Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
File: 9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json)
Hash identifier: UmDw3Bv2MFjh1Me1OMOCaNnjJrtAla+3lm4LWKaZ+FE=
Subject key identifier: 55:38:19:8C:AB:A9:2D:43:B4:72:0D:F9:52:F3:CC:1C:6C:0C:5B:F5
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Certificate issuer: /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial: 019D9962F3E279B31FE19254E94D6BF2107C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
Manifest number: 082B
Signing time: Fri 17 Apr 2026 03:01:32 +0000
Manifest this update: Fri 17 Apr 2026 03:01:32 +0000
Manifest next update: Sat 18 Apr 2026 03:01:32 +0000
Files and hashes: 1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: mSOWwE+Q1K/5qccz2JArHypoQpQbkODDq2ta0P+RDQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:f3:e2:79:b3:1f:e1:92:54:e9:4d:6b:f2:10:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Validity
Not Before: Apr 17 03:01:32 2026 GMT
Not After : Apr 18 03:01:32 2026 GMT
Subject: CN=5538198caba92d43b4720df952f3cc1c6c0c5bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:21:ef:89:80:cb:5f:31:2c:20:6e:7f:e6:
5b:30:33:e3:25:83:15:83:72:cc:55:ce:12:06:77:
dd:0f:e1:e4:f9:df:f8:5a:cc:9f:a3:57:fb:0b:38:
da:8d:9b:ae:fb:11:86:ce:cc:5a:d7:c4:e7:09:ea:
e1:dc:6b:06:ae:bf:dc:62:96:91:0f:5b:77:42:62:
61:c2:60:af:d7:5d:48:02:fd:ab:17:9b:45:92:3f:
ae:cc:c7:66:ac:57:cf:ab:e8:11:43:bf:c3:f5:5f:
0b:ec:75:c6:e5:15:a4:26:68:0d:64:1f:ab:91:53:
46:25:31:bd:12:f8:21:eb:6a:3c:ae:e8:f9:c7:98:
b5:c1:68:fe:4b:95:4f:08:ef:a8:05:2d:c0:1f:94:
f8:bd:61:c2:0c:f8:7f:c2:20:3a:77:db:e7:03:ab:
2c:af:19:39:52:84:5d:23:5d:36:c0:96:8f:55:fc:
04:cc:16:9b:69:73:fe:3a:50:da:d1:e6:74:a2:a0:
52:c3:b5:fd:22:a7:a8:3e:65:09:1c:f7:c8:3f:56:
17:d9:65:88:5d:44:71:96:b2:b3:6d:e6:e9:54:1d:
87:89:be:22:28:4d:b5:e8:cf:57:66:3f:6b:81:a8:
92:55:29:4a:07:9d:67:15:c9:60:ee:27:f3:0b:b0:
13:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:38:19:8C:AB:A9:2D:43:B4:72:0D:F9:52:F3:CC:1C:6C:0C:5B:F5
X509v3 Authority Key Identifier:
keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f8:16:7a:d6:cc:fd:5f:61:2a:50:81:30:43:f6:fc:1c:c1:
05:28:5f:5d:10:12:17:00:98:09:39:5c:73:fc:4c:36:01:c1:
30:c1:cc:3c:a3:fd:c2:cc:ae:8f:53:f5:c6:2c:ef:7b:08:f6:
02:bd:58:e1:12:61:52:59:c9:b5:bf:1f:94:9f:87:33:18:3d:
d8:0d:37:79:c6:86:b9:f0:89:23:d8:14:26:43:ba:61:9e:9d:
6d:2d:fd:ee:eb:ae:6e:ec:95:2f:58:67:41:e0:da:8b:56:64:
9b:4d:57:38:1c:74:d2:38:f2:b2:ee:02:38:de:e6:0d:78:55:
30:6a:ba:42:9d:90:95:a3:2f:12:8c:cb:82:05:0e:54:47:1d:
b8:c5:d1:27:93:bf:40:2c:16:0a:88:94:c6:6b:fd:87:27:d0:
1e:32:be:c9:6f:60:de:ad:76:c1:93:e3:1f:46:5a:25:99:78:
5b:dd:fc:93:5e:b0:c1:04:e8:03:69:13:b1:79:ff:8b:09:a8:
f4:92:94:9a:6e:f3:33:42:52:75:c3:c1:ee:50:4d:ed:e2:49:
51:37:00:2b:6b:bf:86:6c:3e:0a:65:b0:a7:60:d2:27:d0:41:
26:1a:ec:02:aa:43:a9:9a:b6:e8:14:10:90:3b:05:0f:d9:2c:
64:8d:77:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYvPiebMf4ZJU6U1r8hB8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NWY3OTFmOWQwY2Y2Y2I2YmUzODljOTQ1NjhjODc3NDA1
ZTUxNDQwHhcNMjYwNDE3MDMwMTMyWhcNMjYwNDE4MDMwMTMyWjAzMTEwLwYDVQQD
Eyg1NTM4MTk4Y2FiYTkyZDQzYjQ3MjBkZjk1MmYzY2MxYzZjMGM1YmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxQh74mAy18xLCBuf+ZbMDPjJYMV
g3LMVc4SBnfdD+Hk+d/4Wsyfo1f7CzjajZuu+xGGzsxa18TnCerh3GsGrr/cYpaR
D1t3QmJhwmCv111IAv2rF5tFkj+uzMdmrFfPq+gRQ7/D9V8L7HXG5RWkJmgNZB+r
kVNGJTG9Evgh62o8ruj5x5i1wWj+S5VPCO+oBS3AH5T4vWHCDPh/wiA6d9vnA6ss
rxk5UoRdI102wJaPVfwEzBabaXP+OlDa0eZ0oqBSw7X9IqeoPmUJHPfIP1YX2WWI
XURxlrKzbebpVB2Hib4iKE216M9XZj9rgaiSVSlKB51nFclg7ifzC7ATowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFU4GYyrqS1DtHIN+VLzzBxsDFv1MB8GA1UdIwQY
MBaAFPZfeR+dDPbLa+OJyUVoyHdAXlFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWw5NUg1ME05c3RyNDRuSlJXaklkMEJlVVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xNzM4OTQtMjBkNS00ZDA0LWJlNzAt
Y2QwMzc0MWQyNmI1LzEvOWw5NUg1ME05c3RyNDRuSlJXaklkMEJlVVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xNzM4OTQtMjBkNS00ZDA0LWJlNzAtY2QwMzc0MWQyNmI1
LzEvOWw5NUg1ME05c3RyNDRuSlJXaklkMEJlVVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPgWetbM
/V9hKlCBMEP2/BzBBShfXRASFwCYCTlcc/xMNgHBMMHMPKP9wsyuj1P1xizvewj2
Ar1Y4RJhUlnJtb8flJ+HMxg92A03ecaGufCJI9gUJkO6YZ6dbS397uuubuyVL1hn
QeDai1Zkm01XOBx00jjysu4CON7mDXhVMGq6Qp2QlaMvEozLggUOVEcduMXRJ5O/
QCwWCoiUxmv9hyfQHjK+yW9g3q12wZPjH0ZaJZl4W938k16wwQToA2kTsXn/iwmo
9JKUmm7zM0JSdcPB7lBN7eJJUTcAK2u/hmw+CmWwp2DSJ9BBJhrsAqpDqZq26BQQ
kDsFD9ksZI138A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:13:53 2026 by rpki-client