Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
File: 9IDXn6hIvDDnvLU-9f8tBK27TyY.mft (raw, json)
Hash identifier: 6WdtadHPPBIeEZm+D39mx0iToDszHP2cb5pqDTaCciA=
Subject key identifier: 73:D3:34:20:99:F5:31:1D:43:4B:7A:81:87:1D:DF:3B:24:04:05:8D
Authority key identifier: F4:80:D7:9F:A8:48:BC:30:E7:BC:B5:3E:F5:FF:2D:04:AD:BB:4F:26
Certificate issuer: /CN=f480d79fa848bc30e7bcb53ef5ff2d04adbb4f26
Certificate serial: 019E1DFE035B1BAEB5DA0BD32C281F0BFEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
Manifest number: 46
Signing time: Tue 12 May 2026 21:00:46 +0000
Manifest this update: Tue 12 May 2026 21:00:46 +0000
Manifest next update: Wed 13 May 2026 21:00:46 +0000
Files and hashes: 1: 9IDXn6hIvDDnvLU-9f8tBK27TyY.crl (hash: mhv7ikwlH8nD91KV817fp1cQyzBb+g/Sga8ig/qa+b0=)
2: ByerbL1cP92btLeefAdWjxplA_M.roa (hash: 3qNra9qr45ihN8IX80AtcCk2qIs3ym8XI4zn77mcJi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:03:5b:1b:ae:b5:da:0b:d3:2c:28:1f:0b:fe:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f480d79fa848bc30e7bcb53ef5ff2d04adbb4f26
Validity
Not Before: May 12 21:00:46 2026 GMT
Not After : May 13 21:00:46 2026 GMT
Subject: CN=73d3342099f5311d434b7a81871ddf3b2404058d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:55:18:ef:a3:51:77:6f:bc:9d:8b:c6:f7:
57:50:d8:c4:15:4c:e4:27:9a:fc:68:e2:3e:bb:4a:
42:c7:41:78:80:c3:e5:b5:b5:ac:c9:83:51:13:37:
33:b4:d2:c2:04:41:a6:fa:04:5a:2f:2d:0c:30:79:
2f:72:98:3a:33:59:58:ee:51:1e:c6:07:5c:3e:ca:
b8:d3:08:40:2e:75:e1:8b:b8:5e:b1:07:0f:34:6d:
28:06:c5:a6:2a:bc:84:9e:52:03:09:05:1d:bc:4d:
1d:44:b1:43:06:a4:c8:3e:ee:05:3f:04:89:34:89:
27:9e:63:0f:3a:6b:ce:f7:01:6c:d9:d0:3c:b4:25:
aa:e1:71:d5:11:28:b4:d9:68:db:49:c2:f3:cd:3c:
03:5e:c4:68:ff:62:f3:8d:31:3e:ae:a6:21:36:8b:
ba:6e:1c:54:e7:27:a8:fb:70:a9:00:68:86:c6:d5:
76:e3:12:34:f2:63:7c:49:1f:ec:fe:64:2a:02:68:
dd:bf:96:db:c8:0a:ff:15:b8:1a:69:51:7a:a8:36:
f8:61:75:8b:d0:fa:73:e6:35:4e:30:a3:75:2d:4e:
38:25:76:f1:c0:52:05:fc:75:1d:96:92:a6:d0:7a:
6a:be:86:2d:fc:66:98:8d:22:f8:da:bb:f6:92:54:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D3:34:20:99:F5:31:1D:43:4B:7A:81:87:1D:DF:3B:24:04:05:8D
X509v3 Authority Key Identifier:
keyid:F4:80:D7:9F:A8:48:BC:30:E7:BC:B5:3E:F5:FF:2D:04:AD:BB:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:de:df:81:f3:8c:e1:cb:82:d0:7d:ec:43:3d:bd:93:30:02:
88:a6:11:0e:6c:43:8e:df:a5:88:2c:f3:39:ca:ed:96:f0:a2:
0f:b5:1d:2c:47:a6:9c:ae:10:b8:49:eb:84:45:75:bb:3d:ff:
5d:84:25:ba:d2:e0:3a:14:24:87:f1:b5:93:4e:91:2d:64:72:
3c:ee:26:99:37:2a:43:ba:df:64:7a:56:4d:94:43:e5:6c:4c:
9e:78:da:f6:be:7c:4c:dd:e7:06:a0:8c:de:9b:60:51:a7:9e:
43:20:4b:f3:d7:5b:38:10:47:ea:b5:39:e5:ef:03:fa:b7:3f:
5d:47:e7:86:80:62:4e:39:92:81:06:51:67:27:23:2c:63:1f:
e5:5d:99:cb:6f:93:e5:3c:42:5d:68:40:89:be:5c:e5:7f:de:
83:27:39:57:31:25:4f:aa:e8:5d:d9:a6:ea:4b:0c:35:8d:6a:
e5:5f:1f:00:10:50:aa:b5:3f:d5:ea:16:b5:e8:67:2d:7d:06:
72:bb:30:d8:cc:a8:13:a5:12:ba:54:02:ff:2d:ad:87:f9:aa:
18:7b:8f:f4:74:78:83:e7:39:4d:50:10:c7:bc:f9:26:f5:f1:
15:2b:77:14:6a:8b:47:95:86:43:16:03:0a:e4:b9:a8:bf:84:
37:59:02:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:04 2026 by rpki-client