Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: GhMMIwDTf/3AS8EDnvSJGbCmPJLWiZSymJd/rDLKK2M=
Subject key identifier: 4E:30:FA:71:1C:BB:55:21:73:70:8E:3E:D5:75:E9:C5:24:B8:CC:05
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 019E1D233C70469DAC672DEAE52A017818D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 17:01:48 +0000
Manifest this update: Tue 12 May 2026 17:01:48 +0000
Manifest next update: Wed 13 May 2026 17:01:48 +0000
Files and hashes: 1: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: +WC6c8/ba8wYQw2fn/BYdc0cATgPGYIsHavjmFzF6hg=)
2: d2tSXbQmgx_5joDSWcoPnabG6ts.roa (hash: OeDG3n8yLp+p4vWMH9BV363xFOTnKrmVdLEjiUivNwQ=)
3: ni2pJYsgjdd_PvsJim4HSq8So90.roa (hash: oeFgA//XgCFg9vA4VhOc/9YfMueTyaFUxUNd6kbXTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:3c:70:46:9d:ac:67:2d:ea:e5:2a:01:78:18:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: May 12 17:01:48 2026 GMT
Not After : May 13 17:01:48 2026 GMT
Subject: CN=4e30fa711cbb552173708e3ed575e9c524b8cc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:05:bf:0e:4e:69:2c:ee:4f:70:3a:01:39:
70:87:fb:29:ee:b5:84:2e:6e:b0:ea:08:4c:4c:41:
88:aa:2d:d5:6b:27:83:c0:3f:f9:b5:8a:ba:1f:7c:
2a:bb:21:c0:5d:d8:d7:21:2c:5a:24:27:62:12:8d:
dd:17:91:75:08:a3:1f:32:f7:74:97:1b:1e:69:bd:
c5:39:f5:e7:ed:58:ca:d4:1f:1d:e4:73:55:ab:dc:
6e:ee:54:f6:80:5f:fa:43:84:a2:71:e9:1e:d1:f5:
89:75:29:db:a2:c5:d9:e1:ab:79:70:ba:ce:3f:cc:
f7:96:64:19:db:7c:ab:38:2f:97:d1:c1:be:bc:14:
06:db:30:f5:2a:7c:fe:45:0b:41:04:95:96:6d:43:
ba:b8:a2:d0:e0:ff:c8:9e:cd:3e:05:e2:89:f7:ae:
fb:72:5e:04:8e:8e:2f:90:b8:0e:66:2f:8f:77:97:
e2:7e:5b:dd:7b:dc:99:b5:59:f5:46:d7:00:9a:f9:
f5:e4:f3:f2:a7:4c:e2:37:2e:89:3c:0c:95:be:5b:
7f:7d:e6:78:36:59:b8:1f:d8:ae:ab:25:b3:05:1f:
5e:30:af:54:3e:4d:2a:7f:d8:9a:72:6a:a1:16:ee:
7b:5e:85:0c:fb:07:94:a4:03:e3:ba:cf:cf:ab:ed:
74:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:30:FA:71:1C:BB:55:21:73:70:8E:3E:D5:75:E9:C5:24:B8:CC:05
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3f:8c:60:f5:42:78:ff:81:5e:8e:33:92:8f:a8:a9:a8:a9:
7e:75:70:d1:b6:93:0b:17:fb:c3:a0:c2:b3:bb:99:a3:67:b9:
d1:7d:c9:a5:f8:51:38:d7:70:34:64:33:03:18:93:1d:d3:86:
bd:34:5d:dc:f2:eb:f4:cc:c2:80:30:78:c1:c8:cb:2d:e1:c4:
90:7e:9a:85:80:65:a1:d2:ab:5d:8e:e2:e8:01:48:6b:91:7d:
a0:53:a3:79:75:5e:7c:7b:96:af:5d:a9:21:a7:5c:e6:bb:de:
2d:7f:a8:eb:c3:6d:5f:d4:be:d8:b7:53:6e:76:cd:b0:e4:1f:
94:51:96:81:d4:fc:15:1c:40:10:89:fc:64:12:f7:d2:6a:a2:
bd:7b:71:8d:3e:a9:86:d0:97:c0:1a:a2:6a:d9:86:d7:87:82:
93:b4:3e:c2:bb:f3:ea:a4:f9:03:f9:50:73:31:f8:ec:ee:61:
69:f3:0e:c0:d5:91:cd:46:92:74:aa:65:57:0b:9c:30:c4:20:
fd:b4:62:db:14:cc:0f:85:15:89:77:4f:02:8e:cf:81:a1:f4:
f0:8a:4d:ce:b1:ac:88:e2:46:4b:c4:41:4e:8e:f0:d7:04:9c:
40:f5:f4:24:84:56:a4:d8:72:5d:05:d5:47:a7:bc:9b:2b:21:
25:15:36:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:57 2026 by rpki-client