Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
File: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft (raw, json)
Hash identifier: u+pAc212m6v4bo5zxDije3FMSgSxnT8WlPFUL9Y2sas=
Subject key identifier: BA:6F:76:BB:98:53:42:93:99:55:47:C3:41:70:1F:37:24:E9:6F:DC
Authority key identifier: F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
Certificate issuer: /CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Certificate serial: 019D98BD853CDE12F4E980D108CF1935F51E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
Manifest number: 1009
Signing time: Fri 17 Apr 2026 00:00:50 +0000
Manifest this update: Fri 17 Apr 2026 00:00:50 +0000
Manifest next update: Sat 18 Apr 2026 00:00:50 +0000
Files and hashes: 1: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl (hash: qI9qYpprZMlY70RIPdxyLHBHFCVlLEO0S3dlErbEOCs=)
2: vDD2m5C7Pq8JC2jJeptUPHTPiW4.roa (hash: IslrtVbkyC6BHr/5GuZpnn/vnO+GSJxpxZntKhzxnaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:85:3c:de:12:f4:e9:80:d1:08:cf:19:35:f5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Validity
Not Before: Apr 17 00:00:50 2026 GMT
Not After : Apr 18 00:00:50 2026 GMT
Subject: CN=ba6f76bb98534293995547c341701f3724e96fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e7:3a:41:89:60:f0:c3:db:35:08:5a:87:4e:
9e:5d:cf:3f:9a:bd:4a:c4:ac:f4:54:7c:31:d9:49:
70:e8:ef:19:68:bc:6a:0b:90:31:c6:25:57:ab:f7:
fc:40:21:9b:20:ac:d6:d9:98:87:4c:ac:b3:66:23:
47:36:cd:d3:db:2d:a3:58:68:d9:db:e9:78:1a:49:
fc:3b:75:f6:d8:0a:1d:b1:fd:a6:5c:e5:54:d3:9c:
7f:4a:d2:e8:ca:ae:7d:c4:83:84:c4:dd:1b:a5:26:
17:72:ed:16:2d:0e:67:18:77:7d:2e:af:e8:7b:7f:
a6:0a:e6:e2:a2:37:ea:5b:01:aa:72:66:60:7f:5a:
18:aa:78:97:7b:8d:8c:e6:b6:7d:41:f6:83:7e:e6:
6f:42:d0:bb:b3:bf:c1:a3:1e:33:38:93:b4:4b:bf:
f9:e7:07:6d:df:cc:c7:e8:bf:ae:88:5e:93:6a:c6:
26:ce:6a:b0:99:f3:4e:f9:5f:9e:5d:99:89:bc:f7:
f4:c2:26:e6:48:d9:27:81:5e:a6:73:3b:f0:1b:07:
07:0a:81:52:a8:35:0f:02:db:e1:4c:06:fa:67:a3:
b6:ed:26:b2:e2:cc:0a:c2:a6:6d:11:27:ee:1d:b9:
00:29:db:cf:38:28:29:17:fd:04:af:a5:a1:b4:2a:
54:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6F:76:BB:98:53:42:93:99:55:47:C3:41:70:1F:37:24:E9:6F:DC
X509v3 Authority Key Identifier:
keyid:F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a4:5b:2e:06:46:59:d1:59:c7:99:e4:ee:a6:41:15:d8:ff:
c6:be:ef:c0:fc:48:93:35:3c:ef:fb:28:50:b9:5d:4e:48:f5:
fa:45:ee:d7:07:8a:e1:fe:4d:5c:f5:c7:ec:bd:c2:25:47:e5:
b0:60:60:5f:59:f8:c8:20:7e:ca:74:76:37:f6:c0:08:86:9d:
f3:84:57:6e:bf:17:2c:31:ce:c6:3e:cf:fd:9b:21:30:d7:b1:
d9:57:03:39:a1:0d:65:a2:ad:1c:87:e8:09:8a:ba:fb:8c:14:
53:54:c4:b3:41:7c:7c:3c:5a:54:a2:6c:1c:f5:87:37:b5:8b:
30:8f:de:38:38:06:51:c6:f7:d8:4a:41:24:30:61:60:cb:68:
4e:8a:e0:4e:1e:5f:99:bd:0c:69:69:66:14:35:95:d2:da:bf:
73:39:5a:0d:3a:15:2d:eb:5b:65:45:c2:92:10:03:92:ba:25:
97:20:ff:02:66:f9:99:68:24:36:6d:59:6a:44:37:98:c9:c6:
f7:00:2f:bf:bc:44:84:7e:b2:e8:ff:c8:b5:a3:e5:c1:1e:27:
fa:27:bd:dd:e5:46:cb:55:24:cd:d1:d0:31:a8:d4:01:13:ef:
78:bb:32:ce:41:e0:48:f9:e2:51:a6:9b:58:4c:7e:1b:57:59:
c8:7c:2f:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvYU83hL06YDRCM8ZNfUeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZDUzNTA4M2ZiMTQwZGRhYjQ1M2FiZjgyMWY1ZGIzYTZm
NDYxYTQwHhcNMjYwNDE3MDAwMDUwWhcNMjYwNDE4MDAwMDUwWjAzMTEwLwYDVQQD
EyhiYTZmNzZiYjk4NTM0MjkzOTk1NTQ3YzM0MTcwMWYzNzI0ZTk2ZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOc6QYlg8MPbNQhah06eXc8/mr1K
xKz0VHwx2Ulw6O8ZaLxqC5AxxiVXq/f8QCGbIKzW2ZiHTKyzZiNHNs3T2y2jWGjZ
2+l4Gkn8O3X22Aodsf2mXOVU05x/StLoyq59xIOExN0bpSYXcu0WLQ5nGHd9Lq/o
e3+mCubiojfqWwGqcmZgf1oYqniXe42M5rZ9QfaDfuZvQtC7s7/Box4zOJO0S7/5
5wdt38zH6L+uiF6TasYmzmqwmfNO+V+eXZmJvPf0wibmSNkngV6mczvwGwcHCoFS
qDUPAtvhTAb6Z6O27Say4swKwqZtESfuHbkAKdvPOCgpF/0Er6WhtCpUhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpvdruYU0KTmVVHw0FwHzck6W/cMB8GA1UdIwQY
MBaAFPfVNQg/sUDdq0U6v4IfXbOm9GGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85M2NlNjItNmYzZC00OTNjLWJmNmYt
NWNkODg1NDg5ZjgyLzEvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85M2NlNjItNmYzZC00OTNjLWJmNmYtNWNkODg1NDg5Zjgy
LzEvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6RbLgZG
WdFZx5nk7qZBFdj/xr7vwPxIkzU87/soULldTkj1+kXu1weK4f5NXPXH7L3CJUfl
sGBgX1n4yCB+ynR2N/bACIad84RXbr8XLDHOxj7P/ZshMNex2VcDOaENZaKtHIfo
CYq6+4wUU1TEs0F8fDxaVKJsHPWHN7WLMI/eODgGUcb32EpBJDBhYMtoTorgTh5f
mb0MaWlmFDWV0tq/czlaDToVLetbZUXCkhADkrollyD/Amb5mWgkNm1ZakQ3mMnG
9wAvv7xEhH6y6P/ItaPlwR4n+ie93eVGy1UkzdHQMajUARPveLsyzkHgSPniUaab
WEx+G1dZyHwvGw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:29:36 2026 by rpki-client