Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
File: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft (raw, json)
Hash identifier: YD1GbETg+vq8yW8lUVZX9IEhq5US9rULKWJ+WLPm6K8=
Subject key identifier: 03:0F:EF:24:C4:B9:EC:39:56:B9:16:AA:DD:85:63:4D:D5:96:E5:4B
Authority key identifier: F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
Certificate issuer: /CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
Certificate serial: 019EBEEC92E3FB8FC7663DBF53400779752A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
Manifest number: 18E5
Signing time: Sat 13 Jun 2026 03:00:35 +0000
Manifest this update: Sat 13 Jun 2026 03:00:35 +0000
Manifest next update: Sun 14 Jun 2026 03:00:35 +0000
Files and hashes: 1: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl (hash: KCcLHNBQj/l4JNeOjc82TAOWtF5iWIpUmClKbm1Brog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:92:e3:fb:8f:c7:66:3d:bf:53:40:07:79:75:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
Validity
Not Before: Jun 13 03:00:35 2026 GMT
Not After : Jun 14 03:00:35 2026 GMT
Subject: CN=030fef24c4b9ec3956b916aadd85634dd596e54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:66:ca:0f:64:a8:25:4c:58:9c:40:cd:47:
cd:3d:cf:19:87:c8:f8:f1:33:d2:9b:ac:b0:bf:4c:
ae:5f:f0:0b:9a:71:ae:d7:a6:61:a7:73:31:bd:90:
b9:f6:6e:c0:2d:f8:52:eb:35:a4:c2:c5:52:e2:af:
4d:35:54:46:db:f3:5a:43:94:15:da:40:b3:3c:4f:
d4:65:1a:da:8b:ec:32:b3:04:1b:b9:80:4b:1c:a6:
0d:21:80:e0:b9:d4:9b:b0:e6:d6:fe:74:8b:61:de:
09:07:82:d8:5d:92:8f:8b:c3:44:78:6c:e0:d9:9b:
4f:a1:a0:52:82:6d:0e:a2:96:5f:be:e1:dd:55:79:
e3:47:f2:aa:38:a5:b0:a4:dd:b1:cd:34:d1:5b:8d:
dc:44:02:87:44:b7:ba:42:20:70:dd:c4:5c:58:3b:
ad:38:af:46:d2:56:1d:4f:28:61:7d:4f:de:e3:7b:
7e:a1:8c:c5:ff:35:20:08:f5:46:f9:0d:10:49:99:
ee:6c:fb:9f:47:54:1b:90:18:48:92:2e:eb:1e:e5:
e0:8f:95:82:7e:83:52:88:ec:ea:08:b6:de:0f:e0:
4f:ad:9f:bb:34:43:89:75:b3:9b:09:f7:bc:7e:80:
55:e6:56:78:f9:e6:7e:93:03:04:ac:26:5c:5b:ae:
b2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0F:EF:24:C4:B9:EC:39:56:B9:16:AA:DD:85:63:4D:D5:96:E5:4B
X509v3 Authority Key Identifier:
keyid:F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:95:ef:8e:7d:5c:99:25:03:08:d9:48:e0:90:c3:46:c2:cd:
df:72:33:d6:69:10:c3:3f:12:6d:1e:78:9e:59:71:ca:b2:23:
0d:82:2d:71:34:3b:46:05:75:3e:5c:e2:62:20:04:79:fb:72:
40:48:2c:a0:22:df:ef:64:ff:94:6e:bd:c8:77:52:b4:72:5d:
7c:99:8e:2d:53:f4:b8:d7:e0:d8:6f:93:b0:93:17:55:6b:98:
b2:78:6c:e3:c7:8c:07:ae:28:eb:95:ac:6a:e6:75:76:1a:3c:
d5:ff:82:02:5a:0f:39:eb:97:92:94:7d:b0:e5:9c:e0:61:3d:
1b:9f:84:d2:ed:e1:aa:35:00:6e:20:4e:6c:b2:4d:c3:ee:5c:
2e:a0:8a:ad:e6:25:05:32:b5:c5:63:dc:f2:ab:6c:31:b9:fc:
b8:6d:41:de:eb:53:bc:ac:3b:c7:47:c3:55:3f:64:64:ea:b7:
29:50:02:8b:fc:95:2a:ef:7c:28:b5:e9:eb:c5:bb:90:9b:48:
b1:7e:05:4f:12:8c:a0:27:e6:46:e6:48:a2:06:fa:22:0f:e8:
65:73:d5:93:b8:2d:82:07:9c:6a:d2:fb:0b:71:bf:3d:28:09:
ae:b7:72:59:06:9a:74:fb:61:ad:0d:c2:7b:ad:ea:b2:fd:29:
90:d6:a6:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7JLj+4/HZj2/U0AHeXUqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTZmYTE4YjExOWMzYTQ5Y2JiY2M1NmE2MDQ1NzQzOWE0
NDkyY2UwHhcNMjYwNjEzMDMwMDM1WhcNMjYwNjE0MDMwMDM1WjAzMTEwLwYDVQQD
EygwMzBmZWYyNGM0YjllYzM5NTZiOTE2YWFkZDg1NjM0ZGQ1OTZlNTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPlmyg9kqCVMWJxAzUfNPc8Zh8j4
8TPSm6ywv0yuX/ALmnGu16Zhp3MxvZC59m7ALfhS6zWkwsVS4q9NNVRG2/NaQ5QV
2kCzPE/UZRrai+wyswQbuYBLHKYNIYDgudSbsObW/nSLYd4JB4LYXZKPi8NEeGzg
2ZtPoaBSgm0OopZfvuHdVXnjR/KqOKWwpN2xzTTRW43cRAKHRLe6QiBw3cRcWDut
OK9G0lYdTyhhfU/e43t+oYzF/zUgCPVG+Q0QSZnubPufR1QbkBhIki7rHuXgj5WC
foNSiOzqCLbeD+BPrZ+7NEOJdbObCfe8foBV5lZ4+eZ+kwMErCZcW66ylQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMP7yTEuew5VrkWqt2FY03VluVLMB8GA1UdIwQY
MBaAFPZW+hixGcOknLvMVqYEV0OaRJLOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxiNkdMRVp3NlNjdTh4V3BnUlhRNXBFa3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mMmQzYTItYjE0YS00MTFhLTg2Mjkt
YzkyMGYxNjQ2YzljLzEvOWxiNkdMRVp3NlNjdTh4V3BnUlhRNXBFa3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9mMmQzYTItYjE0YS00MTFhLTg2MjktYzkyMGYxNjQ2Yzlj
LzEvOWxiNkdMRVp3NlNjdTh4V3BnUlhRNXBFa3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZXvjn1c
mSUDCNlI4JDDRsLN33Iz1mkQwz8SbR54nllxyrIjDYItcTQ7RgV1PlziYiAEefty
QEgsoCLf72T/lG69yHdStHJdfJmOLVP0uNfg2G+TsJMXVWuYsnhs48eMB64o65Ws
auZ1dho81f+CAloPOeuXkpR9sOWc4GE9G5+E0u3hqjUAbiBObLJNw+5cLqCKreYl
BTK1xWPc8qtsMbn8uG1B3utTvKw7x0fDVT9kZOq3KVACi/yVKu98KLXp68W7kJtI
sX4FTxKMoCfmRuZIogb6Ig/oZXPVk7gtggecatL7C3G/PSgJrrdyWQaadPthrQ3C
e63qsv0pkNamAg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:00:19 2026 by rpki-client