Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
File: 9q2iC9mLq990w9Vs14raZu2HoUg.mft (raw, json)
Hash identifier: F74ynUsEDQaTzVUazi2weRl9qt88zFqGbP38QdSpIPI=
Subject key identifier: BC:07:E5:75:EB:66:86:88:80:6B:66:41:55:CE:F4:60:8A:EA:44:51
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial: 019E1D22443BD82B0BD0AA264351745F080F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
Manifest number: 0CCD
Signing time: Tue 12 May 2026 17:00:45 +0000
Manifest this update: Tue 12 May 2026 17:00:45 +0000
Manifest next update: Wed 13 May 2026 17:00:45 +0000
Files and hashes: 1: 9q2iC9mLq990w9Vs14raZu2HoUg.crl (hash: N5sNjFeocrbsLGZiY/fNTXLBZJqVekBkdTfgRla0v9M=)
2: Qm9bE-GI0zpGIyQXKmibjGTghBs.roa (hash: VsN2fFZJM1gh3rfmfLU0muoVmQ/GoiIrwpbvbvg5qLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:44:3b:d8:2b:0b:d0:aa:26:43:51:74:5f:08:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Validity
Not Before: May 12 17:00:45 2026 GMT
Not After : May 13 17:00:45 2026 GMT
Subject: CN=bc07e575eb668688806b664155cef4608aea4451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:24:0b:70:f9:e6:3d:68:a2:24:67:bc:7e:
5f:02:f3:85:96:ec:1d:17:fd:fe:d2:5c:06:5f:4e:
1d:01:26:4f:0b:a8:72:d3:d2:e9:66:97:d2:c3:59:
27:6b:06:e3:83:96:40:e8:92:4d:8a:38:1b:33:4d:
7f:8d:c3:58:2e:84:5f:51:03:b6:9a:24:9a:d9:43:
ca:1f:65:78:5f:01:7e:95:f6:29:c2:04:4e:50:2a:
e6:98:f4:85:b8:19:5e:f6:bd:dc:b3:12:d1:c7:a3:
e2:78:57:75:05:78:0b:aa:03:29:22:49:c0:2f:e6:
11:6c:36:2d:60:9a:f3:bf:85:db:11:17:a2:75:6c:
67:77:bd:f3:ef:9a:e0:9a:16:90:fc:b0:dc:1f:84:
ca:24:40:53:29:ce:c6:47:68:31:9b:4a:2f:c8:65:
d3:8c:e8:cc:71:97:23:79:1c:36:fd:c3:65:62:ff:
f8:3e:ab:d7:f9:ba:7c:19:71:0e:f9:cd:5a:38:f6:
79:74:7a:64:21:12:cb:ee:bb:89:3f:e8:ec:3d:4d:
af:6a:e6:e5:c8:66:ef:37:ff:a0:d5:15:25:49:1a:
1b:36:21:f9:29:00:d6:a2:60:4f:97:b3:6a:69:e5:
5f:a0:a2:6d:9a:80:3f:07:39:d4:ca:56:8e:77:45:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:07:E5:75:EB:66:86:88:80:6B:66:41:55:CE:F4:60:8A:EA:44:51
X509v3 Authority Key Identifier:
keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:13:2c:c1:6c:9d:75:ad:e4:79:0a:b2:56:fa:dd:c6:52:6f:
3f:d2:20:0b:a3:ac:9f:54:51:06:e8:5a:c2:c1:86:f1:d2:ba:
c0:8d:12:6a:80:8f:cb:2d:32:f2:f8:ba:8f:d5:9a:1f:91:e8:
71:eb:96:31:a3:bd:fb:71:11:05:2b:1a:bf:0f:4f:cb:96:5b:
f5:e0:f0:a1:3d:7f:fe:73:7b:b4:1c:88:c5:06:21:8e:98:10:
f6:45:b1:e1:74:f6:b6:18:ba:e5:6b:f7:23:e2:db:45:d7:83:
7b:e8:5f:8e:ee:6d:8d:75:88:b5:86:86:d1:0d:d9:a7:a6:5c:
a3:42:7b:72:d7:dd:0f:0c:e9:80:f3:f5:61:de:14:5c:b1:65:
27:63:80:9a:f6:f7:de:6c:6b:a8:f7:e3:77:69:16:58:8f:02:
36:19:68:99:80:98:aa:68:ee:a8:0e:22:b5:bb:e9:a5:10:a6:
b0:f5:cb:8e:9b:67:2c:46:c4:8f:c3:f8:9c:22:30:c4:bd:d3:
e3:dc:e7:06:62:8b:20:e2:35:82:43:65:d5:88:6f:dc:6d:19:
a8:fb:57:ef:82:78:57:8a:a6:db:4a:14:54:6a:1e:fc:da:9f:
c5:60:05:b3:df:0c:23:90:d9:22:0e:d0:09:9f:55:11:14:4c:
18:34:63:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:24:03 2026 by rpki-client