Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
File: 9Fe8GTpZWUint6CWtxC7UmKDD0E.mft (raw, json)
Hash identifier: zeDTzg2eIFBxdMNHMsYn6sOCf44dgZGjGT9ePHlVCBs=
Subject key identifier: DF:57:BC:9E:AC:59:16:67:F7:F6:18:F1:21:3C:CB:AE:EB:B6:45:D7
Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
Certificate issuer: /CN=f457bc193a595948a7b7a096b710bb5262830f41
Certificate serial: 019E1D9028794BA1D6B7797A09FB2FE326E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
Manifest number: 07D5
Signing time: Tue 12 May 2026 19:00:47 +0000
Manifest this update: Tue 12 May 2026 19:00:47 +0000
Manifest next update: Wed 13 May 2026 19:00:47 +0000
Files and hashes: 1: 9Fe8GTpZWUint6CWtxC7UmKDD0E.crl (hash: JHgGE8vFT64nOYLFVWUeak1HP/RUm5SmjL0ROqCI+VQ=)
2: fBJnMHALZfcjzCrh2ePgybbFbm0.roa (hash: O2YCNOyi52ka2IOCrOYs4Cry49I7H3lrzo66p5voKNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:28:79:4b:a1:d6:b7:79:7a:09:fb:2f:e3:26:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41
Validity
Not Before: May 12 19:00:47 2026 GMT
Not After : May 13 19:00:47 2026 GMT
Subject: CN=df57bc9eac591667f7f618f1213ccbaeebb645d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:75:21:6d:d4:55:5d:ad:12:9f:17:91:a6:b7:
1d:80:d0:86:cf:f5:0e:2c:d4:be:93:ae:08:32:e9:
26:a5:88:cd:d3:81:81:b8:ed:72:2a:b7:05:fe:1d:
5b:c7:4a:6a:04:c0:17:2e:e4:7a:ca:56:53:15:c8:
3b:49:45:16:a4:0b:d5:e1:0f:8a:62:72:f8:18:20:
57:1b:74:d5:f1:f3:75:d9:4f:9a:74:de:23:f1:8c:
ec:3f:3c:40:2c:90:92:12:ae:d7:aa:3d:86:0d:16:
5b:a0:4e:cf:89:9b:d9:d3:4a:ee:eb:2c:1a:90:d6:
04:1c:cd:73:82:c7:6e:25:5e:90:00:01:aa:4b:9c:
06:5a:de:4e:b9:c7:c9:4f:95:a6:de:ac:38:80:53:
16:41:de:e8:39:e6:eb:22:74:0b:a8:35:02:25:64:
ed:c1:6e:7b:6b:8d:3a:de:04:bf:fe:79:88:c2:be:
2c:81:81:75:c8:81:e9:31:39:ae:1c:39:32:30:f2:
23:59:fd:be:88:b5:1a:05:41:91:08:39:2e:9b:18:
40:b0:06:8e:b0:a3:fc:ca:26:d5:34:3b:d1:a7:18:
07:bf:9a:8f:54:e6:f0:85:07:a2:93:62:e8:af:f3:
64:09:ba:00:0e:aa:a4:02:84:58:b0:6d:5a:cd:4f:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:57:BC:9E:AC:59:16:67:F7:F6:18:F1:21:3C:CB:AE:EB:B6:45:D7
X509v3 Authority Key Identifier:
keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cb:3a:84:a3:bb:d0:2c:07:a6:18:ad:20:5c:d2:2b:f6:09:
1e:f8:e0:0a:90:61:80:44:af:29:ef:f3:36:83:bd:d3:f2:c1:
49:f6:a5:52:27:f3:a9:43:3a:46:12:27:da:8d:c3:f4:de:d1:
40:80:f7:62:47:a2:ef:db:02:d2:54:27:0a:d1:0c:b8:fe:a2:
61:69:17:99:da:07:38:71:9c:41:a4:1d:94:22:cb:f0:b2:8a:
51:b4:f6:10:a4:fa:a1:49:55:1a:7f:19:4d:8b:01:c7:91:8f:
ab:46:1c:40:63:68:c2:a9:3b:78:b1:70:de:c1:5c:e1:73:76:
d5:4b:ca:0b:3f:2f:ca:b2:b5:e3:bc:03:14:9a:89:ae:1d:cd:
f1:ac:9a:68:25:61:7f:d4:39:50:34:ec:30:91:21:fa:37:3e:
4c:ec:5a:37:06:83:f4:e6:5b:cc:5f:bf:fa:f2:51:ff:ab:76:
bc:89:37:ce:5f:36:dd:17:46:66:d3:87:06:da:ba:29:8c:f4:
9a:fc:4b:a9:f5:fd:a8:0e:e1:72:f7:1a:86:38:0d:0e:23:bd:
67:c9:f9:85:dd:61:c3:f6:2f:f6:7a:45:75:cf:2e:99:37:a1:
07:72:1b:4f:f2:19:da:01:62:ff:02:bc:51:99:9a:0a:b8:bb:
d9:c6:fd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:33 2026 by rpki-client