Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier: Slxb3jkDAkYQQXtF+FTILWNKLIrf3AefyOH4W4HcC0s=
Subject key identifier: E9:D7:DE:68:4A:6B:AE:82:CA:4B:BE:5F:0D:FD:B3:D0:FD:56:C0:53
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 019E1DC71DDE556CC38EE2B5E11AECBD2A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number: 0C61
Signing time: Tue 12 May 2026 20:00:48 +0000
Manifest this update: Tue 12 May 2026 20:00:48 +0000
Manifest next update: Wed 13 May 2026 20:00:48 +0000
Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: Y7BvXLWWFX2V1+PahpE0mfciwCmeMK79LVpF1Zf27t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:1d:de:55:6c:c3:8e:e2:b5:e1:1a:ec:bd:2a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: May 12 20:00:48 2026 GMT
Not After : May 13 20:00:48 2026 GMT
Subject: CN=e9d7de684a6bae82ca4bbe5f0dfdb3d0fd56c053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:ff:1a:cc:36:80:5c:0e:11:60:17:1b:55:
b7:87:68:dc:f0:a9:dc:40:7b:84:29:4e:a3:e5:7f:
c0:9d:38:5d:77:a7:10:e9:cd:64:6c:1c:be:4a:9d:
cc:d6:ef:62:18:db:da:32:60:6a:6b:8c:9c:cc:60:
20:e8:a2:28:3d:4d:fd:5c:1b:c7:ff:e5:29:89:9f:
11:ba:cc:c2:07:9e:99:1e:0a:ec:7e:80:94:b2:75:
76:a0:42:ee:98:1d:d5:0c:70:8b:62:f2:0c:0c:23:
0d:bc:1c:42:69:40:81:59:69:5f:d2:e2:9e:83:3e:
d4:1f:b8:cf:10:54:3c:b1:7b:b9:86:52:d4:67:56:
ed:26:57:e6:dd:77:48:c5:aa:a5:4e:ef:26:32:60:
36:4c:9a:cd:74:25:77:b8:dc:25:19:ff:f7:9a:12:
46:ae:91:87:86:31:ca:4e:30:6b:3b:21:83:1b:6a:
49:24:f8:a3:42:ec:6b:4b:4c:d2:2e:8b:4a:dd:58:
cb:f8:91:89:b5:4a:01:ad:26:39:be:d7:05:8d:bd:
c8:6e:14:47:19:97:34:ce:2c:50:9c:18:8c:97:66:
ff:c9:c9:77:9e:5c:81:7b:7f:37:69:60:a0:41:57:
69:5b:10:d0:a4:10:42:99:58:09:ca:cf:56:84:48:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D7:DE:68:4A:6B:AE:82:CA:4B:BE:5F:0D:FD:B3:D0:FD:56:C0:53
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2b:6e:83:43:93:12:6c:4c:30:45:10:25:6b:74:1a:88:cf:
ff:73:8d:31:61:22:e9:57:4a:eb:3e:2c:e3:b8:ef:0f:8f:3e:
06:a4:58:4d:d9:c8:76:04:3e:ce:40:c2:38:9f:f9:25:e7:b6:
a2:0f:c6:bb:a1:33:a9:c8:a6:3c:a6:a8:63:6d:5c:7e:a5:33:
bc:78:17:61:eb:4a:82:af:1d:62:c6:d1:fc:ce:9d:13:ac:f7:
4d:97:b1:b0:d8:50:a2:90:4e:04:7e:7c:c7:53:15:8f:56:37:
6a:5b:75:f8:cf:ec:8b:5a:6c:3f:3b:b4:db:5a:ef:4d:35:3b:
26:56:48:40:4b:37:54:bd:b0:6d:ee:e7:1c:9d:df:05:76:a6:
7f:2c:60:f1:54:86:6d:62:83:4f:ec:d2:2f:f4:e4:98:c8:a5:
21:05:2a:af:9d:db:fc:95:28:d3:c8:cf:c6:ea:13:86:a9:a0:
32:18:9e:18:0c:d1:31:27:56:6c:89:23:c3:5b:3b:52:85:b6:
8d:ba:a9:c1:b5:bf:34:b3:29:36:07:b3:d7:d1:5b:59:3a:63:
8b:2f:40:49:f4:7b:ef:ce:d6:47:77:16:77:3e:5f:2e:2b:af:
a5:89:7b:2c:b8:28:65:f8:6b:bd:44:c5:5d:4d:1b:cf:f2:a0:
37:9c:69:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:44:47 2026 by rpki-client