Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: DiTXLGp1kUgxMQggcQvb+ypzkEKHYFkf+6fXFR+EEf4=
Subject key identifier: B6:B0:7B:71:9A:C7:19:55:0B:E8:00:66:7B:61:F5:AA:30:8E:AF:E9
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 019E1DC7474F72639209DD679BB6A9CBABC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 0C6F
Signing time: Tue 12 May 2026 20:00:59 +0000
Manifest this update: Tue 12 May 2026 20:00:59 +0000
Manifest next update: Wed 13 May 2026 20:00:59 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: tvbGoLTH1+pII6wlb7qWnHSeT2rc2l2STR0KrXwsGFQ=)
2: GKyDs47a7BqJFaT8Ozcx1DPKrA4.roa (hash: IeQFtuvzwY+Djd9V29XWo6xDkNMsoIv44LxRAtukIHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:47:4f:72:63:92:09:dd:67:9b:b6:a9:cb:ab:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: May 12 20:00:59 2026 GMT
Not After : May 13 20:00:59 2026 GMT
Subject: CN=b6b07b719ac719550be800667b61f5aa308eafe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:80:00:e8:8a:d0:d1:40:bd:c2:cd:85:81:c5:
17:71:2a:12:06:1c:87:da:69:fa:d4:b7:96:a5:82:
54:38:cf:79:18:5e:58:ff:a0:f6:2a:8f:b1:e5:5c:
ee:38:56:df:1e:05:2a:e2:ce:88:56:67:5d:e9:a2:
33:28:93:e4:b6:a1:40:aa:41:3c:f1:47:87:ea:ff:
c6:70:77:72:b3:90:99:53:0b:27:ee:d8:24:f1:38:
bb:9e:8e:71:b0:52:3c:fa:6a:58:5e:24:a7:04:c3:
7c:cf:1d:d9:87:ca:fd:09:dc:0d:8f:1a:1a:f3:d5:
ac:68:f5:02:be:13:16:a0:92:07:41:73:a6:aa:74:
6c:c9:7f:52:1b:e1:97:f5:23:cd:4c:95:dd:1d:31:
06:0d:b9:9e:50:3d:52:0f:ad:b6:80:c4:17:3d:ca:
10:7b:f1:b6:d7:d5:d0:61:bc:1e:81:7e:7c:e4:71:
33:dd:aa:03:e7:a6:45:9d:07:af:40:28:fd:d0:ad:
9a:cf:0e:04:48:67:57:4e:7e:63:2a:d8:56:2f:ca:
f0:91:76:b6:10:2b:d9:56:67:18:3f:2a:5e:c6:8f:
4f:cc:15:2a:4a:17:06:62:0c:9c:a4:40:ac:3d:ac:
a3:72:5f:41:7b:a2:13:b6:be:29:e7:e4:20:6f:77:
86:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B0:7B:71:9A:C7:19:55:0B:E8:00:66:7B:61:F5:AA:30:8E:AF:E9
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:53:c4:ff:34:84:f1:28:bc:b2:03:9f:c2:7c:9c:7c:97:2d:
17:23:48:62:15:c1:9e:1c:21:94:1b:9a:58:62:69:e7:fe:a3:
4e:44:92:ae:71:ab:5c:26:5b:c8:0a:0b:f0:b5:cb:3a:15:b3:
38:6a:a8:ed:f9:75:0b:21:ae:d3:99:e6:79:35:d0:93:8f:e5:
e5:fa:44:ec:88:7d:c0:be:d6:6d:48:24:e6:4d:8a:36:81:a9:
2a:9e:30:67:d5:f1:d5:ec:e0:01:1c:8a:75:2c:f4:b5:99:ac:
58:34:6b:26:a9:08:44:15:91:5c:ad:5a:56:42:58:b5:50:f0:
5e:c0:da:62:e1:8a:49:be:24:ab:fc:db:a6:ea:da:f3:dd:55:
31:c9:eb:26:5d:d5:fb:19:e2:27:5d:43:7f:a6:a5:3f:2b:46:
0b:62:14:58:e3:74:24:8a:c4:86:8a:03:e6:c5:da:3e:d6:d5:
3e:19:db:4e:3e:62:49:c0:a3:bc:3e:20:3a:97:75:f8:5a:52:
0e:ef:9f:3d:af:ed:13:bc:19:62:32:86:74:76:eb:6c:0e:e9:
6e:25:39:ed:c2:24:ba:c8:62:03:46:a8:39:58:78:af:47:65:
2e:89:25:31:17:b1:74:e2:60:14:50:27:11:bc:57:87:7e:ee:
1f:d6:4a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:07 2026 by rpki-client