Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
File: d9LZKEIxBOXDSA4htKPtFJiyon4.mft (raw, json)
Hash identifier: c7FtXbCotby7VS+Co921cdEvBaIbJ0fnj38+f6DiA9g=
Subject key identifier: 17:79:68:F8:52:D8:16:53:FA:1E:6B:03:19:6C:26:6C:0E:AE:F3:F9
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Certificate issuer: /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial: 019E1E6C67E479B7ED740237884FA0274892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
Manifest number: 0E81
Signing time: Tue 12 May 2026 23:01:21 +0000
Manifest this update: Tue 12 May 2026 23:01:21 +0000
Manifest next update: Wed 13 May 2026 23:01:21 +0000
Files and hashes: 1: 6h9k6xzi-eiSHNvIfR1iiY1lGdQ.roa (hash: pfVa1UicKiOy2Facu1pK6Uyiw1IMqVl6D7uB18F/7yw=)
2: 9Y6XWJ6VWz8otzDPBalCUtCfzZU.roa (hash: sjrsCbBwaUlQ8V+c9dddc6DlyD0j++DkIm2cvSRmRTg=)
3: bWOm_rxxwcbWaTmu2SnHiIL1r88.asa (hash: QCA4tD64a2YOFOaYQUc8hAaRjVEoTC+6/Xd9DFb0omA=)
4: d9LZKEIxBOXDSA4htKPtFJiyon4.crl (hash: ZsPK21DmTODFrlBlLr2jv1AmBtQ9YaehohdbsTdWLuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:67:e4:79:b7:ed:74:02:37:88:4f:a0:27:48:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Validity
Not Before: May 12 23:01:21 2026 GMT
Not After : May 13 23:01:21 2026 GMT
Subject: CN=177968f852d81653fa1e6b03196c266c0eaef3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:81:68:e6:ad:2c:8a:e7:02:cf:3b:75:65:
87:f1:00:9a:b1:c5:88:18:d5:32:5d:d7:12:95:ee:
cf:96:6e:53:8f:7f:63:83:76:3e:5f:59:a4:3e:f1:
77:1b:8d:91:7c:cb:93:aa:9d:1a:2f:18:73:5f:7a:
7d:ec:56:5d:f3:df:1e:42:20:40:05:2e:65:e4:ba:
7d:d2:cd:7e:5b:e1:97:b2:25:5c:01:ee:0f:d8:dc:
88:cb:19:58:df:b7:77:ca:c6:f5:a9:e0:aa:03:76:
3a:5f:54:58:2f:71:3c:ff:dd:a1:e0:a5:74:23:7c:
40:18:d6:05:d6:48:93:1f:a6:6c:55:6d:16:d4:86:
77:b8:9f:67:a1:a5:41:fd:ca:9b:05:5c:ab:5f:14:
fd:bb:2c:23:28:33:f9:5b:4c:c2:69:c9:75:c9:34:
aa:9d:60:38:f1:2c:b5:e5:88:2a:b8:54:49:23:97:
67:90:07:3b:70:56:d3:a5:86:7c:b9:0a:ef:79:0e:
e3:09:11:8c:5d:d0:e5:a5:43:f5:18:cd:5b:40:a7:
ec:5f:9d:e2:e3:84:80:39:9a:9d:25:7b:22:48:6b:
c0:b1:43:f2:80:16:64:f1:bf:d6:d1:83:fe:a8:08:
ee:8c:46:cc:8f:e0:28:b5:1c:25:48:ff:5e:70:f3:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:79:68:F8:52:D8:16:53:FA:1E:6B:03:19:6C:26:6C:0E:AE:F3:F9
X509v3 Authority Key Identifier:
keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c6:89:c5:5a:7a:6b:5d:64:45:d7:6a:8a:90:74:3e:29:f0:
4d:d3:e3:cf:a5:6e:f5:b9:b4:31:23:3d:1f:64:bf:22:de:d9:
40:b2:f1:23:60:c4:b8:ea:16:34:4b:c0:06:22:27:c0:a6:d4:
e2:3b:ab:ff:f0:d6:2a:e1:45:1f:db:9d:b6:5a:15:0b:63:bd:
5e:e9:bf:c9:54:0f:6d:31:6f:9d:31:3e:58:37:84:2e:70:6a:
a4:03:cd:d2:18:dc:64:80:87:5d:40:16:d2:43:36:fb:eb:8e:
01:39:d0:ed:31:52:26:6c:dd:a0:a2:31:0f:f0:98:82:46:00:
07:1e:c5:7e:04:40:42:00:f3:c5:4f:b9:60:2c:63:67:10:50:
a5:b6:3d:0d:c2:9b:ca:67:f2:7d:c8:75:b7:96:83:fd:04:13:
a5:da:41:10:ed:bf:c7:0b:b2:af:3c:f9:01:7f:47:45:70:da:
61:cc:5f:4e:2c:86:8f:bb:d4:e1:3e:15:b4:e9:99:9b:99:57:
90:ff:d4:41:67:3b:9e:33:f6:c2:90:9d:d0:c2:fe:8f:78:30:
ac:9a:38:2a:06:2e:45:5b:1b:84:a6:e9:fb:c1:cb:33:60:44:
92:94:4f:d8:44:f9:57:0f:4e:cb:6e:1a:3c:ec:2d:84:96:8c:
77:37:c8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:02:14 2026 by rpki-client