Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
File: d9Vhc4owymkonMhFMN5d73SjqYI.mft (raw, json)
Hash identifier: P6yCoizwT27ZOMqypYJKkGRvEznOV/5mWykc8F9fNuw=
Subject key identifier: 1F:B7:F1:FE:E6:F9:D6:67:90:93:15:35:4D:34:85:AE:20:E0:F9:D7
Authority key identifier: 77:D5:61:73:8A:30:CA:69:28:9C:C8:45:30:DE:5D:EF:74:A3:A9:82
Certificate issuer: /CN=77d561738a30ca69289cc84530de5def74a3a982
Certificate serial: 019E2023C4B55C14021241281C7ACFD63126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
Manifest number: E0
Signing time: Wed 13 May 2026 07:01:15 +0000
Manifest this update: Wed 13 May 2026 07:01:15 +0000
Manifest next update: Thu 14 May 2026 07:01:15 +0000
Files and hashes: 1: d9Vhc4owymkonMhFMN5d73SjqYI.crl (hash: 8t6LPRRmhAmW5KB/AcJ261ceGkQCGoPDyJLHVo/Pu1A=)
2: wBGjgdfu_nLRR4DjOBdo0PtKJMM.roa (hash: PPK9ixZ6Q7KuFLEJo2Wk9bDSxb6ZvTbGERhmOzUiZuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:c4:b5:5c:14:02:12:41:28:1c:7a:cf:d6:31:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d561738a30ca69289cc84530de5def74a3a982
Validity
Not Before: May 13 07:01:15 2026 GMT
Not After : May 14 07:01:15 2026 GMT
Subject: CN=1fb7f1fee6f9d667909315354d3485ae20e0f9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:91:1c:ce:fc:41:4e:a2:86:15:2d:ae:cd:30:
03:1a:7b:1e:e5:6c:73:6f:0c:92:9f:ed:a1:c5:80:
c3:e4:3d:59:cf:06:3b:b2:93:93:6f:53:65:23:35:
9a:c2:a9:bd:ca:dd:3b:ad:85:45:51:c2:8c:e3:b6:
c9:5e:48:bc:ed:c2:fc:2e:7e:35:e2:fe:6c:a0:5e:
f3:b1:72:a6:3c:2f:a1:1c:48:54:78:ef:7c:ec:35:
65:aa:f0:b1:f9:8f:12:7b:12:a4:21:bb:b5:f8:1f:
2e:0f:61:e6:45:bf:0d:bf:62:ed:8e:1f:d0:4e:31:
cc:11:9b:51:c7:e6:47:c4:e1:fe:ff:eb:87:e7:a0:
76:11:32:46:6e:b7:5c:df:07:c2:3e:6d:f2:20:c6:
c4:c7:79:a3:6b:23:46:55:b0:8d:b0:c9:e7:bb:4e:
f7:cf:89:a4:f9:81:96:e6:a4:a5:ea:cd:91:38:36:
a3:d7:22:bd:3b:58:33:72:95:fa:47:f4:b1:f8:57:
4e:bd:59:f3:14:94:5f:b9:0c:7d:1c:96:88:5e:2e:
99:10:f4:bd:57:c9:f4:5f:00:c7:b7:fd:97:db:00:
2a:7f:c3:68:99:78:8a:11:f9:3e:7b:65:ed:10:99:
5e:c4:e8:b7:3b:ca:f0:01:34:24:83:12:3c:55:c6:
92:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B7:F1:FE:E6:F9:D6:67:90:93:15:35:4D:34:85:AE:20:E0:F9:D7
X509v3 Authority Key Identifier:
keyid:77:D5:61:73:8A:30:CA:69:28:9C:C8:45:30:DE:5D:EF:74:A3:A9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4f:a4:67:4d:d6:8d:32:db:06:6b:25:55:d7:22:9b:c5:55:
cd:b8:d9:15:82:74:66:64:7f:96:a6:ae:58:e8:9a:1a:2e:94:
45:e4:22:95:08:bb:8f:07:58:c4:be:d8:92:d6:7f:88:f5:6b:
25:c4:50:4f:51:f7:db:9f:9e:31:03:77:3a:d0:f3:57:20:26:
17:78:e3:c6:e5:e3:23:7c:32:dd:22:30:c2:90:89:0e:20:b0:
86:1c:e9:37:7f:5f:21:ed:cd:eb:9d:17:c9:0e:6d:af:12:28:
81:b9:69:54:c7:ca:e3:db:2b:85:13:48:c2:61:9f:94:12:3e:
03:8f:3f:3e:1a:3c:29:69:98:1b:c9:7d:5d:14:b0:aa:e6:7e:
58:65:4e:3b:af:34:0b:9b:43:4a:c2:a1:7d:3c:63:10:1a:b8:
5b:aa:d6:a7:33:2e:6d:78:ec:7a:73:20:f6:ad:e3:81:d8:7a:
f2:42:19:e7:ce:9c:fc:1c:51:c7:ac:ce:a5:db:e2:39:f4:32:
ec:00:57:25:97:8a:03:32:3c:ed:d2:ab:f7:37:ff:16:50:0a:
86:69:2b:3e:98:c0:5e:42:75:b5:ed:65:3e:c6:6a:97:ba:13:
1b:81:f7:5a:3f:3d:4d:c0:0f:89:6f:1e:54:3a:4d:9b:49:fa:
e9:0e:bf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:38 2026 by rpki-client