
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/7a9t6QTN6PpLM_ajYxcueaPOjK4.mft
File: 7a9t6QTN6PpLM_ajYxcueaPOjK4.mft (raw, json)
Hash identifier: J9HtLHdQAMBoCij2p2/P6y5e04MIpWdOb7ZT+u+Jxsc=
Subject key identifier: 2E:91:2B:4E:ED:F0:9D:6A:CB:83:A3:DD:AC:C3:13:12:AA:C0:B4:2C
Authority key identifier: ED:AF:6D:E9:04:CD:E8:FA:4B:33:F6:A3:63:17:2E:79:A3:CE:8C:AE
Certificate issuer: /CN=edaf6de904cde8fa4b33f6a363172e79a3ce8cae
Certificate serial: 019E1D597D47A527F7C7AD19C221EF891746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a9t6QTN6PpLM_ajYxcueaPOjK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/7a9t6QTN6PpLM_ajYxcueaPOjK4.mft
Manifest number: 8D
Signing time: Tue 12 May 2026 18:01:04 +0000
Manifest this update: Tue 12 May 2026 18:01:04 +0000
Manifest next update: Wed 13 May 2026 18:01:04 +0000
Files and hashes: 1: 7a9t6QTN6PpLM_ajYxcueaPOjK4.crl (hash: QABk0KSxg3mBWMZrH2KI1Bzk/8iQKpADTIz3KHpTdlE=)
2: MZwHyoxyedbHMHzcDY_-BSVnPSA.asa (hash: GUjDhBxz76iF0qBxXqsv2ZfQlXLmcrAvFFiVS8y2Yns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/7a9t6QTN6PpLM_ajYxcueaPOjK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/7a9t6QTN6PpLM_ajYxcueaPOjK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7a9t6QTN6PpLM_ajYxcueaPOjK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:7d:47:a5:27:f7:c7:ad:19:c2:21:ef:89:17:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edaf6de904cde8fa4b33f6a363172e79a3ce8cae
Validity
Not Before: May 12 18:01:04 2026 GMT
Not After : May 13 18:01:04 2026 GMT
Subject: CN=2e912b4eedf09d6acb83a3ddacc31312aac0b42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:30:87:86:28:a0:f5:31:a7:f3:42:19:b8:
95:2e:f4:e6:91:6e:a8:2e:b8:d4:4b:ee:fd:be:bf:
5e:7d:d2:63:17:71:e4:f9:6c:e4:25:8c:44:05:8a:
53:aa:93:a3:70:84:40:e6:2d:2c:b3:27:87:c1:3d:
32:35:30:d2:81:1e:fc:c0:de:d5:69:d6:f9:44:af:
91:0b:88:c8:08:5f:af:80:9b:42:77:7d:9a:c8:f6:
09:76:11:ba:48:3c:e3:95:50:4a:a8:b2:82:3d:2c:
8c:88:b6:38:e3:7c:f8:2c:fa:53:a3:45:a0:b6:29:
9b:a2:42:4e:43:33:b1:5e:65:17:76:6d:c1:15:86:
61:a4:95:96:d4:4e:e7:a0:57:27:5e:cf:02:4b:f6:
5a:b0:68:8c:47:8f:39:0a:03:76:6b:1a:e6:69:e2:
82:00:bd:33:3f:bb:0e:4b:6e:86:b1:a6:09:5d:b1:
54:64:f7:b1:54:f8:37:eb:46:d8:6a:b1:b5:f1:9d:
83:10:13:2b:b9:ba:f9:05:92:e7:22:e5:85:ae:17:
8b:81:ef:c2:b2:7a:83:c6:76:a5:33:f0:6b:15:6b:
d8:44:80:23:74:65:a0:e9:2a:6b:aa:e4:82:52:f4:
94:07:6c:c5:1f:18:7a:01:ad:95:0d:45:ff:96:8e:
0f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:91:2B:4E:ED:F0:9D:6A:CB:83:A3:DD:AC:C3:13:12:AA:C0:B4:2C
X509v3 Authority Key Identifier:
keyid:ED:AF:6D:E9:04:CD:E8:FA:4B:33:F6:A3:63:17:2E:79:A3:CE:8C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a9t6QTN6PpLM_ajYxcueaPOjK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/7a9t6QTN6PpLM_ajYxcueaPOjK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/7a9t6QTN6PpLM_ajYxcueaPOjK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:73:59:f4:ec:c8:14:dc:1b:42:8b:52:cf:bf:97:43:ca:8f:
a2:75:a8:b3:a9:1d:61:63:12:4d:a5:c5:f1:8a:d1:c8:4d:45:
0b:66:62:61:3f:de:f4:b7:ae:d9:e2:33:ae:7a:37:8a:a0:34:
b9:d3:f2:f2:f8:80:94:84:90:8a:9f:97:15:b9:77:2a:6a:f5:
73:b6:0a:e6:90:53:cb:c4:30:84:91:0f:ee:ba:b2:9e:26:9a:
79:08:e5:74:d7:e8:71:05:68:3c:73:6d:00:45:2e:33:b5:67:
8e:1f:ef:12:ea:f1:e4:52:9c:f1:71:46:c0:62:d4:47:3b:b2:
ad:dc:b8:5b:83:81:54:18:a5:12:39:b9:d0:ac:20:b7:bc:28:
a7:05:97:9f:5c:af:f2:f9:4b:ee:d5:b2:c7:4f:21:90:25:b6:
5c:2b:70:d0:6c:5b:75:d9:c5:27:bb:40:f8:7c:bb:f0:5d:37:
60:10:40:63:e9:64:57:cb:eb:2a:6f:0e:13:6a:1c:19:41:51:
08:ce:37:0f:54:04:0e:85:a5:d3:56:e6:26:77:a6:13:8c:d1:
c4:8a:c1:c4:51:08:8b:f9:1f:21:98:ab:ae:03:f7:9d:a1:66:
59:d1:ac:c2:ba:97:f4:5e:8d:93:a6:14:27:ad:32:f2:52:df:
b2:9e:0c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:12 2026 by rpki-client