Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
File: 9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json)
Hash identifier: jxpROOEnZVufuCOP/49DBErJnr0yK0LrNYCVxoXJM/Q=
Subject key identifier: 7E:B1:99:A1:3C:4C:43:CE:6D:7D:01:D2:EB:4F:C3:4D:05:36:DD:3F
Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
Certificate issuer: /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Certificate serial: 019E1D599C7A10C5A722A349B202A8ED4144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
Manifest number: 164A
Signing time: Tue 12 May 2026 18:01:12 +0000
Manifest this update: Tue 12 May 2026 18:01:12 +0000
Manifest next update: Wed 13 May 2026 18:01:12 +0000
Files and hashes: 1: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: aKNQ5csfHEGGTf9IIrGkRSH1vtBE1kSvV03k+4J0wkk=)
2: epgbRZ451e-4FNMtDUxjsoEsQts.roa (hash: 1bTVs1WZkQ0C5Jeug5kRDuRS7N5Tu6N+va1M7r7izGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:9c:7a:10:c5:a7:22:a3:49:b2:02:a8:ed:41:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Validity
Not Before: May 12 18:01:12 2026 GMT
Not After : May 13 18:01:12 2026 GMT
Subject: CN=7eb199a13c4c43ce6d7d01d2eb4fc34d0536dd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:96:e4:af:35:c0:25:4b:86:27:69:94:9f:a7:
35:72:43:87:bc:ec:c6:7c:e9:31:c4:7d:61:b0:8a:
f9:bc:14:19:90:49:89:c9:fe:3b:52:a8:20:65:ef:
18:ad:90:fd:49:9e:46:f7:d4:af:99:99:05:0e:d2:
4f:81:3d:c0:82:e8:3e:b0:b1:7b:47:04:57:a1:41:
3d:cb:0d:b6:5b:42:c0:ad:dd:ee:75:7f:39:5d:ad:
0f:9c:61:56:46:96:c3:13:7d:cf:9b:2d:c9:6e:51:
b0:42:bc:52:b9:02:41:d2:3a:2f:be:77:b5:28:c8:
47:85:ef:93:e0:5d:48:f9:24:4b:bc:25:95:45:90:
99:c7:e2:66:0d:3d:fa:93:68:63:51:f1:e3:a9:57:
d2:17:1a:f8:ad:ab:d3:3f:54:02:0e:99:aa:fb:79:
ba:eb:49:02:5e:e5:1f:dc:52:99:7c:4c:da:54:90:
ad:8f:9b:f6:e0:a2:70:0b:5d:16:86:02:8a:64:f1:
d3:da:cc:55:38:e4:18:5e:a7:f1:ea:f3:5f:bb:4f:
2c:ae:fd:6c:09:a8:97:08:7e:74:a5:3b:e2:ef:3b:
52:8a:4a:09:93:62:9e:4f:ac:bd:f1:42:bf:ab:fd:
4f:af:4c:92:94:30:e9:67:ca:78:29:23:84:14:9b:
a0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B1:99:A1:3C:4C:43:CE:6D:7D:01:D2:EB:4F:C3:4D:05:36:DD:3F
X509v3 Authority Key Identifier:
keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ab:47:a5:85:5b:82:82:0b:dd:09:71:ba:63:45:29:0a:08:
07:08:75:4b:55:e9:17:07:28:05:46:bd:7e:d1:97:2f:4d:80:
70:1a:fd:9f:3f:b8:ba:55:b0:38:64:3e:31:5b:46:ad:14:4c:
93:ef:f5:97:87:65:21:56:42:25:3c:c7:58:9d:58:26:0d:a3:
af:82:d9:6d:1c:a8:71:99:c1:55:b5:f2:64:a1:4c:7e:cc:e5:
3f:07:37:c8:5e:17:42:f6:47:97:f9:9e:52:d2:e8:13:d8:a2:
94:59:fe:f3:30:da:66:5a:db:36:2f:65:b8:5b:8e:74:80:be:
fa:be:67:47:42:a6:4c:37:f6:5c:fc:98:4d:68:24:da:72:6a:
4e:aa:49:8e:49:4c:57:8f:6a:bd:92:75:8f:19:58:12:d4:6a:
2b:ac:0e:a8:ac:90:f9:f4:90:55:bc:21:f6:41:6c:51:31:86:
14:eb:79:53:0a:83:fa:e4:2a:5d:18:3c:0b:54:e2:86:1a:8b:
1b:f8:f4:4c:28:88:ec:58:b6:27:f2:e5:53:64:51:8e:6b:1d:
67:7f:c6:60:6c:42:80:c8:95:ca:a2:ba:64:1b:51:ba:a2:05:
eb:bf:89:03:ba:dc:52:03:0d:3b:30:5e:78:7a:54:77:64:a8:
b8:dc:9f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:11:03 2026 by rpki-client