Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
File: 9ONr1L84JXQMkFpnzcFrMBhyqnE.mft (raw, json)
Hash identifier: eyM8ANAdDoTgK/2fohKubthZplvrzVhSGjFcF9lgRJY=
Subject key identifier: C1:31:B4:6C:91:1F:D3:61:C7:A8:C6:10:8D:D8:C7:73:6C:D0:F8:8A
Authority key identifier: F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
Certificate issuer: /CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Certificate serial: 019E1D90DE4995E19364ED9E75FD764EA898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
Manifest number: 3A
Signing time: Tue 12 May 2026 19:01:33 +0000
Manifest this update: Tue 12 May 2026 19:01:33 +0000
Manifest next update: Wed 13 May 2026 19:01:33 +0000
Files and hashes: 1: 9ONr1L84JXQMkFpnzcFrMBhyqnE.crl (hash: UdOzwIKUSZeF8D024feKaH3L2Kk35MJRXLjI82u9ENQ=)
2: Vr9B-zHNKLHeB8Xx57Kq7jsYtHM.roa (hash: OzngqieZsxcHJ4EZWwYuegusT/oah57Gh4sMFZUQ7jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:de:49:95:e1:93:64:ed:9e:75:fd:76:4e:a8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Validity
Not Before: May 12 19:01:33 2026 GMT
Not After : May 13 19:01:33 2026 GMT
Subject: CN=c131b46c911fd361c7a8c6108dd8c7736cd0f88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:10:28:44:fa:7e:ba:40:14:d6:e6:be:d1:
5d:6b:0b:4d:38:3e:b5:e9:0a:b2:21:12:ba:5c:83:
ff:7b:c5:ae:04:53:b9:76:4c:27:c7:77:55:a9:7a:
75:0b:62:39:69:01:50:71:5b:1e:f6:8b:2d:b0:be:
74:d7:69:55:a7:a0:43:bb:58:5c:46:3e:ba:c7:49:
db:a7:74:f9:b1:69:4c:58:e4:0f:0b:d5:77:5f:13:
c8:5b:7e:e6:96:d2:db:4f:38:99:07:a6:43:bc:57:
08:97:b2:74:d3:54:ab:7d:38:6a:91:87:7a:d1:c9:
78:1f:d2:6d:2d:8b:67:8d:09:6d:10:d6:47:85:1d:
75:cd:ab:16:45:81:17:49:bf:d2:0f:a2:2f:35:ab:
dd:f5:05:0e:b5:4f:f7:92:0c:4b:0a:2d:45:86:f8:
c7:43:87:9d:dc:47:5a:b4:21:f2:7e:ac:46:07:95:
5c:4c:ce:b4:d6:5b:e4:b1:c4:b4:43:2c:31:ab:bb:
50:d7:44:88:c6:58:08:a3:b4:0f:33:a8:13:00:78:
22:47:1e:dd:49:de:d1:ea:90:30:43:a5:55:8c:49:
e6:d9:14:c6:29:94:53:56:ac:a5:58:64:c0:d9:16:
a4:1e:b7:cd:57:5c:aa:54:8a:d8:b7:2f:37:07:29:
31:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:31:B4:6C:91:1F:D3:61:C7:A8:C6:10:8D:D8:C7:73:6C:D0:F8:8A
X509v3 Authority Key Identifier:
keyid:F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3a:65:55:56:f9:7d:28:ac:6e:ea:a4:1b:e1:9a:5f:a1:c1:
81:af:9b:b1:8e:a7:a6:8c:c6:1b:31:bf:a6:2b:75:05:f3:a2:
8b:9c:17:5a:37:4b:c2:af:a2:41:cd:04:45:a8:e3:92:d0:87:
7d:36:b9:cc:08:5f:40:77:1d:01:1c:97:97:ce:fb:d7:c0:a2:
f7:22:e6:0c:11:15:5e:87:68:2a:21:48:f4:f2:33:9f:cc:d6:
88:c2:fe:8f:7c:f8:f0:c2:72:79:54:b8:3d:23:7d:ce:6c:f3:
61:2e:8b:00:38:36:48:7f:42:1f:1d:36:e0:40:50:d1:1c:db:
1d:51:b1:13:76:c2:80:06:85:40:e5:3f:17:50:15:52:22:26:
97:59:39:43:bc:a8:af:77:45:05:6a:7b:da:33:eb:f0:90:11:
71:8a:77:cd:a4:d3:7a:3a:17:62:1c:b6:d6:ce:27:e6:cc:37:
38:45:af:bc:c6:18:a4:93:4d:11:34:54:c4:2d:07:d4:1c:ee:
46:09:d6:e6:9e:ed:60:36:0c:5d:a6:16:df:45:16:83:80:ea:
67:af:04:82:fb:9d:07:51:5e:fb:61:6d:27:b5:54:47:17:44:
be:65:b5:6a:40:40:82:40:1d:0e:f7:0c:1b:12:f2:7b:bc:0e:
4b:72:82:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:08:19 2026 by rpki-client