Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e76193-3504-4b6c-b5df-8d0f4e2a3b0c/1/9fMqZlil1oO3buatNGdFqzm8hyU.mft
File: 9fMqZlil1oO3buatNGdFqzm8hyU.mft (raw, json)
Hash identifier: RrpxNS0CBm2EvR7DjfPi1YQ2rsSMlaM1WMbEbRC1d0A=
Subject key identifier: 69:D3:97:44:94:F8:08:77:F6:61:8A:06:DB:8C:CA:2B:C6:2B:33:F6
Authority key identifier: F5:F3:2A:66:58:A5:D6:83:B7:6E:E6:AD:34:67:45:AB:39:BC:87:25
Certificate issuer: /CN=f5f32a6658a5d683b76ee6ad346745ab39bc8725
Certificate serial: 019E1C7DA9606FAB1A96B899312F1E92D56F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fMqZlil1oO3buatNGdFqzm8hyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e76193-3504-4b6c-b5df-8d0f4e2a3b0c/1/9fMqZlil1oO3buatNGdFqzm8hyU.mft
Manifest number: 70
Signing time: Tue 12 May 2026 14:00:57 +0000
Manifest this update: Tue 12 May 2026 14:00:57 +0000
Manifest next update: Wed 13 May 2026 14:00:57 +0000
Files and hashes: 1: 9fMqZlil1oO3buatNGdFqzm8hyU.crl (hash: NCKQ1jADk3Omq0WtDswww7W9cNCwh5kI9IZEoh63QhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e76193-3504-4b6c-b5df-8d0f4e2a3b0c/1/9fMqZlil1oO3buatNGdFqzm8hyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e76193-3504-4b6c-b5df-8d0f4e2a3b0c/1/9fMqZlil1oO3buatNGdFqzm8hyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fMqZlil1oO3buatNGdFqzm8hyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:a9:60:6f:ab:1a:96:b8:99:31:2f:1e:92:d5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f32a6658a5d683b76ee6ad346745ab39bc8725
Validity
Not Before: May 12 14:00:57 2026 GMT
Not After : May 13 14:00:57 2026 GMT
Subject: CN=69d3974494f80877f6618a06db8cca2bc62b33f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e3:f5:64:0f:de:3c:bf:f1:f0:29:03:21:7e:
59:ae:e5:5d:b3:b3:0f:04:ae:b3:30:47:aa:97:5c:
1e:5d:40:d3:6a:b9:87:e1:c6:cc:65:c3:be:8b:65:
72:0b:6f:12:a5:05:8b:bf:9e:b4:73:f7:f4:d3:cb:
f8:91:15:dc:c7:d4:7c:73:1a:66:4d:d3:97:9b:0d:
eb:e7:7a:fd:a2:e6:17:34:1f:5e:e8:c5:8c:89:a8:
2f:a2:cb:31:dd:51:52:41:52:e6:b8:50:d7:69:01:
f7:cd:e9:5e:93:58:2b:1a:02:1a:7b:8a:38:ba:fe:
d2:e7:93:8a:10:5e:15:0d:f7:9a:84:d4:62:19:33:
4b:7d:7c:7d:0f:83:f7:14:d5:c1:63:67:e9:80:38:
fd:23:86:c2:4f:f9:ba:e3:d5:10:d9:8b:fa:24:7f:
f9:40:79:4f:0a:20:3c:93:42:c4:f6:4f:5b:70:45:
5a:07:e2:f6:96:5b:84:b1:bf:76:7f:dc:ac:ac:b1:
89:e2:2e:a3:41:ff:4d:64:bc:8b:4d:06:16:ed:bf:
38:93:f7:c1:44:f0:a4:1c:5f:7c:85:9b:2e:a1:63:
4b:95:9a:00:43:16:86:b6:69:91:f1:12:ae:b9:18:
5d:68:5a:cf:7e:9c:57:9a:b0:bb:32:25:14:c8:a5:
b2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D3:97:44:94:F8:08:77:F6:61:8A:06:DB:8C:CA:2B:C6:2B:33:F6
X509v3 Authority Key Identifier:
keyid:F5:F3:2A:66:58:A5:D6:83:B7:6E:E6:AD:34:67:45:AB:39:BC:87:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fMqZlil1oO3buatNGdFqzm8hyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e76193-3504-4b6c-b5df-8d0f4e2a3b0c/1/9fMqZlil1oO3buatNGdFqzm8hyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e76193-3504-4b6c-b5df-8d0f4e2a3b0c/1/9fMqZlil1oO3buatNGdFqzm8hyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:68:1d:ef:0f:3a:2e:3e:f6:f0:fe:42:8f:07:55:c4:5e:a1:
f5:d6:07:15:0c:71:bf:79:bc:b0:34:b2:93:31:47:ff:5e:c7:
c9:65:61:70:6b:ef:73:c1:37:bb:0a:1f:b2:99:67:1b:b2:71:
f8:37:b5:fb:4f:19:c4:0e:a9:23:ed:50:bc:b3:0a:bc:68:e1:
3e:67:77:ce:47:24:35:fa:e1:3e:9e:bd:1d:2c:20:56:a7:75:
fd:4b:84:26:b7:a5:e0:00:2e:f2:de:5c:1c:d6:68:6f:31:28:
a9:82:13:22:19:03:78:12:9b:ce:24:6e:71:2e:c7:43:41:b5:
9d:62:39:50:51:0b:a1:26:a3:48:8c:fc:09:2f:12:ca:cb:7d:
2b:e5:57:c0:89:00:4d:ab:4b:df:ac:97:cc:34:e7:24:6c:8e:
2f:a7:fc:a5:72:67:35:d5:f3:c5:54:ae:29:b7:c0:c5:ac:4b:
60:9d:4b:14:fe:5a:22:99:24:a5:c8:19:c2:3d:77:e6:50:31:
f9:98:39:9a:b4:52:ab:67:6a:11:8d:99:f6:91:9e:a1:28:9f:
36:36:a7:6b:5a:f2:da:18:94:b9:68:1f:2e:2f:20:5e:ec:c9:
25:0c:cf:60:66:91:ed:71:04:50:93:32:be:6d:a1:d7:de:c7:
e0:3f:d5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:12 2026 by rpki-client