Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: pY7wQs/itx68kjxnFUdTQE2tRLkAMmpqUlAnk7BWtHM=
Subject key identifier: F5:F0:E1:38:AB:3A:73:09:66:23:E5:9E:28:79:07:F1:57:88:AA:D0
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 019E1ED9989980D669228BACA1F33C8F569E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 1920
Signing time: Wed 13 May 2026 01:00:37 +0000
Manifest this update: Wed 13 May 2026 01:00:37 +0000
Manifest next update: Thu 14 May 2026 01:00:37 +0000
Files and hashes: 1: 1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa (hash: YWmW+qHhsLN+csw32WYbNSaULT6cEK/L9LG3DcTcfQU=)
2: 2J_enL0mq_HbBFj1p_d_qyIXNks.roa (hash: VBLGjSkxg5gn4s0UWv4znpc4mtgeavbmnZnDA3LFAO4=)
3: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: SAkABaR9j2JMbS54Q0StZ/nP7R/jc4Hxxai/jLT9MZQ=)
4: ccMww59mDMVNflZi8lXAUqrYmZg.roa (hash: 18ezwr9Nu+qt8aBJCOh1ezF1Utw1YHeqhJCFEOUAeyw=)
5: hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa (hash: XVLkwzCBrdtM+FxDVfDBn6TZaFDwiuTAGFHK/fSzOJ8=)
6: hhmzN128wuDiRBwUCjO9oZf28Hc.roa (hash: qKwy9aO/5eDeYbjJqOLC4283+7+rAN2JwgIHL3S+j7c=)
7: wRiMz6n-wmWUoLFkxFSSP8HrU5E.roa (hash: gQ8uNZeHK/kIii6trEwXDL6+4QDEEh4ElPmKWLgPx14=)
8: wpCDaZ8CmRmp29ikyeMppBLQrkw.roa (hash: Mky9v4umrVvEcx+IGCTXn8o9SgJSH+g15pwUCUI4mwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:98:99:80:d6:69:22:8b:ac:a1:f3:3c:8f:56:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: May 13 01:00:37 2026 GMT
Not After : May 14 01:00:37 2026 GMT
Subject: CN=f5f0e138ab3a73096623e59e287907f15788aad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:cd:ca:d3:c1:4c:1b:aa:1d:a8:ac:b1:13:
68:66:fa:82:53:8d:2b:18:b5:17:53:25:53:ed:ba:
06:25:5a:0e:8d:47:3d:92:7c:16:be:d3:76:8d:5c:
1d:09:94:47:2f:87:66:d5:d4:a1:76:29:9b:64:ff:
3b:ae:ef:8c:b1:25:8a:81:9e:08:26:41:39:8e:d8:
4b:03:6c:35:e1:4c:83:c6:17:bd:cd:b6:67:42:e5:
a5:da:38:55:81:93:c3:d0:53:49:be:6f:8a:48:9e:
59:9f:42:48:e5:57:09:12:9e:f7:65:51:ca:18:63:
9a:16:c3:4a:00:65:0d:3a:71:2d:0c:db:05:c7:c2:
d9:e6:f3:5c:d9:be:fa:0c:2a:1c:98:67:40:79:2a:
5d:47:b8:c0:2a:ba:ec:c4:6f:70:6e:75:2e:8b:b1:
c0:91:54:9b:ef:ee:4d:a2:93:f0:4e:16:af:0d:3d:
f7:ef:ec:63:d8:a3:49:b2:54:f7:cd:01:e7:bb:85:
15:7c:81:32:fd:14:9e:a3:30:9c:74:e5:41:3e:d2:
76:8a:a7:17:3f:0a:af:97:1e:3b:dc:9a:76:56:d0:
25:27:f1:2e:a8:6a:ea:75:18:44:fa:ac:9c:fe:97:
64:af:e7:cb:01:95:ac:c3:36:10:bf:1b:9f:4e:57:
47:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F0:E1:38:AB:3A:73:09:66:23:E5:9E:28:79:07:F1:57:88:AA:D0
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f5:ea:e0:fd:a5:5d:75:f9:86:f1:30:91:fe:96:93:81:2e:
fe:02:b2:5b:6b:b3:2a:4a:03:70:f7:c8:bf:69:be:46:34:ec:
a7:c4:21:ff:3b:a5:50:7f:c7:41:6a:f7:8f:35:6d:1d:20:41:
c2:3e:78:a0:27:d1:b2:4b:10:df:a1:88:7f:cb:85:32:43:a6:
c8:1e:23:52:16:1b:5b:02:81:04:ad:66:32:19:b9:1f:b5:b6:
a4:80:d9:5e:01:8f:35:33:ff:c3:0f:b0:4f:5e:48:13:6e:93:
3f:90:36:39:e0:ba:8d:65:7f:ac:c0:ff:e4:1f:e4:4d:63:4f:
cd:07:55:25:33:70:93:fd:56:16:13:d7:cc:c8:8d:ad:5a:91:
7c:3d:43:17:c4:b7:7b:38:b3:51:35:53:e3:de:f1:1a:e4:d1:
82:bc:08:f2:4d:04:aa:24:37:09:63:9a:d2:e0:97:ee:ab:ac:
e4:20:c5:f4:8c:49:7a:b5:f3:f2:73:02:50:bc:ba:e2:93:43:
5e:e7:21:d0:ef:8a:3f:20:21:8b:e0:df:0f:c7:9f:9e:b8:47:
79:a1:b6:09:f7:65:05:b2:73:52:ce:25:5b:8e:5a:00:95:b1:
89:9e:73:e8:2c:40:28:b0:e5:af:64:ce:65:89:b1:05:c9:9b:
65:b7:b0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:08 2026 by rpki-client