Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
File: 9f3nK_WgC97E0e_dfQICnueeRyA.mft (raw, json)
Hash identifier: 4ovc1fOoC9vOJquUnd+cVzRyNZ+sYBgojSsmzAAY5zc=
Subject key identifier: BB:90:F8:24:40:EB:21:40:15:50:38:F1:F5:E2:A1:D5:C5:78:12:E7
Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Certificate serial: 019E1D906539FF14E2D79FE305FBD59F7562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
Manifest number: 0CD3
Signing time: Tue 12 May 2026 19:01:02 +0000
Manifest this update: Tue 12 May 2026 19:01:02 +0000
Manifest next update: Wed 13 May 2026 19:01:02 +0000
Files and hashes: 1: 9f3nK_WgC97E0e_dfQICnueeRyA.crl (hash: 6Q7Yu5zivFotR/6kBPmllRaax4/ZpUCCoLxE751qz/Y=)
2: IWvsOje1ZxTQJm3iMyMgDBCOgIE.roa (hash: kaYliqjJkqMdXwb3B1wUhcuY3L6iumjr0MlG0shhuGo=)
3: sP7IVsNCNnn_B2GtU6Sg79Zwhew.roa (hash: izWuWKp2wnvE2HYeue8Y8Mj2HM1TQYV8MhNOeFXRVUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:65:39:ff:14:e2:d7:9f:e3:05:fb:d5:9f:75:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Validity
Not Before: May 12 19:01:02 2026 GMT
Not After : May 13 19:01:02 2026 GMT
Subject: CN=bb90f82440eb2140155038f1f5e2a1d5c57812e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:c0:5a:95:29:8a:b9:5b:03:9f:e6:15:fd:
c6:e3:c5:ae:3f:29:74:af:ae:67:0e:33:cd:4e:1a:
e8:a7:bd:c0:47:29:e2:2d:b9:ec:18:ad:2d:cd:bf:
38:1e:4a:ba:a6:8e:0e:43:5b:48:71:17:3f:e1:ba:
0a:69:d7:af:1a:5f:92:d2:15:e8:c6:3f:25:83:9d:
b2:18:f9:f3:15:73:b6:7b:86:47:06:e2:7d:e5:0c:
0c:e5:95:57:cb:81:71:95:b6:91:55:be:37:66:28:
bf:a9:42:ba:a2:ae:17:bb:f6:dd:27:59:6d:2d:36:
b6:98:01:7d:6b:8e:84:f3:4f:ed:f6:30:d0:06:f1:
45:57:8d:84:22:66:7e:08:b9:08:f4:99:a5:09:de:
1b:c0:92:61:93:fd:2d:17:07:26:78:3c:e4:5b:35:
4b:e2:ef:e1:2e:2c:4f:a7:19:bf:21:55:23:bd:d5:
99:4d:4a:01:36:66:77:a9:67:55:9e:35:30:e9:63:
9e:b4:46:90:78:41:95:bf:06:0b:ce:22:96:0b:15:
8c:2f:92:2b:36:85:b0:2f:46:58:ec:8d:53:a9:d8:
af:52:7f:f0:0c:73:69:8c:42:97:b7:63:ce:22:bc:
36:31:b4:4f:cf:e5:83:c7:b1:82:a9:64:4a:7a:fb:
3b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:90:F8:24:40:EB:21:40:15:50:38:F1:F5:E2:A1:D5:C5:78:12:E7
X509v3 Authority Key Identifier:
keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7b:23:d8:1a:df:56:24:e7:1b:29:ea:7f:87:1a:00:f3:fb:
d1:ac:84:12:18:cd:a7:58:3f:78:34:de:0d:f0:20:88:5b:37:
6c:86:09:4a:6c:18:09:68:27:87:f3:c6:6e:5e:b6:df:0e:db:
28:68:b4:2d:8b:b1:10:66:65:17:ab:25:38:4f:2a:f4:4f:70:
a4:29:5f:56:c6:1e:20:cd:b7:fd:94:2c:b6:3c:84:ee:9c:87:
f3:1a:5b:f9:a3:1e:87:c8:19:00:25:9c:5c:16:24:85:28:b0:
49:f5:5e:1b:fd:81:a9:df:dd:29:55:93:83:93:0b:62:5e:c8:
a2:2f:80:14:f4:26:18:c2:a7:4a:1a:3a:9c:84:05:3d:3d:20:
ad:26:d1:11:fe:cd:4a:9e:75:15:a3:4e:86:b5:a2:bb:52:95:
96:5f:07:a1:4d:db:c6:68:79:f9:68:52:1e:89:bc:29:a2:7b:
77:97:ff:ce:0e:0e:23:81:03:e4:8d:28:a0:cc:85:4f:de:63:
aa:b4:85:54:5c:5a:91:4e:8f:3e:70:7c:05:da:5f:ce:c5:e2:
c3:97:81:d6:2a:11:b3:42:4b:32:ef:10:2c:55:1d:94:f1:ff:
96:f0:2e:09:e3:a3:cd:a4:eb:2d:be:86:b9:09:5e:73:a5:22:
27:4a:5a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:55:10 2026 by rpki-client