Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
File: 9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft (raw, json)
Hash identifier: q4YvYCH5H316YpazlCoAWKA/8JB2dj3uAmZp6Q53ysg=
Subject key identifier: C1:C0:66:FA:23:63:9B:31:93:A8:59:12:CB:31:DC:2C:6C:DE:F5:6F
Authority key identifier: F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
Certificate issuer: /CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Certificate serial: 019E1C4764313C675E15802F483B982AF9BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
Manifest number: 04B0
Signing time: Tue 12 May 2026 13:01:41 +0000
Manifest this update: Tue 12 May 2026 13:01:41 +0000
Manifest next update: Wed 13 May 2026 13:01:41 +0000
Files and hashes: 1: 9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl (hash: HxPyqcusvmJE4+Zpb9mx83sLndGSJOTFibQWR17cpLo=)
2: JXm4LWXIpBMGqgHbvgoYihKzBVk.roa (hash: 5kQxFCRpZBFMUqQXhqZK+G8qNHh71Y8GlKTBlJe50XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:64:31:3c:67:5e:15:80:2f:48:3b:98:2a:f9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Validity
Not Before: May 12 13:01:41 2026 GMT
Not After : May 13 13:01:41 2026 GMT
Subject: CN=c1c066fa23639b3193a85912cb31dc2c6cdef56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:12:d9:19:d2:5f:b5:e7:e6:e1:23:fd:7b:9c:
39:f9:42:c0:a7:27:5e:d7:8c:eb:df:be:36:da:29:
1f:30:03:a1:60:fd:dd:76:90:25:b1:53:5f:78:96:
5c:40:2f:59:db:6d:66:97:f9:d2:fa:81:27:27:b6:
81:34:ba:25:ab:98:02:07:09:8f:01:8e:0b:0a:b0:
08:dd:3e:90:79:85:6a:39:cf:a7:3f:3d:ea:eb:14:
12:ee:5d:74:05:62:7a:2f:ea:63:a4:69:e2:27:ac:
3f:c4:a7:d6:2c:6a:12:b0:63:99:8b:57:93:8e:24:
3d:74:9f:42:d1:db:86:05:87:24:c5:27:bb:ba:b7:
16:4b:f1:ad:c5:6a:72:31:b3:17:c5:78:e8:88:88:
a9:15:72:a4:ec:26:ce:6d:56:4a:2d:bc:83:32:c3:
e3:f9:02:d4:45:85:3c:2c:a3:77:46:6b:3f:5d:48:
e7:4a:9c:ce:cc:97:93:09:23:c2:a9:c0:a6:5a:49:
57:84:cc:f7:4c:14:59:33:84:00:a1:96:d1:69:3d:
3f:c6:98:dc:0c:8d:76:93:65:91:79:e9:31:f8:7d:
49:74:f6:e3:e6:53:9e:e2:d9:b7:03:4d:32:a2:a5:
4e:69:4f:14:0a:ac:e1:35:7c:0e:77:7d:d1:2b:0c:
5d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C0:66:FA:23:63:9B:31:93:A8:59:12:CB:31:DC:2C:6C:DE:F5:6F
X509v3 Authority Key Identifier:
keyid:F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e6:b3:23:c5:0e:4c:89:30:45:a2:27:4e:21:a9:f2:52:d8:
5b:8d:72:15:06:8b:48:6b:fd:42:b0:2b:e7:44:98:c2:cc:ad:
01:55:80:f8:9f:7b:e8:c9:e0:ee:f1:61:19:83:9d:63:39:50:
7c:1c:c9:7b:f2:ed:85:e2:e3:d4:98:3d:ae:75:72:04:67:42:
2f:95:4a:04:ba:81:6d:b0:3c:6b:c2:e0:7c:e1:6e:f3:92:6b:
f6:7f:79:f3:ec:f1:63:f8:18:8a:e4:39:a4:92:63:8b:bd:e7:
c4:86:67:08:6a:7d:f7:1b:43:c0:aa:b2:1d:25:82:7e:ce:9d:
2a:8d:1d:42:97:42:c4:57:88:9d:46:ad:5c:87:97:ab:85:ea:
19:85:ff:09:35:74:4f:07:68:ad:a3:b6:41:0b:68:fd:da:61:
ff:8d:32:a6:72:9a:84:b3:7b:19:c8:28:55:00:bd:ca:93:e7:
a1:71:e8:8c:90:bd:c1:88:3d:f3:83:91:fe:d8:31:13:8c:c9:
c6:38:69:7d:a6:a9:c1:1d:e1:77:b1:a8:f2:b3:78:3e:53:41:
34:0f:73:d1:88:f1:f4:93:d5:a3:8c:8e:2d:65:d6:02:41:6b:
3a:86:24:02:1d:c4:e2:b2:85:d3:86:ad:05:09:32:aa:d5:76:
9e:cc:d5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:08 2026 by rpki-client