Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File: 9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier: cObegKQJbjHd6mGhofC50+70rpo7mPCwkVQe1nNwjns=
Subject key identifier: BE:20:17:A8:93:DF:62:91:24:DD:23:BA:AB:10:94:C7:32:DB:87:E7
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer: /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial: 019E1CB4A2F0F8C9D493171D25EF81711772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number: 1641
Signing time: Tue 12 May 2026 15:01:00 +0000
Manifest this update: Tue 12 May 2026 15:01:00 +0000
Manifest next update: Wed 13 May 2026 15:01:00 +0000
Files and hashes: 1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: oIYksjcj+51bZsOfH236y/2d5xdsTVkNtJnJ/ycd2yc=)
2: mEgDM3l5c0LrVuCqn477ft25k3w.roa (hash: KJ2JP42lCHcxJukTZAz4D69v5GnFU1eWXwSmVHNVnQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:a2:f0:f8:c9:d4:93:17:1d:25:ef:81:71:17:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f501b9e20616d686b405da906afa597635063640
Validity
Not Before: May 12 15:01:00 2026 GMT
Not After : May 13 15:01:00 2026 GMT
Subject: CN=be2017a893df629124dd23baab1094c732db87e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:10:81:71:8b:14:af:53:b7:4f:8b:7f:62:
d9:54:bb:44:43:99:5f:26:d4:e7:1f:b7:fb:46:09:
e5:2d:29:ad:15:e9:86:9d:c2:27:df:6b:3a:cc:7e:
c2:d4:ac:8a:42:8c:bb:58:72:7e:a9:8f:ca:5d:7e:
6e:f9:c6:70:9f:35:63:91:95:9e:bd:90:2b:ed:2d:
bf:49:9f:ae:17:b1:72:bf:1d:24:a2:d2:48:5d:44:
ed:2e:de:d3:6f:aa:b3:f8:bc:5d:cf:9f:b7:41:d4:
b2:79:74:4d:91:34:f3:76:d2:95:4a:13:31:21:41:
3a:2a:66:44:3e:e2:e2:2d:45:0c:58:66:46:1f:35:
39:84:75:60:78:96:68:68:9f:ff:44:f6:dc:15:dc:
ef:42:a4:28:05:39:59:39:06:29:b2:f9:5a:47:6b:
b1:c3:19:e4:2b:fa:10:6c:f9:b6:9e:3f:3e:3e:ee:
72:73:39:98:8a:14:d2:81:8e:e2:e6:66:15:32:03:
d4:6f:32:df:31:95:42:77:85:cb:c0:d9:8f:df:f9:
f2:ea:2e:06:49:0f:9c:ae:03:f8:f5:1e:30:79:76:
78:84:a7:13:a9:0e:16:7b:9f:e6:32:37:44:7f:06:
da:5e:a3:73:f0:9b:65:b0:db:5e:3d:ca:f6:81:1c:
75:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:20:17:A8:93:DF:62:91:24:DD:23:BA:AB:10:94:C7:32:DB:87:E7
X509v3 Authority Key Identifier:
keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:66:d2:61:68:21:c1:ec:c8:0e:1b:c9:91:a4:0f:2d:e2:29:
87:b8:cf:50:d2:f4:52:e2:a8:77:30:a5:17:af:95:f3:db:79:
7b:8a:df:0c:79:89:53:1a:05:c7:51:39:4e:25:39:8c:28:ff:
f5:98:be:41:cc:3d:65:f9:87:97:8b:b9:b3:9d:b4:d0:98:f8:
bf:73:81:cc:61:1b:45:79:01:ef:c8:30:92:79:5f:f7:d3:98:
55:3c:cb:f7:a2:5c:a0:e4:0f:f9:59:c4:ea:aa:1a:ce:11:20:
76:52:b8:47:b7:89:42:68:32:d7:55:df:04:ac:b0:c2:d2:fc:
ae:81:87:00:88:14:8c:db:3e:cb:9d:ef:c8:ee:b0:51:7c:42:
04:74:ed:11:ec:45:de:5b:14:11:85:69:93:f4:1c:8f:56:2f:
5b:f0:0e:fc:9c:90:9e:70:71:8c:64:60:73:0d:31:c6:e4:42:
6c:fc:15:95:cf:4c:6a:85:2d:80:22:d6:fa:24:ff:58:b3:b8:
be:99:4e:41:37:ef:81:58:c7:98:e4:35:02:0a:58:8c:d0:72:
56:78:63:ae:b9:c2:91:d4:07:64:c8:e6:90:ce:f3:70:09:5f:
aa:e9:92:7b:5a:ac:e9:c2:92:32:0f:39:f9:d3:c3:c3:93:0f:
10:a9:9c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:34:00 2026 by rpki-client