:b0:7d:b9:7e:16:d3:cc:88:bf:ab:fa:6f:82:44:88:fb:
42:58:db:7e:ba:2a:7f:15:98:cf:19:b9:0e:71:cc:ef:16:de:
30:47:91:c8:5a:0e:6a:53:e5:2a:e1:1c:5f:2a:7e:51:20:73:
17:89:a1:41:4f:3b:63:03:f8:f0:bf:72:ef:28:b6:61:ec:1a:
3e:83:d7:1f:63:09:6d:05:a4:35:3e:d8:48:c3:9a:dd:fe:1f:
7c:79:00:1d:b3:b2:20:b2:3b:8e:3d:6a:e3:09:ae:d1:4f:d8:
61:5b:c5:f5:17:e6:dc:55:1e:38:f4:cb:a8:5b:7b:2b:e8:c6:
39:b7:ef:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bf3ydS0h/YYDvSa69XbQlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MWQyYmVlZTc1NDNhNDFhOTA4YTFhMDFlY2ZjMGE4NzI2
YTNhZTIwHhcNMjYwNjEzMTUwMDE4WhcNMjYwNjE0MTUwMDE4WjAzMTEwLwYDVQQD
EygxMGQ1NGM5NzRjZWNjYzkwNmQyMjA1YzE5NzE5N2IyZmM2ZGM3OTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09IufHl6ndtJ14qlqahTDiUKL4sD
xIpZceXtYVsPIUn8KZx+ci/L6LKwILrEA85dhqQSXa6i25/Qotl+YbvzHe4hbs3g
MF5FKCtWgGZWlKr3mL5dQBKp6DCYUO0JP0X8LdycoyZJ7tetCxuohQjv/HQELjTx
tpljDPFg8gr45dr6qQl3flQqGHHw1DLi0Rf8fSFLZjNUU2lpQXcsDdzPkDS6KKRu
QCO7GiWrPwlQCnETQa69JMCQrtjf38aZgM/+LKonCS61qD/qk81rUU3/oE3o+doZ
bSJSGWxEsIl74aDFhmERB+R1kw+oeGun9WPrwV7gQqn3DiSeopqogQmKAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDVTJdM7MyQbSIFwZcZey/G3HlPMB8GA1UdIwQY
MBaAFPYdK+7nVDpBqQihoB7PwKhyajriMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWgwcjd1ZFVPa0dwQ0tHZ0hzX0FxSEpxT3VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8xZWRmMTAtZDNkZi00MGY1LWI0YTMt
YTczMWU5ZTFlNTMzLzEvOWgwcjd1ZFVPa0dwQ0tHZ0hzX0FxSEpxT3VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8xZWRmMTAtZDNkZi00MGY1LWI0YTMtYTczMWU5ZTFlNTMz
LzEvOWgwcjd1ZFVPa0dwQ0tHZ0hzX0FxSEpxT3VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkfuoDGO
d9ycjw8x6hspXUNYkujK2DT/kfN4kEMwL7rJ7DJt6OfO17kmucI4QjlGwraamPE/
zcUfjJ/ET362wXyxMDuGHsXo3ZZvfzggS0JWeexy7b71E6skT/p1c0KcKCKV7XBT
ICh7SaMhbVBzoQ5wGJyw7Y0RD66iOpyQ0vOwfbl+FtPMiL+r+m+CRIj7Qljbfroq
fxWYzxm5DnHM7xbeMEeRyFoOalPlKuEcXyp+USBzF4mhQU87YwP48L9y7yi2Yewa
PoPXH2MJbQWkNT7YSMOa3f4ffHkAHbOyILI7jj1q4wmu0U/YYVvF9Rfm3FUeOPTL
qFt7K+jGObfv1g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:04:04 2026 by rpki-client