
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File: c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier: KdKJoufDp550A1VjYxJeMncMDF5vc5ppJxzDyrDn2uk=
Subject key identifier: EC:90:FA:62:88:91:ED:B9:46:71:12:32:38:04:08:39:36:9F:26:89
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer: /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial: 019E1ED9A351C4D7C971C81BFE385FA53CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number: 0D49
Signing time: Wed 13 May 2026 01:00:39 +0000
Manifest this update: Wed 13 May 2026 01:00:39 +0000
Manifest next update: Thu 14 May 2026 01:00:39 +0000
Files and hashes: 1: 40EThboBSEVGFMmXd89FK4WaTNo.roa (hash: ohel7RKT+QSonvsuuV4gvqAOjnxAWjb8zzBfZRnvIeI=)
2: XNHFS8ZMGooSizNDD-_Z2_M2bLs.roa (hash: NrqwSk7qLUhd2Ca65sK/JaxXop9TloKYfUN2lC/2ang=)
3: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: 2+5CRaNt7UZOtY4BAzfxKVWOytcCo21creaSavL5NXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:a3:51:c4:d7:c9:71:c8:1b:fe:38:5f:a5:3c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Validity
Not Before: May 13 01:00:39 2026 GMT
Not After : May 14 01:00:39 2026 GMT
Subject: CN=ec90fa628891edb94671123238040839369f2689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:60:57:6e:92:ed:f7:f7:a2:44:f1:24:78:3e:
19:71:8c:38:7e:3a:c2:82:f3:26:27:b3:6b:bd:bf:
6e:f7:96:1e:f6:f9:03:17:47:53:8a:28:46:08:f9:
51:ff:ca:1b:c7:53:0c:d6:16:49:fc:c8:0c:76:8f:
72:d9:ba:c6:c8:1a:b0:54:c0:50:71:71:2d:0c:bb:
52:14:07:54:7f:31:47:a7:71:c8:f9:8b:9d:37:1d:
ee:aa:06:14:71:2a:76:82:a6:64:bb:c8:91:79:a5:
23:f5:09:d7:11:2e:c2:ab:a5:3a:fa:88:6e:95:04:
eb:12:be:99:43:06:81:b4:e9:bb:20:cf:27:fd:62:
62:fc:90:f1:19:97:36:9d:cf:94:b3:cf:ac:f6:6d:
e0:69:cf:4d:41:6e:73:d1:b1:34:4b:21:0a:04:bd:
c9:82:c9:12:16:19:13:9a:a3:39:44:d9:ff:4c:30:
f8:a5:16:7f:53:cc:c6:e4:68:27:6f:fd:f9:d8:ae:
ee:0b:d8:42:bb:8a:fb:e5:34:3e:bb:e2:17:91:9c:
4c:c2:ec:c9:61:28:95:6d:e5:30:83:40:b9:d6:b5:
dc:d4:f6:3f:6a:78:15:0a:9f:18:9a:0f:40:d1:a5:
27:b6:c7:5f:67:af:d4:8e:4f:63:fc:51:eb:82:ce:
ff:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:90:FA:62:88:91:ED:B9:46:71:12:32:38:04:08:39:36:9F:26:89
X509v3 Authority Key Identifier:
keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:dc:00:37:b7:0b:ff:98:69:35:2d:18:ea:ef:c7:48:7e:e3:
95:a4:97:a8:e4:23:af:4a:dd:b4:ae:35:56:96:e3:14:00:d1:
ac:ab:92:7f:b6:ff:9e:9b:61:b9:03:bd:8d:b3:fe:9d:b7:9f:
b9:50:94:80:43:f8:fd:65:20:0d:97:cd:92:fb:27:56:1e:e0:
8e:71:c1:ff:d5:6d:32:bd:94:e3:bf:bf:d0:1e:f2:42:2c:dc:
6e:1f:b4:2e:8a:62:6d:58:f9:46:19:0b:ef:82:df:85:90:71:
b0:75:55:b0:ff:50:1f:f3:b6:2f:f9:40:e1:d0:d3:d3:35:c4:
20:f0:57:63:45:77:aa:f3:0a:83:2a:78:c6:5e:ad:48:2b:6c:
d3:dd:d8:47:8d:84:53:ce:6f:74:80:64:a2:65:f3:98:c8:96:
b3:32:6d:a2:5f:fa:b4:9c:31:3f:3b:52:90:51:e2:b3:c0:e8:
46:ff:df:a3:e9:f3:a3:8a:60:fa:8d:44:75:e2:14:e6:17:92:
56:e7:19:1f:83:cd:da:51:7f:f8:5e:02:ef:b5:2d:18:b0:55:
a7:46:42:09:5e:6c:f2:6a:78:55:fa:9c:1f:e1:81:01:6a:11:
37:70:bd:27:01:c7:2e:12:00:d0:db:73:78:05:4c:4d:80:7e:
7c:4a:09:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:33:10 2026 by rpki-client