Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
File: 9IFCCQRj_g9JoTDRUYZql3F9RCo.mft (raw, json)
Hash identifier: IXO2CfsTnNkh0n+ZpSmb0pfWz0G3ErImqjVJyHA3L2U=
Subject key identifier: 46:BB:27:A7:6A:64:39:8E:9B:85:8F:76:E2:BA:60:58:05:A0:73:33
Authority key identifier: F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
Certificate issuer: /CN=f48142090463fe0f49a130d151866a97717d442a
Certificate serial: 019E1C7DE6751244BB3FBBDE5FB16C1C351E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
Manifest number: 0654
Signing time: Tue 12 May 2026 14:01:13 +0000
Manifest this update: Tue 12 May 2026 14:01:13 +0000
Manifest next update: Wed 13 May 2026 14:01:13 +0000
Files and hashes: 1: 9IFCCQRj_g9JoTDRUYZql3F9RCo.crl (hash: /JJjsv8Yqcf0o6vdvi5wRUSUSCROCq0ioggBgnyMI5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:e6:75:12:44:bb:3f:bb:de:5f:b1:6c:1c:35:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48142090463fe0f49a130d151866a97717d442a
Validity
Not Before: May 12 14:01:13 2026 GMT
Not After : May 13 14:01:13 2026 GMT
Subject: CN=46bb27a76a64398e9b858f76e2ba605805a07333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:c9:48:bb:7e:0e:70:96:f0:b9:52:18:82:
02:61:aa:60:80:31:7d:fd:fb:04:c3:97:9b:84:56:
5f:3c:f8:46:f8:06:a1:d4:da:3d:84:86:ac:a0:03:
2c:ac:e5:a4:f2:d8:9c:34:2e:f6:6a:53:a5:2b:9b:
91:18:b3:a4:7e:41:8b:88:3e:04:02:0a:f2:dc:e8:
9e:71:27:c4:a1:e1:db:c3:41:91:d3:7a:e0:9f:53:
23:7d:5e:1e:4c:c2:65:59:86:c8:3f:51:d2:2c:72:
c2:de:aa:a9:d7:2e:ff:cf:04:87:e7:03:32:a3:31:
d3:be:c3:30:ea:3f:69:42:cc:df:0e:d5:bc:ae:24:
e9:36:76:d3:64:dd:af:04:d1:80:29:b6:1d:af:b2:
e9:91:91:9d:75:16:ea:b2:f6:02:57:98:7f:7c:1a:
e1:7b:31:78:c7:19:57:32:ec:69:3f:8a:da:2a:e8:
73:4f:23:34:42:dc:ac:92:ea:ab:e9:05:54:c1:26:
d1:36:36:d7:34:75:73:cd:6c:d7:d4:80:27:26:11:
90:fe:13:8a:be:91:9f:e3:ee:dd:98:07:b2:30:5b:
f4:2e:df:69:1b:73:e7:5c:35:c3:a8:fc:ce:43:47:
17:82:cc:e3:1d:34:c5:48:d5:35:92:63:06:97:67:
1e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BB:27:A7:6A:64:39:8E:9B:85:8F:76:E2:BA:60:58:05:A0:73:33
X509v3 Authority Key Identifier:
keyid:F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:99:07:84:17:1d:89:73:21:2f:48:2b:63:c2:3f:68:32:59:
bf:92:61:84:72:49:a2:80:4a:e5:74:a1:4b:a2:bc:83:97:d9:
49:0a:95:9c:b0:2c:6f:38:6f:83:4f:b2:c9:00:8f:c0:7a:ea:
3e:c7:06:66:55:f0:b9:23:3c:3e:74:d6:69:84:19:f2:40:91:
9c:9f:f4:b1:82:38:c7:68:17:6f:e7:6a:a7:4b:ef:8d:0e:a9:
da:2a:67:99:e1:e5:bf:4a:8f:a1:72:ee:b7:5e:b3:33:7f:56:
b4:e2:45:b9:7e:f8:b6:f6:d1:22:a8:0d:b6:a1:51:bd:b5:5a:
be:bb:d5:78:22:5b:76:6b:f2:9b:75:f2:20:2e:5a:a4:77:53:
8c:a2:07:e7:d4:46:48:04:7c:e0:e6:a3:c1:3f:ef:ce:f4:71:
28:b4:18:18:09:2b:14:54:6b:25:1e:c8:2d:d2:57:6f:55:ad:
d0:08:74:f0:db:a9:34:b5:10:d9:9d:bd:0c:10:36:3b:af:1d:
76:a9:2c:8b:82:3c:0c:08:e5:54:fe:e6:b9:e8:fa:1a:8b:e3:
e6:65:8a:b5:e5:34:da:29:52:30:e0:8f:b6:9e:ba:79:60:fc:
4c:a9:dd:35:74:7c:36:15:a7:d5:d2:a0:27:e3:88:a3:a1:50:
ba:0b:5a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:03:11 2026 by rpki-client