Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier: 9lKxn27cZ7IhHkX7KnTPqDKynpHQ5iBYYDFQmHHtpzA=
Subject key identifier: 2A:73:F3:9B:D3:12:E2:AA:EA:6F:04:C2:87:3E:A1:68:5F:A0:B2:EA
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial: 019E1D9068B8020F4876834D324198F4EFDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number: 091B
Signing time: Tue 12 May 2026 19:01:03 +0000
Manifest this update: Tue 12 May 2026 19:01:03 +0000
Manifest next update: Wed 13 May 2026 19:01:03 +0000
Files and hashes: 1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: ziEM0YeIhQJ0sBN1N8bO8yMma7SECOn8+CydczEzkxE=)
2: il7H5XRLlPOMcGmUaTO99BZFn2I.roa (hash: Df3NCzCkDFx+xfWB8WmONNlOHJhDormcIJSvLVXSXWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:68:b8:02:0f:48:76:83:4d:32:41:98:f4:ef:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
Validity
Not Before: May 12 19:01:03 2026 GMT
Not After : May 13 19:01:03 2026 GMT
Subject: CN=2a73f39bd312e2aaea6f04c2873ea1685fa0b2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:0d:bc:4e:6e:83:d2:cb:3b:b6:c1:fa:e1:
a4:0f:ac:7f:19:93:64:71:b1:bc:e8:c9:70:9a:f6:
0e:a9:ad:0f:39:74:ae:5f:d3:aa:e3:35:eb:63:12:
01:55:8e:90:61:db:4e:8d:74:f5:15:0b:cb:8c:b8:
01:08:52:80:ea:a5:1b:5f:af:a0:f7:17:22:4c:bb:
2c:9c:a6:36:89:39:4b:9f:5d:d4:15:3e:c3:cf:35:
e2:f6:9d:f2:0e:68:30:d3:48:1c:cb:8e:98:b5:80:
ce:61:21:f4:7c:4a:73:9c:36:3a:c2:2b:20:e4:68:
ee:fd:7e:3b:b9:61:96:45:a8:1e:f5:1d:d7:55:2d:
2e:77:0c:62:01:8b:73:01:38:e6:32:a1:af:6d:19:
58:5f:4e:15:80:27:fe:f5:c9:a8:19:47:d0:69:35:
10:5c:fc:b6:f5:b1:ca:0e:05:71:3d:a5:ef:e2:47:
b2:c0:7a:da:8c:67:53:64:a3:e3:29:99:07:8f:eb:
da:73:dd:f0:5c:82:f7:3f:8d:6a:33:03:02:ff:58:
73:0c:ea:7e:30:86:a4:bf:e6:f4:a3:be:89:c0:eb:
0b:7a:85:98:40:d4:87:9a:1a:a7:7a:b3:c2:c8:ef:
b0:16:36:f4:8b:8b:18:50:c6:e2:47:b2:0e:9d:6b:
f9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:73:F3:9B:D3:12:E2:AA:EA:6F:04:C2:87:3E:A1:68:5F:A0:B2:EA
X509v3 Authority Key Identifier:
keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:17:b4:eb:86:38:ac:09:85:04:90:b6:e9:cb:4e:4b:5e:1f:
ad:7f:a5:d3:4a:f5:43:88:03:0e:14:b5:af:6b:eb:d0:d0:dc:
d0:b4:e8:87:71:69:9e:24:79:06:89:a0:02:4d:3d:18:66:bf:
7d:9f:55:76:ec:54:20:49:0a:d1:f8:61:6c:1c:f3:77:eb:41:
32:03:84:93:3b:c8:e1:1d:b6:87:8e:3e:0f:46:05:52:1b:af:
55:1d:15:ed:dc:cb:af:07:c0:6d:77:44:63:3c:9a:0f:cd:5c:
e8:23:19:ad:05:5a:59:a2:21:05:12:b7:c3:13:2a:02:ac:26:
9e:c9:2d:49:b3:46:20:3a:be:e5:bd:df:b6:53:1d:6d:e1:14:
b7:c6:6c:82:67:c0:c5:3c:d4:df:2a:6c:a5:5d:61:11:86:d6:
0d:a9:0a:c2:24:e7:c6:97:d6:68:d5:ed:b5:84:a1:f3:5e:60:
49:6d:0c:70:57:d1:20:c0:ce:b9:79:ae:c3:8b:07:65:3d:88:
8c:ec:20:f6:32:05:b4:43:59:66:c4:35:66:21:e5:c9:26:91:
32:27:24:9a:34:a7:98:38:3d:e1:7a:8c:e4:86:be:f7:4c:fb:
18:84:eb:36:3c:94:e5:85:bd:53:52:8a:a5:4d:58:83:a6:1e:
bc:34:00:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:23:37 2026 by rpki-client