Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier: HYew/gtkzEn3kf27v7LggbjBV9g7X0mEE3QcGPjLUoQ=
Subject key identifier: F9:83:37:42:32:02:66:60:41:CB:9E:9C:08:86:BD:C6:50:68:A0:D5
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 019E1CB5164D752F5BEF87FFAF7E9232B95E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number: 0C04
Signing time: Tue 12 May 2026 15:01:30 +0000
Manifest this update: Tue 12 May 2026 15:01:30 +0000
Manifest next update: Wed 13 May 2026 15:01:30 +0000
Files and hashes: 1: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: yiHHSbTzLOgZlGSMrcDm0kdA8nH2pGaQEnBQF2QIvJ8=)
2: QBd5Wpp5kWkoCSM4_95uiC5JDV0.roa (hash: flLVepDAjYfRnttnJvSS11YgDPxXUtJLpwyzAOjne3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:16:4d:75:2f:5b:ef:87:ff:af:7e:92:32:b9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: May 12 15:01:30 2026 GMT
Not After : May 13 15:01:30 2026 GMT
Subject: CN=f98337423202666041cb9e9c0886bdc65068a0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:66:06:54:90:3f:84:d5:50:31:cf:0a:f0:84:
04:f2:fe:b1:e5:96:a8:ea:e7:c6:9f:c2:2d:f4:32:
0e:97:e2:74:b0:a1:d6:62:5c:aa:d2:56:fa:99:91:
d9:4c:19:54:f8:57:28:1e:e2:b8:32:78:a9:9a:5e:
e2:6a:12:72:ee:10:16:74:f8:20:47:dd:9d:dd:dc:
55:7f:a4:ae:b1:8a:d0:28:66:c6:b2:75:05:cd:35:
89:3a:bc:b8:9e:e4:69:2b:c3:21:d6:97:0d:82:4b:
0a:e3:85:20:06:28:84:30:e8:5c:44:44:37:ad:c4:
4f:d1:24:11:e3:a0:ed:1c:9d:10:05:bb:e7:c4:ba:
7f:06:35:bd:7e:33:4e:db:04:07:67:02:61:ca:95:
28:2c:16:41:3b:89:5a:70:0c:f4:09:28:ce:ff:8c:
0d:ca:f2:43:fd:e4:a8:1f:80:38:06:03:45:e0:83:
29:d3:74:f0:05:69:9f:4b:c5:aa:00:d8:35:a6:04:
46:29:c6:6f:67:38:37:5d:d5:be:17:ba:39:a0:ef:
f8:55:96:43:68:10:db:31:32:6e:6c:9e:b1:b6:1c:
d0:a1:f4:80:6e:6d:76:86:da:d6:a4:23:28:ee:19:
7b:e5:d7:10:29:df:ce:d3:7a:da:df:88:39:fd:1c:
25:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:83:37:42:32:02:66:60:41:CB:9E:9C:08:86:BD:C6:50:68:A0:D5
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:3b:31:a8:68:82:9c:d2:1a:57:0f:4b:48:f2:16:9e:c2:7b:
e1:f9:b6:b5:3c:17:2f:72:7b:7c:dc:14:6c:a2:77:0d:5c:5a:
a7:87:89:ae:c9:5d:fc:2c:83:33:73:a5:61:a2:45:d4:2e:38:
e8:42:ad:bc:91:54:33:2b:9c:f0:e6:fd:77:3a:1b:80:d4:0a:
b3:50:5f:01:f1:ee:c1:1e:04:f4:0d:5e:c2:4c:f0:41:4d:0e:
ce:d2:bb:48:78:6d:ca:48:da:a0:25:f4:1c:36:0f:3c:43:c7:
02:80:90:a8:eb:37:61:fa:64:6b:20:4d:af:41:2e:38:8e:cd:
7e:b6:9f:4b:4c:23:1c:ba:ce:f1:bd:fb:79:e2:e5:f7:dc:3b:
64:32:66:01:9e:69:1f:d9:1e:96:0c:60:12:e2:f5:e7:44:90:
6b:89:e9:30:d5:9d:12:33:b2:49:ea:dd:38:62:14:a0:df:55:
1a:fe:ab:1c:ee:0c:85:1d:65:81:c5:43:6b:22:cd:7a:04:a1:
c0:98:11:5d:37:3a:8e:5d:2e:b2:7d:1e:c0:e1:7b:d4:56:a0:
fe:e0:f2:2a:66:89:40:84:52:4e:3d:29:14:7a:d7:d4:c1:7a:
97:50:5b:5b:52:78:1b:57:19:e4:a6:d1:fc:96:07:34:67:b0:
d0:d2:84:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:33 2026 by rpki-client