Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: hbxwrxgwMKgbVURi0kq46K1DAqLyKrnnKVe8FvVRKq8=
Subject key identifier: 4E:8C:E8:1F:EE:E7:11:9C:0B:1C:D3:46:BB:16:50:B4:DD:26:FD:2E
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 019E1DFE99822AADEF8939A0200967A0DBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 0A82
Signing time: Tue 12 May 2026 21:01:25 +0000
Manifest this update: Tue 12 May 2026 21:01:25 +0000
Manifest next update: Wed 13 May 2026 21:01:25 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: 7juU3dbwRaO1pfFeKYhwCieeanY48FLkUf6/EMyP8T4=)
2: BcFq67gt-RKOvupOqp8wx9B2E4U.roa (hash: by17HKxYLGTRqXTNejn/CxcA/Hu0QDCXw3xviknWPjI=)
3: vlpxtqpjpQxPD5I7h8_GagReIJQ.roa (hash: TD2wCDrzMV1HjU3in4n/cQ4TcCR7y/LDU6bd62cCGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:99:82:2a:ad:ef:89:39:a0:20:09:67:a0:db:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: May 12 21:01:25 2026 GMT
Not After : May 13 21:01:25 2026 GMT
Subject: CN=4e8ce81feee7119c0b1cd346bb1650b4dd26fd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:42:7e:0a:c4:c1:4b:3b:27:33:6f:e2:0c:20:
a5:86:08:80:d4:77:da:08:f8:7d:e7:ed:bf:52:73:
fc:00:88:84:5f:36:33:dc:7d:e5:78:f7:c4:8f:3a:
12:73:9e:c8:92:c4:71:ad:1d:b5:c1:9a:32:a7:1d:
dd:30:03:c0:f7:e3:88:ce:2f:de:49:ec:5a:17:7d:
80:ce:2e:69:19:19:af:c8:2f:18:15:84:62:53:36:
96:8f:0e:bd:d3:d8:e9:95:e5:6a:14:b7:f9:0b:7f:
88:0f:77:48:3d:5b:62:a8:1c:44:25:8a:0f:da:81:
79:46:e2:b4:bb:d3:e5:b6:33:6e:ed:66:0b:35:26:
d7:10:73:6e:50:10:10:0b:0c:ae:fa:fa:4b:15:fe:
53:88:de:b1:d6:f1:18:73:c0:08:a9:bd:5d:50:ff:
2a:79:8d:fa:80:b7:4b:db:40:a4:0b:0b:fb:3f:44:
5e:a3:b9:b6:8f:25:6d:df:7a:dd:a1:f0:77:13:48:
4c:c6:49:d8:7a:1f:10:73:68:1a:2b:b9:e8:56:e4:
aa:cf:05:f2:07:27:99:d5:ab:a1:59:18:02:80:ad:
56:ab:eb:df:7f:a4:05:cc:7c:b3:fc:23:4e:35:b5:
27:cd:25:76:b0:5e:8b:6c:4e:9d:ff:81:09:39:8e:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8C:E8:1F:EE:E7:11:9C:0B:1C:D3:46:BB:16:50:B4:DD:26:FD:2E
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:15:e6:8e:0f:f8:24:6b:f8:64:12:2e:a8:92:8e:9f:52:0d:
9b:6a:30:b0:2c:0d:24:93:80:cf:3c:ea:c7:97:a8:22:a2:de:
cb:f5:1f:f5:0f:3d:b9:0b:5a:be:f1:6f:46:af:3e:de:54:88:
bd:47:ac:4d:97:ff:e8:8d:d9:c1:63:8c:a4:4c:b5:39:2d:5b:
01:96:48:b2:a0:fa:9b:61:e9:92:29:3b:de:10:c2:02:42:7f:
5f:cf:53:7d:e6:0a:ff:9b:47:b6:92:a0:ea:73:c2:03:4a:f2:
bc:e4:7b:e5:82:21:52:8a:42:11:08:06:48:4a:67:c5:63:3f:
26:c6:d2:40:4f:b7:c0:f2:ea:41:c4:77:ee:d5:64:c6:16:5e:
2c:32:5c:5d:90:af:f0:ce:d7:90:ec:76:9f:34:23:b0:83:9f:
f5:1e:05:87:95:cc:79:20:a5:51:e6:1e:1d:10:4a:c1:f3:76:
2d:f6:76:a5:0f:1b:df:dd:6a:87:89:25:41:d7:96:73:a6:25:
f5:31:16:fc:e6:aa:f2:2e:26:52:2b:a2:0c:7e:d3:e3:26:0d:
26:0e:03:79:8f:b0:fa:3e:27:b7:95:03:01:8e:5b:ea:86:ad:
8d:40:9e:4f:d9:7f:cf:2e:3d:71:6d:1d:65:9b:90:b9:e4:c2:
25:a6:ee:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:57:31 2026 by rpki-client