Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
File: 9fgHODUdz8da-ZaZOikpw3E0ogg.mft (raw, json)
Hash identifier: YE5+0gGso2h5YxEQ+6/buVmcA7UBNr1dtEl6GoiXl9Q=
Subject key identifier: 5A:09:C9:98:FC:3B:DE:E5:77:00:2E:53:F6:51:AB:41:F5:A3:CD:7C
Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
Certificate issuer: /CN=f5f80738351dcfc75af996993a2929c37134a208
Certificate serial: 019D9962542905B77B95C3BB539E3303E727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
Manifest number: 12BC
Signing time: Fri 17 Apr 2026 03:00:51 +0000
Manifest this update: Fri 17 Apr 2026 03:00:51 +0000
Manifest next update: Sat 18 Apr 2026 03:00:51 +0000
Files and hashes: 1: 9fgHODUdz8da-ZaZOikpw3E0ogg.crl (hash: gXpCF8W9l4EHlP2eJJjrL+bHPVDBBF8JNYYywF4N5x4=)
2: Q4ZIJI1vYpM5qyo29zUc5N-1r8k.roa (hash: 76giCIoxYSJ7Qzdp7ynPuA05qyt7r6q9BXWslTdrOTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:54:29:05:b7:7b:95:c3:bb:53:9e:33:03:e7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208
Validity
Not Before: Apr 17 03:00:51 2026 GMT
Not After : Apr 18 03:00:51 2026 GMT
Subject: CN=5a09c998fc3bdee577002e53f651ab41f5a3cd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:97:1b:ba:ac:e3:59:44:87:4f:d2:b2:81:
19:7e:6f:51:08:88:ff:bf:55:d0:ae:9d:23:ad:8a:
90:6b:df:44:ea:9b:72:2b:3e:ad:86:83:39:6d:28:
7b:5f:17:cd:bd:dd:1e:de:c1:70:72:3b:2a:d3:d5:
e3:da:bf:b1:69:51:14:0c:ad:cf:eb:59:fb:57:67:
8e:af:56:22:3e:03:bc:49:ed:2d:f9:e4:8f:f8:31:
14:aa:20:c0:42:61:c6:38:73:b8:af:7c:42:b5:e1:
48:96:33:7a:e1:cb:63:0c:42:7f:53:f5:e9:fc:ca:
37:0f:34:84:1e:0f:d8:4f:79:39:86:d3:aa:1e:b0:
cd:fa:94:d3:48:e7:6a:67:63:7b:c5:cf:65:d9:36:
7a:4e:83:c8:95:22:97:51:5d:db:21:59:59:fd:3a:
19:cf:42:67:c8:c9:91:57:54:13:78:6a:a0:66:ad:
cf:da:01:74:8e:32:65:93:a5:98:ad:93:24:6c:92:
ec:f1:3a:dc:aa:8a:3c:2a:9a:d0:7e:41:61:ba:6f:
94:79:e4:4d:5b:9c:a3:82:1d:8c:68:3b:99:03:0f:
aa:53:df:23:f1:c2:3a:c5:13:17:8e:12:9b:7a:2a:
3d:c1:6b:45:10:04:89:8e:f3:75:86:f5:22:4c:77:
10:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:09:C9:98:FC:3B:DE:E5:77:00:2E:53:F6:51:AB:41:F5:A3:CD:7C
X509v3 Authority Key Identifier:
keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6b:5d:77:7b:ff:1d:fb:28:fd:2b:b5:cb:e5:bb:80:68:81:
e3:19:75:a5:2e:ee:7e:ee:48:25:78:f2:17:f2:60:ab:c7:3f:
25:50:03:ce:43:78:41:41:87:12:eb:a9:a9:65:9d:d1:4f:f2:
02:8e:6f:71:b1:54:00:e8:72:b0:29:d2:b1:92:04:82:b8:95:
37:42:8e:5f:99:48:2a:b0:2a:bc:f3:86:51:68:85:fd:29:2c:
25:0f:52:5e:c6:0b:cf:e0:4a:23:67:64:56:0b:70:42:2a:d2:
21:97:e3:74:89:97:c9:b0:da:01:bd:22:67:49:17:99:b9:6d:
e9:33:99:5f:86:bf:06:92:d9:0f:02:d8:08:7b:8d:82:f7:3f:
db:64:92:f7:d4:e4:b9:40:b0:a1:8a:9b:49:38:42:bf:6b:b7:
ab:23:df:f0:36:27:e2:63:9f:a8:61:f0:bc:2d:52:1a:f1:c0:
37:9c:e0:1f:aa:0e:99:b0:48:e9:61:0f:6d:8e:aa:17:dd:f6:
1c:6c:e7:88:dd:6d:d8:d3:de:3d:50:17:33:22:23:c0:78:db:
5f:41:46:1d:77:a0:a7:33:59:01:eb:ce:8c:6d:8d:85:64:0d:
15:bc:33:84:d4:04:24:45:b6:aa:95:d7:38:55:b6:7e:45:b5:
73:a9:4b:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYlQpBbd7lcO7U54zA+cnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZjgwNzM4MzUxZGNmYzc1YWY5OTY5OTNhMjkyOWMzNzEz
NGEyMDgwHhcNMjYwNDE3MDMwMDUxWhcNMjYwNDE4MDMwMDUxWjAzMTEwLwYDVQQD
Eyg1YTA5Yzk5OGZjM2JkZWU1NzcwMDJlNTNmNjUxYWI0MWY1YTNjZDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq+XG7qs41lEh0/SsoEZfm9RCIj/
v1XQrp0jrYqQa99E6ptyKz6thoM5bSh7XxfNvd0e3sFwcjsq09Xj2r+xaVEUDK3P
61n7V2eOr1YiPgO8Se0t+eSP+DEUqiDAQmHGOHO4r3xCteFIljN64ctjDEJ/U/Xp
/Mo3DzSEHg/YT3k5htOqHrDN+pTTSOdqZ2N7xc9l2TZ6ToPIlSKXUV3bIVlZ/ToZ
z0JnyMmRV1QTeGqgZq3P2gF0jjJlk6WYrZMkbJLs8Trcqoo8KprQfkFhum+UeeRN
W5yjgh2MaDuZAw+qU98j8cI6xRMXjhKbeio9wWtFEASJjvN1hvUiTHcQCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoJyZj8O97ldwAuU/ZRq0H1o818MB8GA1UdIwQY
MBaAFPX4Bzg1Hc/HWvmWmTopKcNxNKIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hNGQzNzgtNDg1Yy00YjUxLWE3MjYt
ZWE4NDExZDU3MmFlLzEvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9hNGQzNzgtNDg1Yy00YjUxLWE3MjYtZWE4NDExZDU3MmFl
LzEvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWtdd3v/
Hfso/Su1y+W7gGiB4xl1pS7ufu5IJXjyF/Jgq8c/JVADzkN4QUGHEuupqWWd0U/y
Ao5vcbFUAOhysCnSsZIEgriVN0KOX5lIKrAqvPOGUWiF/SksJQ9SXsYLz+BKI2dk
VgtwQirSIZfjdImXybDaAb0iZ0kXmblt6TOZX4a/BpLZDwLYCHuNgvc/22SS99Tk
uUCwoYqbSThCv2u3qyPf8DYn4mOfqGHwvC1SGvHAN5zgH6oOmbBI6WEPbY6qF932
HGzniN1t2NPePVAXMyIjwHjbX0FGHXegpzNZAevOjG2NhWQNFbwzhNQEJEW2qpXX
OFW2fkW1c6lLMg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:55 2026 by rpki-client