Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
File: 1-c9m7XQoo55j8NJzYDf0McQao08.mft (raw, json)
Hash identifier: GX78aNf8wwB/Bqs9J6RNaqUiNYw2fulf7vSr/ZF7V4U=
Subject key identifier: FA:D8:77:97:F2:4F:60:10:F8:9F:58:77:F3:6E:83:B8:55:80:B9:B0
Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Certificate serial: 019E1DFE4773DCBEDA9B1FFADCF9EFF8CB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 21:01:04 +0000
Manifest this update: Tue 12 May 2026 21:01:04 +0000
Manifest next update: Wed 13 May 2026 21:01:04 +0000
Files and hashes: 1: 1-c9m7XQoo55j8NJzYDf0McQao08.crl (hash: GS4LgI3d03VZGc4zdMtiU1c6MxNB8hJzk+7exN1wHEc=)
2: 9Oi-skDqT11YOFGA1xXs-LnJ9RY.roa (hash: rHObD1OASYFGq7YdeSfBqKYMqx4XVn3mmaRGeO1liZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:47:73:dc:be:da:9b:1f:fa:dc:f9:ef:f8:cb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Validity
Not Before: May 12 21:01:04 2026 GMT
Not After : May 13 21:01:04 2026 GMT
Subject: CN=fad87797f24f6010f89f5877f36e83b85580b9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a7:4f:a5:a0:3f:70:47:a3:b9:e6:bd:46:25:
2f:ca:cd:01:87:3e:d7:42:a2:8d:72:b0:e5:be:e1:
de:6e:74:4c:52:02:25:9e:e7:2a:34:12:c9:16:e9:
08:d9:c2:45:12:51:25:7f:8d:48:85:eb:cf:ba:97:
24:03:d2:01:f9:61:fb:64:0f:39:b4:18:21:cf:cd:
78:b4:93:a5:78:f5:38:d8:a6:e2:fb:92:0e:f7:86:
7d:25:3d:8d:be:c0:17:ee:56:ee:9b:4b:4e:71:69:
3e:e6:6f:3d:ed:06:26:4a:04:47:ef:09:90:8c:bc:
45:19:b3:10:bf:12:e0:d7:2c:2c:8a:08:93:32:af:
e1:ca:31:32:c3:07:cb:4b:02:1e:69:cb:c2:cf:3b:
41:30:d5:db:4b:e5:1e:66:8d:0f:05:d8:e5:73:7b:
4c:43:f6:be:e2:c4:b8:96:00:6a:3b:aa:56:54:4e:
14:2a:21:46:85:ea:e9:91:5f:9b:aa:4e:dd:49:78:
4a:74:73:e9:85:2e:64:56:1c:f7:9a:88:c8:34:14:
a6:9a:e1:3d:cc:ca:d5:87:36:e2:7d:ca:b2:7d:2d:
bb:90:97:4f:f2:ac:b4:97:80:1f:a0:c2:85:07:41:
e1:e1:97:8f:9a:a1:c5:84:8f:0b:a8:2c:fa:45:01:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D8:77:97:F2:4F:60:10:F8:9F:58:77:F3:6E:83:B8:55:80:B9:B0
X509v3 Authority Key Identifier:
keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:07:20:6e:ad:36:e5:b9:db:64:22:fc:66:c5:3f:0c:97:f8:
3f:d0:d5:96:9c:be:ad:3c:46:15:c7:d8:3b:00:a9:54:b0:32:
74:f3:60:2a:f5:03:54:7a:c8:68:6e:6c:6d:ca:66:3d:13:89:
a3:6c:1f:ad:fd:f5:52:2f:93:34:ad:69:7d:45:8f:34:1d:0f:
94:0c:50:d8:94:c5:3f:5a:b8:2a:e5:82:07:20:38:29:6d:07:
6b:c8:0f:0b:22:e0:07:23:ca:2a:a3:38:d8:ce:e7:84:b1:d8:
b8:e1:b5:e7:0a:a7:d6:fb:94:34:ed:c2:2a:7d:0d:b7:21:7e:
1a:4a:d3:26:7e:96:5b:3f:c0:96:12:c4:2c:44:1e:8f:8a:34:
a3:5c:63:59:a0:cd:28:04:fc:3a:27:f6:23:06:d8:07:76:7d:
ad:a2:87:64:c2:c3:8c:35:6d:8f:9c:16:d1:93:85:c0:10:5a:
1b:13:9f:91:10:eb:7f:8c:32:ff:ec:a8:05:f7:31:d6:d6:3b:
f9:07:28:fe:82:89:da:8f:be:93:21:72:ae:7e:d7:1f:c5:01:
8a:8f:85:d1:b8:80:8e:0d:9b:cd:a2:f8:74:1d:b9:10:75:e7:
64:4f:7d:78:53:b3:83:0e:6b:3a:c8:8f:f8:ef:82:3e:dc:cb:
5d:4f:b3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:51 2026 by rpki-client