Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.mft
File: 9shwRAz4UVUUmSVRYoEpJs9u39M.mft (raw, json)
Hash identifier: 8smRwYvdThtfEbnlFHEAEfCJbB7c9JkPy62+jDDlChg=
Subject key identifier: 71:25:50:8C:3A:92:6C:D6:8A:EB:E4:CC:2C:47:A9:0C:11:17:7F:00
Authority key identifier: F6:C8:70:44:0C:F8:51:55:14:99:25:51:62:81:29:26:CF:6E:DF:D3
Certificate issuer: /CN=f6c870440cf851551499255162812926cf6edfd3
Certificate serial: 019E1CEBB3F2AC7B361C5B6E09DF5EBB2BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9shwRAz4UVUUmSVRYoEpJs9u39M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.mft
Manifest number: 0109
Signing time: Tue 12 May 2026 16:01:09 +0000
Manifest this update: Tue 12 May 2026 16:01:09 +0000
Manifest next update: Wed 13 May 2026 16:01:09 +0000
Files and hashes: 1: 70a0Lc6K02o54FM6PX05XeuuRi8.roa (hash: PtJL+LlSx9gEGZnO3go2ShBwbA0iEFFNYQSTPl1KJgU=)
2: 9shwRAz4UVUUmSVRYoEpJs9u39M.crl (hash: mONVezSllzIvAt05aM35sVdOy+t1JnVesZa061/l4XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.mft
rsync://rpki.ripe.net/repository/DEFAULT/9shwRAz4UVUUmSVRYoEpJs9u39M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:b3:f2:ac:7b:36:1c:5b:6e:09:df:5e:bb:2b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c870440cf851551499255162812926cf6edfd3
Validity
Not Before: May 12 16:01:09 2026 GMT
Not After : May 13 16:01:09 2026 GMT
Subject: CN=7125508c3a926cd68aebe4cc2c47a90c11177f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:ba:ba:9a:3e:89:8f:7a:ed:72:f4:0c:a2:
f9:58:28:53:fe:f9:34:e4:18:16:9f:3c:c4:a8:09:
e2:16:bc:ed:ec:85:83:8a:d2:fa:eb:f6:68:56:d8:
dc:e5:ce:b2:f3:b9:9d:1f:8f:68:3e:32:df:4c:df:
66:1d:60:69:fc:0d:76:d4:01:f7:7c:f4:17:b0:5b:
da:4e:5f:2f:e7:6e:bf:e4:a9:1d:e6:a7:43:31:9d:
42:2e:4b:0f:8b:08:0b:be:57:02:ac:7e:13:11:ca:
fc:43:47:17:42:a1:b0:67:6c:f9:eb:e7:50:2f:47:
09:85:bd:36:6f:ca:57:bb:61:c2:4f:bd:88:8f:c6:
82:4c:5e:d0:85:db:b6:af:a1:8b:6d:57:2b:47:9c:
0d:28:44:bf:e9:9d:7a:b3:9b:0f:3b:53:25:36:d3:
fa:ce:ac:d7:2a:66:f3:cf:87:c6:9a:a6:a3:a1:79:
61:5a:14:e2:13:7f:d7:55:08:35:cc:1a:be:f4:d1:
d1:31:6b:bd:b9:76:15:3e:ea:1a:d4:81:d6:70:4c:
b2:d2:c7:f2:30:20:a5:4e:35:b3:fc:41:53:45:3c:
69:d9:cd:00:36:86:65:f4:b8:4d:2a:96:86:c3:d7:
ef:ca:c5:92:85:51:11:6c:e5:2c:70:2a:9a:77:af:
a0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:25:50:8C:3A:92:6C:D6:8A:EB:E4:CC:2C:47:A9:0C:11:17:7F:00
X509v3 Authority Key Identifier:
keyid:F6:C8:70:44:0C:F8:51:55:14:99:25:51:62:81:29:26:CF:6E:DF:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9shwRAz4UVUUmSVRYoEpJs9u39M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:df:e8:b6:18:83:78:e7:08:7d:78:72:32:c4:9a:25:27:f0:
71:62:bb:f8:52:1b:b4:8e:b9:0a:93:84:d6:40:6f:ef:3b:f5:
88:66:48:fd:f9:e7:db:27:84:ec:0c:74:7c:f4:00:73:0f:5d:
fc:4c:55:48:3a:e5:89:cb:f1:cc:3b:19:15:6e:2c:87:ff:a7:
17:10:dd:33:ac:33:0b:5c:a9:a9:bd:10:60:39:7f:dd:53:f9:
a7:55:c2:31:54:1a:c9:d5:38:46:b7:83:2f:ea:6c:32:c7:c9:
49:22:25:93:e7:02:4e:d9:12:d8:c1:82:46:11:a0:3d:8e:b6:
96:85:b5:7f:93:e2:3b:7b:3f:fa:89:74:70:0a:d6:78:60:15:
17:e1:fc:76:f4:c9:60:d0:da:28:c4:5b:b9:d9:93:1b:e6:34:
bc:ca:08:3f:a7:6d:42:fd:f2:d0:09:00:c3:57:13:f6:86:f7:
ad:35:df:7f:7a:5d:06:7e:2f:0f:95:88:8c:86:c6:ef:44:2e:
2f:ab:54:39:61:a7:ce:1b:10:8f:75:d3:61:20:27:95:58:63:
44:a0:0b:d1:d6:44:a4:84:5d:15:5e:27:e9:28:8d:23:fd:8e:
24:8b:0f:09:27:11:0f:3e:21:13:bc:7c:52:a9:38:77:99:71:
21:e0:c9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:27 2026 by rpki-client