Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
File: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft (raw, json)
Hash identifier: V2BbFRLpAmj/hZyqRKQopeNm25a6eLkyk1Rc1ZWHwKA=
Subject key identifier: 03:D5:E0:AA:1B:D8:3D:6D:93:20:44:2A:45:DA:AE:6E:6E:E7:BD:B0
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Certificate issuer: /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial: 019E1BD9547DA125BDE773B921012320B127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
Manifest number: 0D7A
Signing time: Tue 12 May 2026 11:01:28 +0000
Manifest this update: Tue 12 May 2026 11:01:28 +0000
Manifest next update: Wed 13 May 2026 11:01:28 +0000
Files and hashes: 1: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl (hash: eiUhwJJ/WXUO6HRf7o/EMIouc0PNw0hIXRLtxq7edNA=)
2: TujVxWk7elywpyXmIMnDKFw3mNo.roa (hash: Zvi/MCY8l+89SlTxrMXMYRwO5dgOTj98ivE3+1BLbBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:54:7d:a1:25:bd:e7:73:b9:21:01:23:20:b1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Validity
Not Before: May 12 11:01:28 2026 GMT
Not After : May 13 11:01:28 2026 GMT
Subject: CN=03d5e0aa1bd83d6d9320442a45daae6e6ee7bdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:3b:b0:32:35:af:cd:e5:37:f8:7d:a6:fe:
c6:34:df:32:4c:75:d5:bb:a7:c2:09:9b:f6:76:97:
c2:29:a7:d9:e3:42:3a:42:94:3f:89:7d:25:03:65:
90:12:be:32:c3:73:3b:78:f2:cb:e4:37:0b:d1:82:
51:b0:da:f5:d7:d3:17:d9:d8:59:e8:dd:69:6e:79:
bb:a7:3c:01:0f:28:23:ec:7c:9e:e3:af:f0:74:bc:
f3:f9:ea:78:99:c1:71:ee:fb:9d:98:43:91:6b:67:
a3:f5:3f:7f:1e:1a:c7:e0:f2:cf:ee:59:d6:fc:2f:
34:31:f5:fc:c7:97:d8:9d:fb:73:4a:22:59:67:f5:
48:ee:3e:a3:07:fc:02:74:5c:06:97:98:6c:86:57:
dc:c8:3b:2a:47:cf:ea:38:70:ed:12:80:34:24:8c:
14:92:da:c3:fd:c5:c9:22:26:ff:3f:6a:a7:80:2c:
00:73:8d:83:ea:fc:61:b2:03:d3:1e:d3:db:be:30:
4a:d4:75:50:ef:aa:01:3b:f5:a0:98:dc:37:85:8a:
0b:ed:95:a1:99:75:11:56:c7:d1:d1:f9:ce:2c:bf:
20:30:14:a7:d5:b8:90:ed:19:a3:03:38:7b:da:98:
f3:12:05:d1:5e:d7:78:ea:db:5a:d2:98:fc:39:9c:
62:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D5:E0:AA:1B:D8:3D:6D:93:20:44:2A:45:DA:AE:6E:6E:E7:BD:B0
X509v3 Authority Key Identifier:
keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ee:77:e1:24:2f:0f:61:e2:29:27:05:1b:b0:80:5b:d3:91:
c1:c4:92:a5:b6:13:02:e4:16:f7:34:44:ff:ab:c0:3c:87:6e:
1e:e7:f2:b1:89:16:5b:54:5f:c9:83:4d:c9:e9:d9:ca:25:fe:
12:3a:e7:ea:4d:79:99:b0:83:68:5b:7f:e0:60:02:cd:a4:54:
be:b3:af:a2:c6:21:bd:88:97:6a:7d:76:d1:90:8d:9a:1e:8b:
44:8a:7d:55:9b:23:74:8d:d5:da:1d:28:78:55:43:62:e3:88:
8f:71:03:40:ac:fb:92:54:36:3e:dc:3f:88:cb:c4:37:3f:83:
af:1c:ef:0a:64:83:b1:a2:4c:99:6a:49:1b:80:ef:a2:57:8d:
fc:50:85:77:6e:3b:16:27:ed:22:f5:d6:5a:23:10:1c:c0:fd:
bf:6e:a1:b1:5f:40:78:a0:ca:a2:4d:ec:2f:07:1c:40:08:3e:
d6:96:c1:0f:39:02:6f:c7:8e:08:20:1b:81:e8:f2:93:17:f3:
5c:e7:c4:82:9d:97:84:9b:14:11:5a:fd:b2:14:0c:f6:5d:ad:
c6:a0:fc:60:db:80:3f:37:f3:7d:a4:25:ec:68:00:ab:3b:b4:
45:b4:96:0c:1a:d4:8f:fe:fe:21:de:ce:3d:5f:8d:27:37:c1:
c4:89:99:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:42 2026 by rpki-client