Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
File: 9iZUZY9nKqzzcTO1xxz0sRwYado.mft (raw, json)
Hash identifier: PJqB7jL1e50HjyOPg0OAgWVQqrLo1rZuFHxkAugPy+8=
Subject key identifier: 6E:9B:3A:B2:63:B2:59:2A:5D:35:25:32:7C:5C:78:D3:5C:4D:1D:97
Authority key identifier: F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
Certificate issuer: /CN=f62654658f672aacf37133b5c71cf4b11c1869da
Certificate serial: 019E1FECDE39DFB0D10D8AABEBC8818FB7B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
Manifest number: 0412
Signing time: Wed 13 May 2026 06:01:17 +0000
Manifest this update: Wed 13 May 2026 06:01:17 +0000
Manifest next update: Thu 14 May 2026 06:01:17 +0000
Files and hashes: 1: 9iZUZY9nKqzzcTO1xxz0sRwYado.crl (hash: Qhk5Li634kxn4YDr17dtmQTDLrA0whePVGZZ8kmvVdU=)
2: d6pd06B5mnNywdYo5eZBwLJxfT8.asa (hash: ETla8YTJcM+5uBnfvCMaInkUnAmAwDLx0tjpRZMyWmk=)
3: tvMXQZLl7Wysz_xvdn4KxR27LYI.roa (hash: DS+mGSmFWnDI1NNRJFgUsn5iaFW320NJTO3U5Mk3hfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:de:39:df:b0:d1:0d:8a:ab:eb:c8:81:8f:b7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62654658f672aacf37133b5c71cf4b11c1869da
Validity
Not Before: May 13 06:01:17 2026 GMT
Not After : May 14 06:01:17 2026 GMT
Subject: CN=6e9b3ab263b2592a5d3525327c5c78d35c4d1d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:17:0c:02:de:5c:28:77:94:92:3b:61:62:3e:
e6:66:2d:64:fc:c1:60:b8:8d:4c:0f:50:3b:fc:d8:
93:d9:30:be:cf:8d:f1:c0:11:f6:e6:2b:fe:26:1d:
8b:c6:29:0d:28:7f:eb:c9:e6:d3:02:a8:f1:3a:08:
04:2a:12:0b:c1:a2:c6:f4:ae:9a:09:55:ab:cf:be:
8d:1f:75:19:1d:33:a2:0a:b0:d2:63:0e:73:32:57:
6e:66:c5:b5:f2:27:7d:de:a0:e2:be:66:64:bb:0d:
4e:ca:b7:1f:b1:a2:d2:f5:f1:82:b0:06:d9:8f:3f:
87:20:cd:d6:40:40:f9:88:e1:31:39:da:f9:1a:8b:
af:46:1d:fc:c9:46:26:12:7c:8e:18:df:5a:5e:9f:
4c:99:3e:c6:80:8d:b1:1c:c1:c2:c6:82:d9:94:58:
32:08:77:86:71:24:15:2f:14:b9:f0:7b:db:f0:c2:
2e:eb:01:b1:c8:e4:74:5b:75:00:65:af:72:e2:0b:
bd:ad:16:2d:9c:d7:0e:68:d8:da:34:f0:92:73:6e:
f8:e4:9f:a4:d8:2d:4a:53:47:90:a2:f6:2d:49:16:
76:8d:80:88:fb:01:7a:af:98:84:9a:3f:62:d8:ea:
e1:57:fb:d6:10:c2:cc:d8:a9:f8:9b:2f:51:db:0e:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9B:3A:B2:63:B2:59:2A:5D:35:25:32:7C:5C:78:D3:5C:4D:1D:97
X509v3 Authority Key Identifier:
keyid:F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4a:05:8a:7f:e4:cf:62:76:5f:7f:ab:88:49:cf:e2:a1:23:
7a:ae:ee:4c:03:25:ba:d8:75:90:e9:12:eb:db:9e:85:16:dc:
81:45:a8:a8:19:cc:3e:1c:ee:d5:c9:5d:87:32:84:12:45:f8:
18:0e:35:2f:1e:01:2d:07:bb:dd:73:14:89:7d:1d:29:8e:2a:
58:b9:06:e9:09:a1:2b:28:c3:67:71:a0:58:3a:f9:ae:0e:2f:
71:06:bb:89:c3:a1:00:71:7b:3b:95:0f:5d:9a:5b:dd:75:15:
4c:ce:cc:d0:64:ef:64:a0:56:83:d1:4c:e5:6b:af:8a:53:ae:
2f:b4:f9:93:11:15:cb:58:52:15:2b:fa:73:0a:5d:24:85:bd:
47:a9:41:76:2e:cb:32:0f:4e:32:b8:18:19:1e:8c:fe:47:e3:
aa:52:77:5a:ba:74:06:66:7a:1d:02:66:ad:81:09:f3:26:0a:
9b:db:36:fa:e8:01:a4:62:7a:09:c7:29:e5:97:41:ba:f9:9c:
99:89:3d:e4:92:e7:d0:e6:39:49:e1:ac:93:da:b2:a4:45:42:
6c:af:a3:f0:94:c2:b7:28:72:43:d7:c3:f8:08:17:c9:b4:a6:
06:28:cf:c5:ed:7c:1a:6b:15:3a:f9:10:19:bf:7a:f5:c1:01:
0e:70:21:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:30:15 2026 by rpki-client