Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: 0eFa2v+gin2bqMa5nlUchZaF6sBPMAH1b0u9X81LT7c=
Subject key identifier: 0D:B9:B8:58:0B:27:81:83:2C:E0:52:83:24:F2:EB:EB:1F:42:16:92
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 019E1D909096968CD4EA14963CD48F9A00C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 19:01:13 +0000
Manifest this update: Tue 12 May 2026 19:01:13 +0000
Manifest next update: Wed 13 May 2026 19:01:13 +0000
Files and hashes: 1: 8gINa2lFaHAK60FtqIDDhXwZP7w.roa (hash: z1FvylnNOuEEDQQea39SZ8k3cYtqZE6bJ6wCeGonrDw=)
2: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: yuYJ+0su22lsZQ+q40b/m50lbfnAii2KrCbxQ3YM3UM=)
3: IbJ4yELvtm8HXdu0Yp_CCRHVlP8.asa (hash: NPCHrCQgVoOMqCSPlDc/hj6wxQzJAbSJUalGFEL7VEc=)
4: tRcrwi6Z0c7Sb0NYMrmjnVVjOto.roa (hash: unf/ZbmoQZ2C8O0WxuwscfoRSvADWqKnPxDoOQZPINs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:90:96:96:8c:d4:ea:14:96:3c:d4:8f:9a:00:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: May 12 19:01:13 2026 GMT
Not After : May 13 19:01:13 2026 GMT
Subject: CN=0db9b8580b2781832ce0528324f2ebeb1f421692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a7:8e:1b:a3:f6:7b:cd:bb:8a:91:bd:7b:94:
e7:78:d1:27:f8:01:e7:21:4a:b6:99:4d:92:17:ff:
66:22:7c:eb:19:14:41:0d:ba:89:72:69:0b:3b:70:
14:e6:2b:6b:82:a5:b2:6f:28:77:9d:a3:b5:6c:26:
f1:29:7f:d9:39:d8:9e:69:7c:2c:b2:9e:79:46:02:
e8:18:3c:a5:7e:68:95:97:cb:13:d8:44:10:af:33:
2a:44:b8:e3:61:41:0a:81:dc:bf:27:2b:59:13:4a:
ba:5e:e6:3a:58:42:18:58:6a:4b:75:3f:5f:46:c6:
d8:0d:ba:e8:07:53:63:e1:3c:17:98:4b:f5:82:0d:
6c:d6:4e:e0:a3:59:63:de:07:32:cd:7e:5a:24:27:
e3:bd:81:59:6a:6e:1e:16:94:74:6f:39:65:04:f1:
c1:67:f0:e0:a4:be:d2:cd:84:a8:48:91:e0:59:b9:
97:0c:a5:b6:2e:8f:3d:c0:12:b6:07:be:a5:eb:29:
4d:69:ed:b5:31:07:94:d1:11:cc:08:f8:0f:78:f7:
86:eb:14:13:38:72:9d:f3:80:e7:44:db:80:ec:f8:
58:90:31:f3:66:13:72:57:21:4b:ff:99:2f:30:f6:
fa:92:a4:b7:3b:0a:f5:d9:03:e2:8f:cc:b1:e1:11:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B9:B8:58:0B:27:81:83:2C:E0:52:83:24:F2:EB:EB:1F:42:16:92
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b2:1a:6f:77:d7:8c:e3:3b:cb:3e:46:45:d0:07:73:fc:55:
cc:f9:f3:5a:c0:58:51:59:54:24:6e:54:4f:a7:d6:b7:a8:8a:
44:22:b8:db:05:69:3c:4c:35:4c:7b:f9:38:9c:0d:88:71:00:
80:c6:45:95:67:b4:8d:1d:45:5d:72:3f:f8:73:0f:e5:cf:76:
e1:c5:39:48:e0:66:63:6b:37:ba:96:94:05:b1:7a:33:bd:9e:
82:47:9f:98:de:db:27:3d:36:fc:e0:39:22:9b:cc:07:e6:63:
de:76:d6:c3:14:2d:62:aa:24:6e:fd:2b:74:35:cf:82:a2:a1:
ed:2b:8e:ef:36:af:9f:f4:89:5f:36:c7:60:c1:f3:bf:de:41:
6b:3a:5b:bf:57:78:ad:e4:c7:69:03:dc:75:da:08:d8:f9:57:
b0:fd:fa:89:39:28:f2:ee:40:67:52:bb:e1:61:c5:bd:45:af:
57:13:ca:24:ef:05:89:83:35:de:a2:22:8c:02:62:51:0e:ba:
c2:4c:8b:2e:5a:a6:ed:0b:70:82:11:db:08:7a:03:31:ad:70:
49:db:70:dc:a8:7e:2d:7a:e3:50:d6:3e:0f:df:11:ed:87:ad:
a0:1e:16:9c:a8:34:7a:78:bc:1a:f6:0b:87:c2:96:fc:f6:85:
3b:48:35:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:04:12 2026 by rpki-client