Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: w34djb5FxmdbwSKB0pzBCWVINwqjKe1ejnDtpS/KCW0=
Subject key identifier: 4D:5F:B8:6D:5E:CC:A4:09:03:C5:4D:E1:B8:C7:A0:9A:68:3C:80:FE
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 019E1F10F6773F09F2EF2EB924CDAD504F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 08BE
Signing time: Wed 13 May 2026 02:01:05 +0000
Manifest this update: Wed 13 May 2026 02:01:05 +0000
Manifest next update: Thu 14 May 2026 02:01:05 +0000
Files and hashes: 1: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: sD3rP2n3KBzQkl35ZZPa6wliwBmIvHMVpvvykM+ugoM=)
2: Fps0S7Sn9x24RbjpA_m-Wjxe4X4.roa (hash: llVgeSirYRMnxHxg+jow3ZLNY2RJpGEBaB4uInwuLpg=)
3: q7LASc7RAdvhKI2lD0l4EEgjIM4.roa (hash: Nr2UUQFi//KxEpaf+hC6t8vMKhEd7i+ElopwPR5ej6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:f6:77:3f:09:f2:ef:2e:b9:24:cd:ad:50:4f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: May 13 02:01:05 2026 GMT
Not After : May 14 02:01:05 2026 GMT
Subject: CN=4d5fb86d5ecca40903c54de1b8c7a09a683c80fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:d0:99:d6:39:b6:07:b0:9a:ff:42:b0:c2:
fa:41:d7:3d:39:7d:b1:12:26:c4:c5:32:71:c2:3d:
1d:9e:f7:b4:4e:14:bb:e2:30:76:37:f2:0a:1d:01:
1b:61:ca:d6:b9:d0:ea:d6:2e:ba:19:39:a7:64:1e:
4a:c0:3e:1c:2d:e6:78:2c:6e:31:34:50:6c:38:89:
2e:19:4c:84:57:30:7b:8f:bf:a7:3d:67:98:9a:8f:
99:60:a4:93:ab:21:86:07:d3:fb:45:0c:18:38:56:
06:fc:95:e8:a8:7d:42:2b:7c:91:6e:74:b2:18:50:
26:82:48:f8:51:ea:b9:d7:32:56:18:11:df:88:d8:
c5:99:11:83:dd:80:d3:24:1f:5d:e8:b3:ec:9f:7f:
16:5d:29:ac:ad:be:27:35:15:16:36:a7:5a:de:e7:
35:ec:96:8d:0e:67:42:04:f2:4f:39:04:a5:9a:ec:
a9:78:11:aa:c5:f4:eb:ab:fb:ec:f2:bb:fb:67:0b:
c1:20:20:63:b2:7c:e8:e9:cd:f4:4a:ac:58:b1:c6:
27:d6:46:8d:a0:b0:36:81:43:bb:01:11:2d:35:f0:
34:ae:e5:31:fe:2a:92:31:90:f9:7a:d8:b4:f0:0d:
b2:6b:fd:ea:31:80:ad:5f:82:35:51:92:82:99:e1:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5F:B8:6D:5E:CC:A4:09:03:C5:4D:E1:B8:C7:A0:9A:68:3C:80:FE
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:35:da:0a:79:a3:c6:4c:71:bb:d3:0a:bd:3b:88:93:d2:90:
42:08:39:65:f8:17:bb:b9:bc:8b:6c:55:ec:9c:18:60:8b:9f:
ab:47:dd:cf:6c:0b:68:3b:57:19:33:95:29:83:24:13:e1:4e:
b1:b2:3f:c9:f8:ce:c7:e0:59:7a:c3:ac:74:19:b1:32:c7:a7:
75:44:d3:a9:85:c1:e5:ea:ff:9e:87:85:27:55:1e:91:a9:00:
7a:b0:b5:42:0b:e6:f2:99:c2:48:07:62:75:ec:de:87:6c:c7:
56:32:c6:63:6f:25:77:c7:5b:71:77:40:54:ce:66:1e:ee:54:
70:09:59:9c:c2:a4:bd:73:a7:21:ca:ad:5b:55:87:88:6d:58:
85:f5:f9:d7:1a:a0:fc:80:6f:19:ab:40:d9:ea:ce:51:37:e1:
dd:8f:31:07:cf:66:ea:7a:1e:1c:8c:e9:45:51:31:1a:86:55:
50:50:0b:4d:df:82:06:89:33:98:68:ee:05:dd:81:0d:c6:ec:
86:31:76:76:68:c5:14:7b:fd:5b:0e:b0:bd:e1:25:93:75:68:
a6:c5:0f:9c:65:5f:5d:5d:1e:2e:f8:ad:1f:b2:ff:c9:6f:de:
f1:94:5e:8f:03:c9:ee:d0:1e:5c:14:8b:d9:c0:a7:7d:ca:b0:
ac:6d:6e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:07:50 2026 by rpki-client