Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
File: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft (raw, json)
Hash identifier: E1bDftmwxgFeeqHXJtmU6iFI0/ra1crc8i3B+0W5sTo=
Subject key identifier: 5E:37:0D:49:C1:C1:E9:82:C5:35:26:10:7B:95:1D:EA:56:EE:26:1B
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial: 019E1CEB695FBBC9185016DA68A0B63981AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
Manifest number: 1920
Signing time: Tue 12 May 2026 16:00:50 +0000
Manifest this update: Tue 12 May 2026 16:00:50 +0000
Manifest next update: Wed 13 May 2026 16:00:50 +0000
Files and hashes: 1: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl (hash: YjDu9ciWE1U+vUyjjjSFA1mrV/Jh3Aszg6L5+nBq9yE=)
2: e_Df4iROoxXL1Pz1SAcKQ_vIEN4.roa (hash: POrEq4+lH/1KrPHSTHg9NCpIAwnldkAaBgikPdZzjMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:69:5f:bb:c9:18:50:16:da:68:a0:b6:39:81:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Validity
Not Before: May 12 16:00:50 2026 GMT
Not After : May 13 16:00:50 2026 GMT
Subject: CN=5e370d49c1c1e982c53526107b951dea56ee261b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c6:39:c9:4b:1a:e3:4a:4f:f2:64:15:83:2f:
a0:b7:78:cd:11:82:1f:97:94:d7:ec:f0:7f:0a:9d:
01:a0:d4:af:c3:82:7c:eb:1c:6f:05:dd:fb:d0:72:
be:f1:08:d9:c3:0b:51:78:c7:cc:cf:9a:b2:97:42:
b3:b4:b6:76:0a:d8:7e:29:50:72:ff:a9:4f:58:97:
81:a3:4c:37:39:07:be:07:1f:c9:e6:c6:47:2a:ae:
1d:2b:fd:b4:ec:39:f3:df:49:d3:b8:a9:db:5f:07:
02:b8:ac:40:5d:fe:64:04:b8:d9:00:88:02:ef:94:
93:90:d8:55:36:a4:13:47:b5:c8:81:9f:fa:8d:9e:
08:52:01:7b:46:6b:32:1e:df:70:42:b0:6b:15:73:
02:e4:7f:ff:29:0d:e1:39:51:63:6f:b8:d2:0a:9e:
19:a5:5e:b8:d5:04:83:7a:c3:cc:49:87:87:95:cf:
cf:b8:36:c3:ff:23:7d:ac:b3:74:61:14:39:66:a4:
b0:e4:11:92:a1:f5:b3:24:84:30:5d:91:2c:b2:5c:
a9:52:07:77:94:12:7b:8a:4f:f7:b3:67:a6:bc:47:
91:a0:e9:73:23:7a:25:f4:54:2e:76:d3:35:ad:7f:
e3:92:e5:99:cc:5b:1f:40:8f:f7:e3:4b:c3:23:f7:
e5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:37:0D:49:C1:C1:E9:82:C5:35:26:10:7B:95:1D:EA:56:EE:26:1B
X509v3 Authority Key Identifier:
keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f2:d0:9c:dc:e0:c4:d7:9c:05:a8:54:77:24:c4:b8:72:f7:
81:a9:d8:09:9a:7a:c8:f6:1a:33:21:28:cd:36:08:e8:4a:c2:
af:95:e8:c1:b4:68:60:e3:4f:fd:1f:65:17:6a:fc:bb:cc:4e:
58:2e:98:63:18:43:4a:b7:64:a5:8a:c1:6d:8f:fb:f9:a8:70:
3d:40:9c:a4:f5:e6:4c:c2:e3:20:f3:bb:ac:05:ec:ff:51:fe:
13:60:5e:ed:a5:1c:5a:c5:dc:5a:6b:f8:e4:d1:cc:cd:11:5d:
7d:67:ce:db:72:3a:5d:15:dc:ca:c7:27:24:11:e9:66:22:5c:
ad:03:92:c1:a0:e9:64:c6:11:91:a4:c1:51:1e:d9:94:fa:1c:
96:01:9e:44:d0:cd:43:e8:b0:46:fc:f8:92:b9:06:7a:bd:83:
61:90:df:3f:94:6a:6b:7d:ce:9e:7e:52:c1:3a:12:0b:c5:8e:
be:70:b8:ed:23:3f:3c:3f:c0:9f:15:35:f5:c3:d0:17:74:6a:
58:38:d1:24:e1:ad:13:2c:33:73:8e:60:83:d5:1c:99:d4:1d:
f8:a9:37:80:56:6d:88:ef:64:9b:3c:e4:2f:33:66:45:c2:aa:
26:7d:2a:73:ab:8a:75:aa:17:a4:86:fe:f5:63:14:ba:3d:c2:
5b:f6:18:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:23 2026 by rpki-client