Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier: HxaaGbTvVPoeZ4OFYsVO/O8394DqdoqE1Yj3rYOoors=
Subject key identifier: F4:B3:FE:4A:AF:6D:3F:E6:3A:B5:10:EC:BD:75:CA:61:AF:C8:5C:6D
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial: 019E1C0F79F728FACC564351BBB4C603BD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number: 1647
Signing time: Tue 12 May 2026 12:00:36 +0000
Manifest this update: Tue 12 May 2026 12:00:36 +0000
Manifest next update: Wed 13 May 2026 12:00:36 +0000
Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: Tyk1MDOKVGRD854hrejyccauXmpX70gvOAb7qDjIPAY=)
2: _1jwukIhOCi8MpxTLw5Kv601c_s.roa (hash: 0/3KAxQZwAWnmzvMwd4pIg6xUGZxILgfs+mT+10r3v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:79:f7:28:fa:cc:56:43:51:bb:b4:c6:03:bd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Validity
Not Before: May 12 12:00:36 2026 GMT
Not After : May 13 12:00:36 2026 GMT
Subject: CN=f4b3fe4aaf6d3fe63ab510ecbd75ca61afc85c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bf:c3:b1:3c:d0:46:9d:cc:0d:66:f6:cc:1f:
c7:be:2d:0d:25:90:04:bb:b0:05:13:46:d0:0a:88:
0a:f3:30:c1:00:6f:b6:a8:98:90:3c:b8:7e:9b:c9:
40:43:54:94:c6:a9:c3:71:4f:17:38:c6:10:f9:90:
53:0a:a5:a9:39:a6:5c:9f:03:0b:82:56:c9:8d:1a:
3e:b7:77:27:81:e3:e7:6a:0e:af:6f:76:5a:3a:c7:
c5:d4:5c:84:d5:45:1d:96:83:8d:ab:94:99:7c:ed:
81:64:c6:66:b0:09:de:03:b3:f9:fb:6c:cd:7c:7b:
75:39:4f:9e:06:41:6a:51:6e:b5:c2:f1:c3:7d:eb:
db:73:23:c8:67:da:78:74:7e:7b:27:45:77:2a:eb:
00:82:d5:f3:ed:06:62:49:f2:ff:b6:1f:08:47:09:
51:f0:8e:a3:08:98:f5:29:73:9c:fa:aa:81:ed:2e:
58:3d:72:c8:a0:1b:27:05:b0:16:5f:fe:1c:b5:98:
1f:3c:37:46:6e:4f:43:03:12:a0:5a:ba:a0:9c:36:
89:ea:37:17:5c:e4:bd:af:f5:f3:2e:c7:28:8d:c4:
fa:44:3a:59:2e:60:ae:84:37:4c:4b:c5:7a:d1:08:
9c:33:fd:89:2c:c4:01:41:4a:e2:12:99:bb:db:58:
c5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B3:FE:4A:AF:6D:3F:E6:3A:B5:10:EC:BD:75:CA:61:AF:C8:5C:6D
X509v3 Authority Key Identifier:
keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:2f:cc:cb:a0:ef:5d:bb:1b:78:8d:9e:1e:88:5a:a0:13:f7:
7d:de:59:c7:13:b5:41:81:03:61:8d:01:0e:cd:14:7e:fb:6d:
95:f7:6f:fc:82:cd:78:26:35:59:29:df:d2:1c:0f:80:11:a4:
44:00:ea:d3:58:95:81:d2:0b:e1:cd:30:fb:04:df:7f:d6:e8:
bf:7d:80:5c:da:63:3c:73:c2:8d:30:ea:e1:37:b6:39:a0:13:
d1:53:40:fd:56:25:4b:2c:75:ab:01:9e:2f:82:3e:a0:ee:31:
1f:f1:f3:4e:fd:55:46:fd:34:0e:5e:fb:85:c9:97:36:b6:bf:
6c:db:fe:00:58:de:7a:e9:d7:d1:a9:19:85:25:58:a7:ea:1e:
47:9a:35:fa:c8:36:9c:10:6b:cf:cc:8f:e9:ca:b9:fb:8a:a4:
45:59:18:a5:9a:41:38:a8:8e:e8:e5:9a:97:ba:e4:2a:12:db:
ab:bd:be:37:85:48:d0:37:89:1d:dc:0f:18:b0:ca:1f:5e:f9:
80:50:c2:b8:94:4d:e2:a6:37:55:6e:34:2d:7e:71:e6:72:5e:
2d:c0:56:80:a7:d3:c0:76:b4:8a:99:1d:8a:b1:bd:e2:4f:c6:
d2:c0:9d:ae:2e:a4:97:2a:f6:83:6f:2d:e5:52:6c:3e:e1:be:
7b:98:01:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:09 2026 by rpki-client