Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
File: 9i4OVeXFow7AS9bcRtFUs-S3tfU.mft (raw, json)
Hash identifier: 8rUikW9RABUZdnLxxaR56idc15sjm4PmS3AgKPdxex0=
Subject key identifier: 39:48:0F:56:69:DA:FF:57:8D:78:D2:4C:23:65:C3:84:4A:6B:2F:36
Authority key identifier: F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5
Certificate issuer: /CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5
Certificate serial: 019E1CB549E84BB837E4E1CBEB32D786399B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
Manifest number: 0D42
Signing time: Tue 12 May 2026 15:01:43 +0000
Manifest this update: Tue 12 May 2026 15:01:43 +0000
Manifest next update: Wed 13 May 2026 15:01:43 +0000
Files and hashes: 1: 9i4OVeXFow7AS9bcRtFUs-S3tfU.crl (hash: bZay9CAhCCjbqwA37gFZADRUoFsZBqzSlAhvqNaq4/w=)
2: tFVRD_-pjyGAXBK1B4RnTlbS06Y.roa (hash: rxdXUltbYBZphQ4R9SWeek1/7cVm9u/f4Eo1gHxec1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:49:e8:4b:b8:37:e4:e1:cb:eb:32:d7:86:39:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5
Validity
Not Before: May 12 15:01:43 2026 GMT
Not After : May 13 15:01:43 2026 GMT
Subject: CN=39480f5669daff578d78d24c2365c3844a6b2f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:41:cc:cc:4d:a9:d5:fb:9a:c2:02:83:dd:
94:d3:f4:dc:5c:1f:c1:04:dc:94:aa:fc:56:f7:df:
ad:42:7a:9b:2f:06:53:df:8f:ae:66:ac:f9:92:71:
01:b1:38:6a:6a:c4:27:a0:0a:77:dc:0f:ff:ac:73:
91:e7:10:78:0a:ae:bc:5d:ad:bd:1b:bf:05:6a:0b:
62:67:ca:a6:c6:c8:4c:46:33:7d:40:2d:5b:fd:e5:
a8:3d:df:a0:52:f2:de:1e:9e:54:68:ed:ce:29:db:
35:89:fd:49:d7:d3:03:d4:3f:0d:fc:c2:c3:73:8e:
05:2a:ea:cd:7f:4a:4f:eb:96:82:4b:2b:8d:92:1e:
53:97:c8:c2:f8:4e:ab:1a:47:33:9b:d8:12:dc:1c:
81:6b:3a:39:9e:56:59:e1:ff:40:9b:33:11:48:3c:
fb:49:1d:12:d9:25:d6:2c:57:37:62:43:e3:ae:16:
ff:cc:81:da:e7:d1:56:ad:9e:ca:02:ac:6c:4d:df:
48:10:2c:1e:0e:87:89:9b:89:47:f2:aa:5c:63:31:
d4:c7:26:2d:1b:f6:26:62:f9:2e:6d:de:d1:58:06:
2e:96:62:1f:2f:0c:94:88:d1:2a:04:23:78:de:ba:
58:a5:cc:a3:b8:87:77:18:3e:56:17:91:a2:c3:13:
70:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:48:0F:56:69:DA:FF:57:8D:78:D2:4C:23:65:C3:84:4A:6B:2F:36
X509v3 Authority Key Identifier:
keyid:F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:bc:43:c4:ac:b5:c3:15:d7:9a:5c:cc:63:6f:85:6b:7f:8d:
57:28:91:41:c2:74:8e:4c:f6:00:ee:3a:f3:9b:dc:b7:cf:df:
fb:37:77:a5:66:5b:e6:b8:b2:f0:13:99:09:96:01:0b:41:14:
c2:f9:26:b1:54:e4:20:4d:21:76:1e:be:36:48:c9:a2:b8:f1:
50:45:00:85:8b:70:0b:cf:88:ae:78:16:da:66:15:20:f9:2d:
2f:f1:bd:6d:0b:ff:39:ae:85:1d:f4:61:79:5f:a5:ea:a3:85:
ed:6d:4c:e9:16:05:b4:30:21:9d:fb:ba:1b:d2:82:e6:88:35:
6d:72:d2:d5:f7:8d:23:2c:e3:9d:80:7d:9a:ff:50:94:35:4c:
44:c5:cc:16:90:f4:d6:52:61:91:76:bd:04:86:39:d5:c6:24:
c6:9b:32:2e:94:97:02:6b:3b:b4:e1:74:51:5f:1b:e2:68:b9:
67:1b:3a:e7:e6:83:2e:02:5c:83:aa:0e:1b:bf:e4:32:05:e3:
6e:22:5d:bb:2b:9e:53:b2:37:74:d5:43:d1:aa:1f:ee:07:de:
b8:29:d6:0c:c2:34:16:a6:e6:53:89:44:74:0b:35:13:94:70:
23:e8:e5:e9:ff:b9:0b:8f:d0:5c:fc:09:32:bc:1b:e5:f8:e0:
ab:7e:a0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:05:15 2026 by rpki-client