Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier: gpF/zugHssODAfDKk1dTsBfXTW6TdardjBWrX0yd4jI=
Subject key identifier: 35:09:E6:EA:FE:D2:59:86:2C:A8:0A:4D:7B:A4:10:21:02:B7:9C:12
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 019D9B50F57678BBBA4D5612D104B3E7CEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number: 14AE
Signing time: Fri 17 Apr 2026 12:01:07 +0000
Manifest this update: Fri 17 Apr 2026 12:01:07 +0000
Manifest next update: Sat 18 Apr 2026 12:01:07 +0000
Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: Hf5bJOEKO/j3DnJRJxI18dCh6IbNE3HaiG4Pgyivi3Q=)
2: YlUOJaq43NpuLvhyIjdUpjtIh5k.roa (hash: CQMT/ddbiL7hLzG2QkDs7berkHQrguNEVB/e2zlXUlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:f5:76:78:bb:ba:4d:56:12:d1:04:b3:e7:ce:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: Apr 17 12:01:07 2026 GMT
Not After : Apr 18 12:01:07 2026 GMT
Subject: CN=3509e6eafed259862ca80a4d7ba4102102b79c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:42:ee:02:b6:4d:b7:1b:43:4d:48:88:9e:
d2:a4:f2:4c:04:28:72:61:d2:48:19:66:45:57:a9:
fb:51:62:35:74:1b:fb:4c:10:b2:05:bb:f7:84:bb:
22:0c:48:0f:32:f5:80:6d:48:de:5c:fc:99:69:9e:
17:e0:30:d3:f5:2e:41:07:10:bc:be:d4:1e:45:08:
fc:c0:62:83:65:16:3b:49:03:73:04:c2:50:46:c3:
1b:c9:d1:cf:f3:ee:ec:4e:e9:d9:ca:a8:b2:c2:a6:
07:0f:cf:d4:08:64:99:e0:7f:f7:67:6a:f3:59:0e:
95:fd:4e:49:c2:74:a2:35:9a:d1:9a:0f:db:d2:22:
7d:75:1e:6a:ae:85:fb:01:0b:15:21:1c:5e:22:71:
66:e3:b1:ef:05:8d:98:4b:0b:1a:40:d8:ee:b2:cd:
b6:80:cc:0d:9f:c3:3f:15:c2:7a:19:50:f3:1a:a2:
7d:b8:97:95:34:81:a8:8f:a7:8b:e0:eb:31:e3:19:
dd:81:27:d9:fd:03:08:a0:a8:fc:ee:d0:ba:e6:51:
21:cd:0f:be:b2:f1:3e:97:e5:4c:5f:5d:0a:f1:ae:
94:2f:f4:ce:75:4b:6d:b9:0e:08:7f:22:76:71:ce:
af:14:02:31:6c:31:f8:81:f6:d4:ff:8b:b0:17:57:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:09:E6:EA:FE:D2:59:86:2C:A8:0A:4D:7B:A4:10:21:02:B7:9C:12
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f6:c6:85:1a:66:85:65:d5:14:02:2a:31:90:4f:1b:a0:e3:
8a:78:09:03:7f:29:d8:d7:5b:29:fc:96:96:28:ce:27:0e:5e:
a7:53:18:2d:27:18:de:a0:9a:fc:ac:79:d0:1d:06:c3:70:a8:
35:04:b0:78:02:67:5f:0a:7d:67:50:33:84:da:23:cd:3d:4f:
24:a3:56:3a:da:b9:66:16:86:67:ea:a3:d2:8b:b7:81:23:83:
5e:c5:19:98:77:7e:75:05:8b:f9:55:05:b1:7c:73:d0:4d:4c:
ad:1d:d0:fb:f1:cf:2f:86:be:97:ee:47:38:9e:cd:a9:87:9f:
b7:c1:35:2a:d0:29:de:c9:cf:53:f7:a4:bb:a7:8e:3d:97:a4:
eb:39:88:af:7e:4d:6a:03:fd:64:79:e2:ea:4c:db:18:bc:54:
3e:03:d5:9d:34:26:31:a9:18:5a:65:3a:15:8e:e6:5b:7f:9d:
73:00:ee:c1:9a:b9:b0:bf:e8:d5:89:c1:34:d2:34:a3:4a:82:
8d:d3:f5:b0:43:00:48:e0:64:5b:fb:10:27:1a:89:da:ab:5d:
15:0e:07:01:28:e9:69:31:24:91:a9:21:61:bd:9c:7e:02:13:
73:fa:c6:e8:9d:8a:48:81:fa:00:78:2a:b2:cd:be:98:b0:2d:
f6:e6:db:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUPV2eLu6TVYS0QSz586tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZmY0NmJhNmNkOGUyZjM1YWZkYjViNWY5Zjg2NTAyZjgz
NGMzNGEwHhcNMjYwNDE3MTIwMTA3WhcNMjYwNDE4MTIwMTA3WjAzMTEwLwYDVQQD
EygzNTA5ZTZlYWZlZDI1OTg2MmNhODBhNGQ3YmE0MTAyMTAyYjc5YzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvBC7gK2TbcbQ01IiJ7SpPJMBChy
YdJIGWZFV6n7UWI1dBv7TBCyBbv3hLsiDEgPMvWAbUjeXPyZaZ4X4DDT9S5BBxC8
vtQeRQj8wGKDZRY7SQNzBMJQRsMbydHP8+7sTunZyqiywqYHD8/UCGSZ4H/3Z2rz
WQ6V/U5JwnSiNZrRmg/b0iJ9dR5qroX7AQsVIRxeInFm47HvBY2YSwsaQNjuss22
gMwNn8M/FcJ6GVDzGqJ9uJeVNIGoj6eL4Osx4xndgSfZ/QMIoKj87tC65lEhzQ++
svE+l+VMX10K8a6UL/TOdUttuQ4IfyJ2cc6vFAIxbDH4gfbU/4uwF1eK/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUJ5ur+0lmGLKgKTXukECECt5wSMB8GA1UdIwQY
MBaAFPX/Rrps2OLzWv21tfn4ZQL4NMNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUt
NmFkMjBhMmVhY2I4LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUtNmFkMjBhMmVhY2I4
LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPbGhRpm
hWXVFAIqMZBPG6DjingJA38p2NdbKfyWlijOJw5ep1MYLScY3qCa/Kx50B0Gw3Co
NQSweAJnXwp9Z1AzhNojzT1PJKNWOtq5ZhaGZ+qj0ou3gSODXsUZmHd+dQWL+VUF
sXxz0E1MrR3Q+/HPL4a+l+5HOJ7NqYeft8E1KtAp3snPU/eku6eOPZek6zmIr35N
agP9ZHni6kzbGLxUPgPVnTQmMakYWmU6FY7mW3+dcwDuwZq5sL/o1YnBNNI0o0qC
jdP1sEMASOBkW/sQJxqJ2qtdFQ4HASjpaTEkkakhYb2cfgITc/rG6J2KSIH6AHgq
ss2+mLAt9ubbZA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:21:31 2026 by rpki-client