Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
File: 9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json)
Hash identifier: JhLAK5VwMmJ6HIBHe6MaS0pb5NnhDgoAPeRu69lPg9A=
Subject key identifier: 82:E7:2F:97:51:70:10:F3:2B:29:35:3C:F6:16:68:DF:C4:83:10:90
Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
Certificate issuer: /CN=f5a107f16bc6b00b764c39acfd633363646d5996
Certificate serial: 019E1D90DFD0843FC69D318E995544142976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
Manifest number: 0628
Signing time: Tue 12 May 2026 19:01:33 +0000
Manifest this update: Tue 12 May 2026 19:01:33 +0000
Manifest next update: Wed 13 May 2026 19:01:33 +0000
Files and hashes: 1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: 9CYgq3cBzulQHS5+VlOVHrlbc0VWpjoutBY4WvYWdNg=)
2: YR9nbJSvjMz22hEhrLxozqfTYpM.roa (hash: gYf5CcRkkh/Fk5/cmxIrFjAzYsJs0D1iQQ35mLjqwnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:df:d0:84:3f:c6:9d:31:8e:99:55:44:14:29:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996
Validity
Not Before: May 12 19:01:33 2026 GMT
Not After : May 13 19:01:33 2026 GMT
Subject: CN=82e72f97517010f32b29353cf61668dfc4831090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:4e:fc:be:b1:2d:ca:55:e1:9e:c2:41:c5:
e3:ae:ba:27:4a:86:c5:a7:66:5e:15:da:7f:1c:27:
be:ff:f9:02:91:69:4e:d5:8f:b8:9b:35:b5:16:67:
e3:95:6f:13:5a:05:24:2c:90:a9:28:6c:58:c3:74:
97:3e:58:52:c8:e0:09:93:b4:f4:59:24:dd:eb:e8:
56:9c:63:67:6c:ba:d9:d6:c0:33:93:b4:ab:53:6d:
30:d1:38:48:25:e1:e8:5b:f9:f6:fe:6f:ec:f4:dd:
84:be:4b:33:4c:34:8d:68:51:cc:5e:59:5a:12:ee:
02:f6:fe:30:61:88:21:7c:66:34:bf:75:8c:64:b6:
d7:16:95:a2:d0:39:75:66:40:38:a0:45:c2:4a:0e:
0d:e5:db:51:7a:8f:48:4f:70:92:d6:80:d2:e1:77:
06:1e:62:41:fc:8a:18:db:18:78:72:26:dc:0d:cb:
43:a0:88:d6:02:ef:84:3a:ed:ff:a9:2a:f3:76:75:
26:01:ac:ff:2b:f7:0e:9b:20:3a:71:71:25:04:7d:
56:99:db:68:ae:9c:6f:6e:e7:78:e6:d9:e5:8a:ba:
38:71:db:5e:92:58:4d:3f:21:d9:4d:6d:f6:58:ca:
4e:2f:48:c2:91:71:55:f2:23:95:23:b9:01:ea:06:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E7:2F:97:51:70:10:F3:2B:29:35:3C:F6:16:68:DF:C4:83:10:90
X509v3 Authority Key Identifier:
keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:70:bb:a4:27:41:cb:ec:70:2f:8d:27:6e:a1:b2:a5:87:a0:
3e:08:2f:43:ba:91:de:1d:92:69:a4:80:5b:77:6a:bf:62:eb:
52:fd:af:63:90:90:7a:9d:bd:39:ef:4c:03:86:a0:af:3d:1d:
d5:18:4f:ba:f8:1e:88:e4:70:de:40:75:e3:7e:41:6e:17:0c:
0f:2f:3c:64:47:ef:0d:64:24:48:0d:b1:23:ca:f2:d9:7b:ce:
1c:86:1e:7e:43:90:08:ef:43:15:0e:c5:7a:03:76:ee:cf:71:
86:c0:c4:21:4f:c3:37:9a:57:27:ac:ed:3e:69:cd:d3:b6:b4:
7b:4d:90:34:e3:82:ff:a5:43:fd:86:33:6a:77:aa:a3:f7:10:
3d:9f:ac:bd:58:6d:df:82:be:f9:a0:5f:ba:3b:12:49:9e:fc:
a2:4a:e1:8e:c2:73:65:f1:d9:ff:8d:fb:16:9a:44:ba:80:3a:
9a:6c:17:c6:da:50:fe:1a:2e:7d:59:de:5d:cf:c5:0a:36:f6:
04:e4:37:c0:39:11:f6:33:67:61:a3:a7:61:b0:86:29:65:19:
7c:dc:8a:2e:87:f0:99:5d:91:74:5c:c7:af:00:eb:61:b9:24:
16:26:8c:5c:3c:4d:5c:90:aa:f0:92:00:15:3d:c1:1c:44:3c:
c3:55:b8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:53:30 2026 by rpki-client