Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: VBN72YnhbeTjdEjvXwomOAmEOiSRCKxnrO5tjkA2twQ=
Subject key identifier: 39:21:75:08:1F:BF:63:31:CE:8A:BE:32:C5:74:C9:41:86:96:63:7D
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 019E1E359997E2C65A164906A126FA8BF88F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 22:01:29 +0000
Manifest this update: Tue 12 May 2026 22:01:29 +0000
Manifest next update: Wed 13 May 2026 22:01:29 +0000
Files and hashes: 1: 4QMkscbS6Pf39LzeH_MVqzG_9Ak.roa (hash: m7wSLBG3yMM59qxFhuh+wuLPCbDahbo3ByN0pwy2TGw=)
2: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: gIYLlgUcnCd38UVbNV1p1LKa2r9/AZ6mHj4MiJYQO6Y=)
3: d6fj2hsf73awFuJ9_OrVwzH3RUU.roa (hash: q5EEFAAUQDhZrlGyPfpObbd8Uk9pSouDXHiB9RSx/i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:99:97:e2:c6:5a:16:49:06:a1:26:fa:8b:f8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: May 12 22:01:29 2026 GMT
Not After : May 13 22:01:29 2026 GMT
Subject: CN=392175081fbf6331ce8abe32c574c9418696637d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:14:e9:83:de:99:ed:d5:c3:f8:04:f0:ad:
ce:0e:d5:d9:b6:4f:05:13:55:a4:56:95:4b:c1:3a:
78:75:40:65:fc:32:e6:35:51:ae:3e:58:17:7f:c8:
f4:56:14:e4:0a:07:43:40:60:0c:6e:c8:67:1b:9a:
1a:16:01:2c:06:53:86:91:02:d1:8e:fb:63:c7:39:
6e:4c:f5:bc:55:4a:49:fd:71:d9:c6:79:df:9e:0f:
15:81:0f:6f:75:20:2c:39:66:5e:1f:80:dc:56:9c:
34:09:f6:09:07:60:4f:d1:00:b3:e7:c1:b1:f0:05:
f0:db:95:67:87:36:d0:30:a2:9b:3b:29:0a:86:64:
b5:a5:8f:f9:5f:c5:78:cc:32:71:d2:b2:ec:3c:56:
b0:af:5d:c2:9d:26:84:da:57:5a:7c:6b:90:c2:12:
2c:8a:7b:e6:78:e0:fe:e3:5b:73:a1:05:14:ef:66:
5b:30:fe:1d:de:34:64:b6:34:9b:c5:e4:62:e2:d1:
b4:5d:72:ad:3e:01:47:5b:01:0f:d9:f3:6a:d0:25:
b8:a0:a2:59:b6:3e:01:88:bc:d8:13:7f:1e:25:7a:
ca:fd:c5:9a:03:4e:a2:0a:44:c9:47:53:5b:a5:7c:
59:45:3c:d1:6b:6f:a2:c2:11:ad:da:de:b7:8a:d6:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:21:75:08:1F:BF:63:31:CE:8A:BE:32:C5:74:C9:41:86:96:63:7D
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:80:94:a8:f3:cd:bb:31:ee:83:75:a4:1b:41:64:d5:77:5d:
5f:99:52:36:53:84:50:2c:87:61:e9:3d:b6:26:30:e9:94:2c:
4a:f7:b0:46:da:1d:c5:ec:79:e9:28:e2:97:1c:30:da:eb:c0:
65:19:13:ae:f7:85:cb:5c:b4:2c:4c:bf:5e:60:72:57:fa:70:
3d:f7:e4:ad:85:51:06:6a:b8:4f:23:de:c1:f6:0a:51:ac:cf:
81:bc:ee:f8:73:76:9c:bb:a2:00:fb:a9:55:fc:24:11:ea:c7:
17:a9:e0:0b:4a:24:e5:55:4d:f3:da:17:47:e9:54:4e:86:05:
a3:b1:f1:6a:1f:15:b3:46:99:c2:d7:6e:47:5f:50:c8:1f:64:
0f:53:bf:aa:74:24:11:91:bf:04:ab:b5:d4:dd:99:ce:55:18:
32:dc:5f:1f:44:42:d0:08:13:32:cd:ce:26:20:6e:f5:2c:6b:
bc:ca:5f:ec:a3:96:94:18:ad:f6:af:8a:97:11:af:7e:49:e4:
59:50:b5:71:26:13:5f:6b:e3:38:72:cf:bb:4b:49:bc:11:92:
71:1b:05:20:59:09:ac:f4:b7:9c:11:4b:72:fa:ab:ae:ec:71:
de:88:3d:c3:35:d3:00:3c:79:98:d2:05:3c:6c:77:1e:df:0b:
6b:f7:8e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:51 2026 by rpki-client