Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
File: 9bMQ6dROhHDWzYAJWQZssA8pHvo.mft (raw, json)
Hash identifier: g0XvfNUsHRem9hbjt8keBidfwSHsaAFw44Hzg3Ci2QQ=
Subject key identifier: 9A:BD:CA:C3:E0:5B:AA:6D:14:E8:46:86:A1:D7:17:E5:B7:85:4C:AB
Authority key identifier: F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
Certificate issuer: /CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Certificate serial: 019E1C468D4A89635BE251E2F9B7021FE5D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
Manifest number: 1369
Signing time: Tue 12 May 2026 13:00:46 +0000
Manifest this update: Tue 12 May 2026 13:00:46 +0000
Manifest next update: Wed 13 May 2026 13:00:46 +0000
Files and hashes: 1: 9bMQ6dROhHDWzYAJWQZssA8pHvo.crl (hash: gq5q0kZdiChNxuyqyvwMfUeh1SV/gPzrOE3r4BhcpYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:8d:4a:89:63:5b:e2:51:e2:f9:b7:02:1f:e5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Validity
Not Before: May 12 13:00:46 2026 GMT
Not After : May 13 13:00:46 2026 GMT
Subject: CN=9abdcac3e05baa6d14e84686a1d717e5b7854cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:82:ea:66:05:8e:dd:8d:5b:fa:3d:b9:8e:
3c:12:a5:cb:f0:92:87:82:9e:0e:87:82:10:fb:37:
ee:77:06:5c:fa:69:60:87:e3:55:4f:1a:d7:be:35:
fa:8a:48:8a:54:90:67:99:44:b3:b5:af:55:4e:13:
22:48:ad:f0:f5:61:e0:08:8c:d1:45:e5:3d:26:fe:
0d:f4:35:63:f1:87:fd:9c:7b:1b:e3:45:27:f9:9d:
4f:bf:b0:29:c1:1c:40:b8:fb:2c:e2:23:d3:6c:38:
ab:af:3c:b3:08:b3:31:8f:df:aa:eb:a5:4e:98:7b:
01:dd:a9:c4:d3:d1:4f:d8:c3:bd:1e:5a:49:66:87:
5f:18:8f:03:7b:e3:39:41:fa:d4:ba:5b:5c:64:2c:
af:0b:92:63:cb:e5:2e:e8:ab:70:5f:f7:81:bb:d1:
ad:b7:cb:22:bd:15:cb:83:e2:29:9c:72:57:e1:e9:
d6:68:2e:b2:09:4f:df:0c:73:9b:e6:43:ea:3b:68:
bd:0c:5e:11:d8:92:c5:87:81:84:e9:8b:15:0e:70:
38:79:fc:6c:5a:a5:e4:da:e7:92:c8:cd:d2:0b:01:
ed:fe:c7:70:31:4f:a6:df:85:de:72:51:8f:05:46:
b3:fc:86:ba:0d:c2:80:bf:9f:32:08:57:bb:f1:79:
8f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BD:CA:C3:E0:5B:AA:6D:14:E8:46:86:A1:D7:17:E5:B7:85:4C:AB
X509v3 Authority Key Identifier:
keyid:F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a6:93:49:96:ec:ba:2f:27:e0:a2:22:8d:f4:5a:8f:42:93:
dc:1e:f7:00:62:6e:67:7c:e4:56:05:f8:3f:b7:cb:9c:41:10:
0f:37:90:db:4a:ac:94:0c:71:f8:e8:c9:a3:0d:18:78:a1:8a:
9c:ec:80:42:fb:2d:1b:df:f2:43:af:09:23:13:4b:51:b8:e7:
5c:ce:03:26:54:1f:17:d0:3f:8a:83:2d:b1:3f:ff:38:7b:a1:
df:e2:01:9a:d4:d8:5e:cd:35:9d:2a:ad:fc:d7:bc:03:53:b8:
27:9b:4d:3a:1b:2d:29:7a:dc:ab:74:15:e5:70:8a:5a:c4:0d:
d4:b6:db:f5:ad:a4:62:b3:06:f8:6b:21:92:96:5d:64:ab:ed:
49:4a:03:ef:09:95:14:da:1c:d6:42:b3:81:99:a4:7b:10:71:
ab:cb:5b:07:f7:97:fa:31:01:88:29:59:90:ff:29:e1:63:85:
08:ac:f1:fc:d2:0b:fd:f0:89:96:8d:e2:b9:d4:c9:f0:8d:fb:
7e:e0:c1:27:93:09:01:f6:b4:e2:43:31:5f:05:75:76:17:f2:
6b:bd:ae:bd:4e:81:97:db:e9:f1:58:32:9d:06:f9:0b:d0:90:
3f:9f:35:44:9f:99:21:2c:2c:a1:10:05:83:36:a8:b4:17:43:
eb:e3:a7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:33 2026 by rpki-client