Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
File: r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json)
Hash identifier: DkhYGLavgGhmEE3D8A6Y3K/l/KyUxBVuzwwLKNFklNY=
Subject key identifier: 41:26:12:65:6F:D5:F6:42:6D:83:A0:74:90:B9:30:39:67:72:05:2D
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial: 019E2091F2C2E0B451809282E53A6154D099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
Manifest number: 0ECE
Signing time: Wed 13 May 2026 09:01:36 +0000
Manifest this update: Wed 13 May 2026 09:01:36 +0000
Manifest next update: Thu 14 May 2026 09:01:36 +0000
Files and hashes: 1: NYQTyqXhO5SfIKalilF-9jPbRJo.roa (hash: 5lrctU6hrWDAzuX+vKa0ZLHPNzNKbXOgcE47QemStpE=)
2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: wJHEMoCaeLB1pWuJMg6ZZEbhzOaLOHXlNQagkrfHBjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:f2:c2:e0:b4:51:80:92:82:e5:3a:61:54:d0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Validity
Not Before: May 13 09:01:36 2026 GMT
Not After : May 14 09:01:36 2026 GMT
Subject: CN=412612656fd5f6426d83a07490b930396772052d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ef:9c:11:e4:93:fe:40:40:84:85:e5:a2:88:
41:bf:59:09:fa:14:a7:70:04:38:3c:68:45:80:c0:
d3:6d:d3:9f:ab:ce:8b:0d:0a:3b:c2:19:0c:8e:28:
50:42:f4:b4:36:c3:73:61:76:1b:2a:c8:9d:3e:6a:
1d:32:20:68:59:1b:2b:71:21:d1:50:34:75:47:e6:
0b:48:bb:ec:03:e4:80:43:df:1d:84:a0:5b:0d:24:
31:08:bc:45:32:39:85:18:f5:de:0e:83:80:d5:a9:
a9:e9:cd:9c:28:d1:d5:32:68:17:61:5b:e5:f7:97:
27:62:34:13:67:7b:10:67:27:ec:83:31:a9:64:65:
9b:16:0c:e7:d4:fd:2d:bd:7c:ef:7c:82:de:e6:4b:
b5:3f:b5:e9:21:77:bc:44:7c:6e:e8:99:a6:c7:b7:
a6:fa:19:f7:cb:69:20:e2:98:9d:b4:f3:eb:ad:08:
c1:50:3c:c7:44:3c:91:ff:60:87:6c:65:ba:a5:93:
c2:2e:85:7f:92:b7:2d:c5:bf:0a:89:63:94:65:d9:
88:2c:9e:d3:ae:13:5f:f5:14:5f:f2:5b:08:c5:43:
91:73:44:02:22:f2:c2:e7:d9:c8:90:15:ee:3c:3b:
46:97:2e:01:c2:a0:36:52:5e:df:7b:b9:a3:29:d8:
0c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:26:12:65:6F:D5:F6:42:6D:83:A0:74:90:B9:30:39:67:72:05:2D
X509v3 Authority Key Identifier:
keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0a:9b:69:63:ef:f8:e2:49:3b:6b:4e:87:db:b1:47:f3:9e:
ce:c8:5e:d4:44:81:8e:58:16:e1:bf:bf:63:72:a5:7c:22:92:
2d:95:74:82:97:77:75:a5:4a:ca:81:f3:5f:32:78:d1:c2:77:
be:09:73:65:81:d4:24:b2:f0:eb:b2:9c:f7:03:44:5e:60:4a:
e6:c0:04:b3:d5:14:4f:d3:7e:b4:e5:ac:59:91:51:84:7d:4e:
dc:f7:d7:6d:1a:be:13:0b:f4:17:13:e2:23:8c:e3:87:1b:15:
18:2d:a8:09:06:44:d4:f6:db:15:dd:c1:9d:ff:fe:d4:4e:9e:
8d:e3:71:6a:ab:99:7f:d4:af:23:88:02:6e:be:7b:f9:9c:87:
8f:5f:64:92:1b:b2:34:4e:3c:7f:0f:65:2c:70:c7:27:75:8c:
d2:5a:5d:af:f6:29:08:d1:f1:4a:fb:f9:7f:1a:26:85:5f:1f:
9c:31:e7:59:b5:7d:2d:25:75:40:53:d8:d3:26:5d:a5:ad:2c:
80:4b:4c:89:bb:cf:6c:56:e8:c3:43:8d:7f:04:2b:4a:55:41:
52:08:74:21:9b:0f:7e:56:b1:fb:9b:f1:00:9a:90:59:d7:63:
c2:a9:d6:e5:e1:02:29:00:6b:f4:c5:3d:b1:18:04:3e:b2:ad:
42:da:0a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:51:17 2026 by rpki-client