Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
File: 9A68dJdsw9CsbGRtUHcPjZoWqeo.mft (raw, json)
Hash identifier: YzCJnKMgvlKQtbEA5Soyc/a/ZpsTeA9eGPVmLut25fs=
Subject key identifier: 8C:C5:60:2C:7D:10:F2:0D:35:A4:C9:EB:3A:DD:53:FE:77:B4:DB:45
Authority key identifier: F4:0E:BC:74:97:6C:C3:D0:AC:6C:64:6D:50:77:0F:8D:9A:16:A9:EA
Certificate issuer: /CN=f40ebc74976cc3d0ac6c646d50770f8d9a16a9ea
Certificate serial: 019E1DFE924F41306C03A4CCC4D44AD6EC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
Manifest number: 013A
Signing time: Tue 12 May 2026 21:01:23 +0000
Manifest this update: Tue 12 May 2026 21:01:23 +0000
Manifest next update: Wed 13 May 2026 21:01:23 +0000
Files and hashes: 1: 1_6s-T8QaefbtMNamrKj-DA25wk.roa (hash: yYUr/M+QIUzpx+GUhq6tUq9L7e7cvOQNhE+CyPESSIo=)
2: 9A68dJdsw9CsbGRtUHcPjZoWqeo.crl (hash: 6J45P7zOjmGssMqL97/iFS4Id9cJXl2A2kw639+47ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:92:4f:41:30:6c:03:a4:cc:c4:d4:4a:d6:ec:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f40ebc74976cc3d0ac6c646d50770f8d9a16a9ea
Validity
Not Before: May 12 21:01:23 2026 GMT
Not After : May 13 21:01:23 2026 GMT
Subject: CN=8cc5602c7d10f20d35a4c9eb3add53fe77b4db45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:14:c4:8a:d4:5c:38:bf:f6:9d:fd:24:1e:
41:73:4e:6c:e9:28:10:b1:cd:f0:e2:29:21:24:fd:
74:11:d3:da:2a:68:1f:05:be:b1:45:30:2e:56:44:
2e:ed:91:20:22:6d:65:5c:50:aa:c6:50:6d:17:48:
17:02:54:c3:d2:41:e9:88:ee:97:8d:98:e8:28:1e:
6d:21:9b:40:e7:c8:49:40:aa:21:c1:14:4f:9d:e0:
2f:58:01:92:72:f1:00:d8:a0:df:04:84:8b:b2:b2:
0d:25:32:e4:88:a7:fe:38:f6:bc:90:a6:2a:49:9f:
41:8c:07:1e:80:34:cf:2f:d6:ab:1a:ec:70:52:05:
dc:77:0d:80:43:fc:dc:1e:19:6e:75:16:de:bb:fa:
82:5b:16:6c:36:02:e6:73:83:3d:25:7e:81:4d:6e:
90:17:ed:a3:f6:86:1e:49:5c:ab:f8:ce:bc:8c:b5:
27:7b:a4:c5:fd:95:13:69:59:24:39:6f:bc:ca:68:
10:d0:4e:d7:a1:99:8b:1a:c3:bc:bd:35:d5:4c:92:
50:1a:b8:bf:b0:0e:a2:f9:e5:be:5b:78:09:ae:2d:
25:a9:24:7d:ab:26:70:f9:a1:ca:dc:14:ec:5d:80:
60:73:7a:cd:70:5c:df:39:28:2f:92:7a:b2:c3:eb:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C5:60:2C:7D:10:F2:0D:35:A4:C9:EB:3A:DD:53:FE:77:B4:DB:45
X509v3 Authority Key Identifier:
keyid:F4:0E:BC:74:97:6C:C3:D0:AC:6C:64:6D:50:77:0F:8D:9A:16:A9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9b:3a:1a:90:e6:98:b7:34:4c:ac:63:c0:ef:f1:51:a8:6f:
fa:9f:b3:83:7e:27:d8:05:23:8f:88:c2:7d:ea:17:e3:74:8e:
98:ad:ec:97:18:11:fc:ba:09:32:4d:cc:50:bc:bb:c6:3a:e9:
14:92:a5:76:4b:6b:05:f2:cd:ef:0d:8c:5c:18:46:7a:e2:43:
a8:a6:96:3e:56:f3:2f:20:cb:ca:90:af:dc:fc:be:f4:e6:06:
d7:48:2d:c2:56:bc:76:07:b1:cb:96:79:40:2b:27:66:9e:e6:
e3:59:61:ea:b9:08:f8:35:39:ce:b4:1f:a7:a3:ac:78:81:17:
59:6b:b5:d0:be:e4:c5:c9:6f:0d:75:66:2c:03:d0:5b:ae:b9:
3f:ed:63:cc:c2:e7:aa:e6:02:b3:db:a2:47:d4:60:b3:57:11:
ff:0c:56:a1:d2:d2:1f:ba:a7:22:80:ad:97:cf:1f:2d:3c:73:
ec:75:84:9f:9b:d9:05:82:58:70:88:1e:f0:f0:42:7a:02:9a:
3e:0b:d4:f3:1f:a1:72:4b:df:b5:3f:65:2e:bf:f2:31:0c:55:
fc:d6:fe:5a:7b:7a:6d:9d:0a:13:d5:f5:2a:7e:d8:50:ad:98:
2e:01:47:14:c6:1e:89:b5:48:26:5d:ce:cd:68:fe:b7:bb:06:
08:e7:f0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:19:05 2026 by rpki-client