Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
File: ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft (raw, json)
Hash identifier: F6F8cILYSAOs06QagIW58q5y8JzcSm9UnZ43mduvfgE=
Subject key identifier: 12:E3:57:F9:00:77:9C:B8:50:B3:36:9A:C6:2D:4E:59:0B:9F:2F:ED
Authority key identifier: 8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
Certificate issuer: /CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Certificate serial: 019E1DC714FDA9D205F18FD53B5733249346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
Manifest number: 018B
Signing time: Tue 12 May 2026 20:00:46 +0000
Manifest this update: Tue 12 May 2026 20:00:46 +0000
Manifest next update: Wed 13 May 2026 20:00:46 +0000
Files and hashes: 1: 5JsNsuuUapw5fDgkbUkuWEzMsLk.asa (hash: RxL4Yv7FvjiasU1GewN7L6R6PTxiHwL1wYEDnRLK5b8=)
2: Sxkhw8Fa5pO8BhRGtQeTU8fdya8.roa (hash: l1dlDAqaaU0qfv4ZGVF35Fo37aw65NRWppLOtUVD5ug=)
3: ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl (hash: BNQp7k2osW4ArprukoHm4mdkRp4L1PXGXMvH+BvYHXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:14:fd:a9:d2:05:f1:8f:d5:3b:57:33:24:93:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Validity
Not Before: May 12 20:00:46 2026 GMT
Not After : May 13 20:00:46 2026 GMT
Subject: CN=12e357f900779cb850b3369ac62d4e590b9f2fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:96:e1:70:a8:49:13:2c:07:dd:93:0a:c1:
5a:ac:f6:84:b8:bd:19:9d:ed:8c:79:54:48:a4:64:
35:e6:3d:80:de:99:30:ee:90:0d:6f:ef:33:b5:4b:
bb:af:be:56:7a:e3:7d:e3:f9:e3:c8:fb:72:ba:97:
3e:df:21:9e:1f:69:b5:dc:cb:82:01:90:4b:53:c0:
e7:4c:51:a3:e5:af:f8:c7:84:da:74:e3:a1:77:56:
27:23:c3:2a:fa:69:e2:27:78:b8:9d:5a:59:68:cb:
24:20:fd:75:0c:1e:f9:06:06:16:41:4c:2d:d1:87:
00:60:24:d5:79:7f:94:51:b1:58:34:72:66:78:82:
40:3e:b1:99:01:cb:0f:30:ac:77:e3:5d:27:cc:ca:
4e:42:3f:51:9a:9a:3d:8e:a9:40:36:92:3a:4c:86:
aa:38:07:4f:ac:4c:52:35:51:db:a5:19:aa:02:12:
d3:4b:eb:55:01:86:92:83:12:6f:60:59:2d:d0:4a:
ea:3e:00:e4:f8:ac:71:d6:78:52:ab:a0:61:a5:0f:
9a:0e:e6:5f:58:2e:ee:d0:e0:de:b8:c5:f7:f8:ac:
2f:9f:d9:f5:6a:1b:32:8b:ee:81:6b:45:f1:5b:9d:
2f:e7:27:3c:01:b1:d4:8f:07:f9:f2:fe:d0:a5:bc:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E3:57:F9:00:77:9C:B8:50:B3:36:9A:C6:2D:4E:59:0B:9F:2F:ED
X509v3 Authority Key Identifier:
keyid:8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cf:ab:dd:fd:30:db:d9:8a:8a:e3:2e:f9:5b:3a:5e:99:fa:
c1:2c:4d:9c:ce:3b:39:4d:78:42:50:9a:cf:3b:fd:c7:ca:5e:
a2:e5:73:c6:a8:1e:75:de:e9:d7:83:5c:bc:25:9f:ab:77:67:
08:89:5d:b7:88:0a:80:f4:28:3b:9a:84:41:1b:c6:79:a3:c5:
1c:e3:5b:18:56:37:15:04:0e:63:72:4a:59:cf:bb:8a:af:8d:
97:7e:8f:58:0c:75:47:0c:91:c8:98:79:7b:1f:52:4f:2a:c5:
29:70:5e:a3:3a:e7:27:b8:92:ad:d9:f9:2d:85:d3:87:cd:d7:
79:af:9f:fb:a8:f5:86:30:a3:0e:b6:74:8e:67:bd:a2:8e:c6:
5e:e1:59:74:65:12:c6:32:d0:43:b9:69:0f:44:af:65:4f:4c:
01:a7:c4:ac:79:4b:29:1c:23:32:30:63:aa:9d:0e:a0:bb:7b:
95:e4:f8:3b:51:0e:9c:bb:6f:19:9f:1d:e2:c8:15:2f:28:27:
3a:c2:58:8d:b4:72:1f:10:27:12:ef:f9:63:fe:60:dc:70:30:
a9:c4:17:57:12:d6:d7:3c:6a:a5:ee:5c:dc:9d:7d:1e:ce:52:
14:32:61:b4:00:5f:91:36:43:78:fd:51:78:64:7a:43:12:c7:
5e:0f:93:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:36:00 2026 by rpki-client