Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
File: p9368Tt9vgXaoytYeLi2gCQEWXE.mft (raw, json)
Hash identifier: FO8fzfniRM9GpNTsokyRP9F/Q5U1GyZHPYDNV0AhAd8=
Subject key identifier: 22:02:B9:2C:10:93:58:FD:B4:2B:AB:4A:67:5F:49:D5:52:C2:54:5D
Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
Certificate issuer: /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Certificate serial: 019E205A8268A9BA233372956D646A410551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
Manifest number: 1090
Signing time: Wed 13 May 2026 08:01:02 +0000
Manifest this update: Wed 13 May 2026 08:01:02 +0000
Manifest next update: Thu 14 May 2026 08:01:02 +0000
Files and hashes: 1: X44UuuaUhAM50Kozh7XZVDvdF14.roa (hash: kIvHQLjOEtZWEUfUCpYD6bbto6town5tHTLofDklsdI=)
2: dAQr9ygVW7afaoDzLId5HtYFpKw.roa (hash: gWNR3pSMI8yeOAqKnvOXgWPtPa0bDKYn5eIcfvgVCNQ=)
3: p9368Tt9vgXaoytYeLi2gCQEWXE.crl (hash: 4bDMQCCNAtUHGF8YTA/9+Iwg/K6tgkjeD6iV4y7itak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:82:68:a9:ba:23:33:72:95:6d:64:6a:41:05:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Validity
Not Before: May 13 08:01:02 2026 GMT
Not After : May 14 08:01:02 2026 GMT
Subject: CN=2202b92c109358fdb42bab4a675f49d552c2545d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:b8:a4:73:74:fe:7a:99:9b:9f:b9:08:61:
4d:a0:6b:cd:1c:2c:0f:f0:b5:36:f4:8e:94:36:63:
a5:ff:06:e3:c3:0c:52:94:7f:42:44:d0:44:08:e4:
04:85:76:be:1a:03:c6:b3:e6:68:8c:08:9e:b0:2b:
43:0e:82:73:7d:11:ce:0e:40:7d:6a:6d:d5:e9:95:
be:0d:92:8a:9e:58:8e:c6:08:0e:7c:c6:9b:21:ea:
34:81:6b:a6:7b:c0:74:14:a1:b6:02:50:4a:13:22:
6e:e1:a6:69:aa:29:b8:e8:29:a8:f4:2d:5f:06:47:
b8:fd:40:2d:6e:0b:a3:bf:ac:0d:c6:2d:64:cc:08:
bb:b6:21:c4:21:24:9e:1a:7e:26:b3:af:55:3b:17:
dd:88:14:17:e3:13:0d:4f:a8:b4:21:71:83:ef:5a:
71:5b:6f:fa:01:d9:bb:b2:bb:7b:79:17:70:97:9c:
21:8b:46:66:d2:05:f2:37:2c:f2:48:6f:29:45:f9:
7e:ed:9d:dd:9c:a8:e9:90:cb:73:80:e2:71:ad:30:
37:d0:71:e2:75:7b:ce:a6:0f:ce:69:48:84:45:d3:
7d:61:f9:d1:51:a0:0e:c6:f3:b9:09:d1:33:85:57:
d9:37:07:86:62:14:e8:7a:4a:85:ea:99:97:61:c8:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:02:B9:2C:10:93:58:FD:B4:2B:AB:4A:67:5F:49:D5:52:C2:54:5D
X509v3 Authority Key Identifier:
keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fb:9c:88:6f:76:9b:84:42:21:27:b7:aa:1d:6e:71:4c:a0:
35:e3:8e:6b:85:cd:10:31:93:11:ce:5d:93:ed:dc:03:78:00:
6d:30:d2:a2:22:ba:28:59:33:9d:27:82:99:b4:44:b8:16:c4:
00:3e:ce:01:ff:23:e5:39:25:f1:9d:3e:cd:0a:a8:8f:21:75:
f6:9a:86:17:bd:7b:03:b0:be:a8:9d:42:6a:18:bf:3d:52:50:
61:64:b9:6e:ce:e9:9e:a3:4f:47:d4:2a:99:e0:2e:4f:2f:8e:
a6:a2:c9:80:cb:82:19:6c:48:3d:58:f5:84:3d:a1:c3:7d:42:
0d:7c:34:fc:6c:fb:8b:bc:1e:03:db:d9:03:37:f2:8b:97:64:
60:0b:31:b2:30:a5:3e:94:5e:41:63:24:e7:06:04:a5:52:c3:
e0:a6:c3:99:69:16:4d:6e:ee:27:9e:fd:e7:30:3f:23:b5:b9:
8a:41:82:38:8c:bb:be:f8:e3:cf:8e:00:d4:a8:46:0e:4d:02:
24:1d:cd:ea:20:9e:02:01:f6:a6:0d:94:3b:d7:55:1d:9e:fb:
e1:0c:90:75:cb:77:95:2d:a1:d5:86:d7:7c:d7:b8:79:6f:b6:
02:de:14:0a:9c:2c:c5:14:fe:29:97:a4:fe:e5:d1:e0:95:4d:
a4:19:90:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:30:05 2026 by rpki-client