Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
File: 9oBoAaqBnIocqImNFZiUkJzoKCk.mft (raw, json)
Hash identifier: SAnMVROiBabJeATFWvzXyZKPwbOLib1AZQhXzDRVDAE=
Subject key identifier: C3:3A:F2:B8:90:AF:D9:51:9A:AC:80:5F:E9:F4:41:0D:FB:1C:5D:59
Authority key identifier: F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29
Certificate issuer: /CN=f6806801aa819c8a1ca8898d159894909ce82829
Certificate serial: 019E1C472FCFBEC73CEC0717A5EBAA2AC62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
Manifest number: 17
Signing time: Tue 12 May 2026 13:01:27 +0000
Manifest this update: Tue 12 May 2026 13:01:27 +0000
Manifest next update: Wed 13 May 2026 13:01:27 +0000
Files and hashes: 1: 9oBoAaqBnIocqImNFZiUkJzoKCk.crl (hash: CkBXPkl8aG5tV2J4RLVQYTNdeyf7ovwtgoqXp3pp94k=)
2: ystfWuwLG_sjkRPz74-K9kJmCS0.asa (hash: A/Zpc7HU31s0tuJut1dPdLlpZdSrvy9Su9vtCFoJBpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:2f:cf:be:c7:3c:ec:07:17:a5:eb:aa:2a:c6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6806801aa819c8a1ca8898d159894909ce82829
Validity
Not Before: May 12 13:01:27 2026 GMT
Not After : May 13 13:01:27 2026 GMT
Subject: CN=c33af2b890afd9519aac805fe9f4410dfb1c5d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:58:2c:4b:16:1a:d0:31:b8:48:14:bf:bd:
a9:de:d5:7e:61:a6:f4:ad:ef:83:1d:a0:40:a4:c9:
62:b3:cf:05:1f:f7:ab:17:76:ce:49:b7:4b:6f:90:
71:82:d4:bd:1a:62:04:25:b8:d9:d6:ec:9e:3e:80:
2d:2a:2d:d4:6a:a7:c1:4f:9f:38:85:e5:df:ea:a7:
97:99:dd:0a:f2:c6:f1:98:29:68:16:31:17:ca:91:
07:80:6a:5d:01:e3:3d:a2:72:92:95:d8:88:7a:35:
4b:6b:4f:8e:85:64:c7:59:14:2f:8b:e4:8e:6a:9e:
c4:20:45:b7:e9:14:9e:9c:95:28:5c:6d:c6:be:93:
f1:97:40:9b:7b:cf:d0:18:53:97:2e:98:ea:40:63:
cf:b0:b6:ef:9d:96:ee:d4:ba:4e:50:75:3f:71:f1:
b7:9b:42:c2:2a:f7:5e:41:67:57:89:40:d6:5e:44:
59:33:2f:b9:1e:b9:27:6e:b2:0a:2e:a7:19:8e:95:
33:72:d0:b4:b4:f2:a6:5c:48:a5:08:fd:70:00:61:
57:47:ac:85:66:42:41:50:71:70:7a:aa:2a:0e:b5:
73:b2:66:85:c4:c4:52:7d:d1:10:46:6c:e9:01:fd:
23:9a:33:55:43:7a:58:7d:2e:71:e7:e7:c6:d4:fe:
dd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3A:F2:B8:90:AF:D9:51:9A:AC:80:5F:E9:F4:41:0D:FB:1C:5D:59
X509v3 Authority Key Identifier:
keyid:F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6f:75:76:eb:10:06:ae:fe:81:7c:8c:bb:f3:8b:ea:0c:15:
2e:e8:e0:3b:4a:2b:d5:3a:d5:87:ce:41:7a:56:cf:85:06:ed:
c2:f9:6a:9f:6d:99:d6:72:63:05:81:e0:6a:ad:de:4b:c7:01:
fe:bd:1e:dc:12:4b:7d:8d:13:ab:1a:7f:45:16:57:0b:01:93:
8f:90:9c:ec:67:f0:0d:44:54:d1:b5:e1:20:e7:9e:bb:4c:63:
7e:fe:49:f2:c9:d2:09:43:6d:81:ac:80:81:2a:63:bc:7d:2b:
ac:aa:9f:af:17:ce:d2:14:89:61:c8:af:93:b0:27:ff:46:5a:
f4:b7:f1:f9:55:b1:ce:4e:39:a2:ac:f2:ca:83:c8:ac:29:ec:
6c:09:6b:86:a8:b9:9a:50:0d:bf:c3:52:93:13:3b:eb:aa:3c:
b5:e2:48:c7:b4:55:62:fb:7a:e1:c9:14:d6:d1:8e:b2:fe:63:
be:b2:57:73:2d:39:be:11:9b:2d:62:e4:6f:f1:e0:fb:26:a7:
00:dc:3f:b7:b4:37:3a:1b:ce:35:a3:00:3b:95:4e:8a:ba:38:
f7:17:b2:3d:aa:7a:98:53:0a:4b:fd:95:8a:8c:bb:7b:42:ad:
3a:c8:cf:ff:e8:27:09:80:7d:46:85:47:cb:03:9d:b0:17:fc:
48:22:eb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:02:49 2026 by rpki-client