Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
File: 0IaqHaAvZwEYCywDQdYDB_FKLL4.mft (raw, json)
Hash identifier: KfOEFEzmJwWrZzsgX7qKzzBRbWWOq9qQ7jHEsJVTXPQ=
Subject key identifier: 79:2A:A5:E8:DD:3E:C2:5A:0C:39:00:E3:86:6A:68:80:0B:FC:7F:CE
Authority key identifier: D0:86:AA:1D:A0:2F:67:01:18:0B:2C:03:41:D6:03:07:F1:4A:2C:BE
Certificate issuer: /CN=d086aa1da02f6701180b2c0341d60307f14a2cbe
Certificate serial: 019E1BD9248C736F60139B6BD28A73F20DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
Manifest number: 9D
Signing time: Tue 12 May 2026 11:01:15 +0000
Manifest this update: Tue 12 May 2026 11:01:15 +0000
Manifest next update: Wed 13 May 2026 11:01:15 +0000
Files and hashes: 1: 0IaqHaAvZwEYCywDQdYDB_FKLL4.crl (hash: l2lWDySNNw380eu0Om4/i8bU6SYoX6T3J7fkakJ2ssk=)
2: 3A95eT0-F8FWn0aRvaXeJYEs4vU.roa (hash: LYh5oBJnNPibPoXaGK/ua+lzHz0SVEi30h9T4GjLlU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:24:8c:73:6f:60:13:9b:6b:d2:8a:73:f2:0d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d086aa1da02f6701180b2c0341d60307f14a2cbe
Validity
Not Before: May 12 11:01:15 2026 GMT
Not After : May 13 11:01:15 2026 GMT
Subject: CN=792aa5e8dd3ec25a0c3900e3866a68800bfc7fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:d9:a8:84:c6:f5:2b:74:42:98:96:92:35:
fd:42:a6:b2:b3:bb:9a:30:be:89:b2:d4:e7:dd:17:
1c:38:12:9e:b8:04:18:26:27:60:78:8b:1c:ff:5e:
3d:14:04:14:eb:44:52:6b:b9:01:0c:23:4e:73:f4:
67:30:62:de:41:9a:8c:fd:b6:36:cf:4f:d7:15:31:
a8:e5:74:77:74:80:db:54:5d:ae:38:31:ef:13:7e:
7b:30:8a:95:9c:7a:6b:6d:88:05:81:15:da:26:80:
f0:d8:5d:38:a8:f4:e3:30:61:14:e9:e4:b9:6b:05:
73:4c:0e:9b:53:51:34:80:31:62:cc:39:60:fb:84:
dc:d4:f0:e1:cd:b1:e2:bd:40:8f:8f:7f:06:ce:8f:
0b:3f:e3:2c:29:fd:8a:ff:de:be:05:36:fa:2d:d6:
d5:b0:4f:f3:79:6f:9a:a4:69:8c:af:85:9a:75:4e:
6e:e2:89:7a:46:f7:ff:64:ce:d1:5a:81:ac:57:f3:
45:30:64:9d:88:5d:7b:b0:5a:b0:18:32:1c:8e:a2:
0d:af:af:0f:f2:8d:08:3d:e7:f3:a3:1d:69:52:3c:
82:1e:0b:78:01:a8:ae:29:44:b0:d6:a7:1e:79:2b:
6b:48:01:f9:d1:30:e1:d7:02:22:c7:67:d7:a2:7b:
57:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2A:A5:E8:DD:3E:C2:5A:0C:39:00:E3:86:6A:68:80:0B:FC:7F:CE
X509v3 Authority Key Identifier:
keyid:D0:86:AA:1D:A0:2F:67:01:18:0B:2C:03:41:D6:03:07:F1:4A:2C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e8:37:2a:49:b7:42:70:46:d9:85:bc:e8:39:a2:7e:24:77:
92:be:db:8c:37:ad:bd:ce:ed:79:d4:92:f7:48:87:47:2c:79:
ac:4e:38:f7:18:10:50:e0:ba:85:96:10:74:b9:19:5a:e3:a1:
c2:7b:c0:81:36:13:37:87:d1:97:af:84:ec:fa:4f:7c:75:19:
30:7e:59:e2:e2:66:eb:99:2a:d2:ad:29:12:13:3b:fa:63:83:
d1:a5:b4:55:88:78:f9:e3:4c:ac:e3:57:b4:f0:df:b4:dd:78:
31:f2:30:7a:6d:82:d6:c3:d8:7e:3a:e6:89:48:3c:9d:68:d6:
d1:75:7f:57:3b:92:24:85:d6:8c:63:61:19:dd:b2:6c:07:85:
b5:50:a1:c5:5c:7b:ec:11:6d:34:2d:68:f1:94:1c:ef:8a:d3:
4b:aa:d8:54:2e:b1:41:91:1b:77:71:7e:4b:41:02:74:75:26:
ac:67:89:10:28:c0:24:74:57:aa:f1:a0:05:2d:33:3a:f0:61:
e8:47:98:c7:0b:6c:04:9f:e1:94:85:87:54:8d:87:d5:0a:c1:
5e:97:2d:eb:93:9e:c5:c4:9b:f4:fa:cc:30:6d:df:e1:87:c7:
73:69:37:65:7a:ab:63:b5:94:9b:9e:2e:69:fa:bd:3d:ca:ab:
7e:bd:e6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:57 2026 by rpki-client