Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
File: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft (raw, json)
Hash identifier: z3ET2aef2XX14CBwBIv7vpe2PjLlmIuY0uQTD01rFDg=
Subject key identifier: 90:EF:45:AB:A5:65:50:EC:47:5B:C2:09:FD:64:1F:73:5D:53:FA:FB
Authority key identifier: F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
Certificate issuer: /CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Certificate serial: 019E1CB4F255A9F662FA4EC356ED24435CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
Manifest number: 1901
Signing time: Tue 12 May 2026 15:01:20 +0000
Manifest this update: Tue 12 May 2026 15:01:20 +0000
Manifest next update: Wed 13 May 2026 15:01:20 +0000
Files and hashes: 1: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl (hash: +JN3iSW+uFyzphJ1F82ZiR54clQyGeCXWCnMMLfOBFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:f2:55:a9:f6:62:fa:4e:c3:56:ed:24:43:5c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Validity
Not Before: May 12 15:01:20 2026 GMT
Not After : May 13 15:01:20 2026 GMT
Subject: CN=90ef45aba56550ec475bc209fd641f735d53fafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f1:a7:2b:d5:71:ba:db:01:34:5f:bd:f5:c6:
05:80:4c:f4:ce:e7:dd:dd:ff:a7:82:56:fe:69:6a:
6c:42:dc:74:5d:c9:90:d5:23:b1:34:7c:23:a3:f2:
bd:06:d7:be:cf:f8:ee:1a:26:fb:fb:e3:24:10:9c:
d1:c1:85:bf:2f:14:3a:c2:9e:3a:dc:42:47:77:21:
9b:56:8a:1e:f5:5b:c9:2d:d1:64:ea:b1:c5:aa:92:
ae:54:c9:aa:fc:2e:6f:7e:ec:cf:d8:4d:3c:eb:85:
b1:a4:19:1a:54:7c:52:1b:f3:e7:98:6c:16:b4:64:
36:73:d2:b0:bd:ff:68:10:cd:86:61:78:e7:37:60:
ad:3e:4e:81:90:37:cf:3a:7b:11:91:dc:4d:3e:46:
7f:43:14:80:74:a5:20:0e:f8:f3:79:14:2b:97:d4:
1a:ed:21:91:74:dd:9d:52:39:1c:32:14:cf:ce:99:
2a:19:6c:50:8c:c6:3e:e2:8d:3f:c8:bc:18:1f:64:
e2:89:a5:53:c6:d1:5c:aa:61:f3:c1:18:b8:8f:9b:
e1:eb:47:df:06:f4:0c:f4:77:7b:1e:cb:01:5b:35:
5e:d6:4c:af:0d:4a:51:dd:b2:70:66:45:ab:19:79:
69:0e:75:c2:93:66:c1:52:65:cb:8e:c9:34:b2:a0:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EF:45:AB:A5:65:50:EC:47:5B:C2:09:FD:64:1F:73:5D:53:FA:FB
X509v3 Authority Key Identifier:
keyid:F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e9:7d:ae:01:93:ba:92:07:8a:f6:2e:b8:80:41:03:c1:49:
83:07:f0:0b:ed:dd:1b:4c:ba:1c:2e:60:7c:3f:77:40:15:8c:
29:f0:fc:48:ef:fd:ec:21:42:d2:92:7a:91:0d:7b:69:de:fc:
b3:40:2f:f2:4b:36:e9:d3:f9:36:b2:31:f8:aa:57:7b:d2:9d:
73:f1:34:d0:d1:c9:6e:b1:43:51:59:0e:97:c6:75:c9:fa:c5:
e2:bc:a2:d4:81:0c:3f:df:aa:98:cf:7d:c7:6a:d9:2a:3b:5b:
b6:ee:0e:e9:e2:66:2b:59:79:aa:1f:b0:b3:38:ba:9e:a0:02:
9a:3f:f1:3f:2a:89:3f:e8:0d:6b:bf:99:31:42:e0:8d:24:a4:
e1:d7:be:91:ed:38:d0:cb:d1:8c:bf:b9:fe:fd:e6:e5:ff:87:
97:87:bc:12:a3:77:d5:1f:57:f7:23:fc:6a:9a:76:9d:5a:a4:
91:7d:6f:05:6f:40:a8:c6:aa:cd:54:5e:d0:98:32:43:df:8c:
77:5c:84:ed:b4:60:e3:b5:4f:b2:59:0e:74:ae:62:b1:ee:5d:
33:b1:41:2f:5a:a6:af:86:ee:68:eb:0a:ad:ea:fc:69:2f:1a:
6d:c2:26:ea:00:87:a0:e5:ca:d3:a5:d6:b9:45:b2:b1:76:54:
ab:1f:de:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:27 2026 by rpki-client