Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
File: 9rLInTH2F1Fqhgp4IrumgkinaaA.mft (raw, json)
Hash identifier: AmEipWhYuD/94Gvcpa9uwcB3CgqyFxG2DbCAfNWAtHI=
Subject key identifier: 35:7E:6E:C9:68:B8:D8:25:33:34:40:33:2F:AB:0A:32:4E:85:F8:6B
Authority key identifier: F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
Certificate issuer: /CN=f6b2c89d31f617516a860a7822bba68248a769a0
Certificate serial: 019E1DFE5973E72A0D172D0FEFD076B05F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
Manifest number: 0AF4
Signing time: Tue 12 May 2026 21:01:08 +0000
Manifest this update: Tue 12 May 2026 21:01:08 +0000
Manifest next update: Wed 13 May 2026 21:01:08 +0000
Files and hashes: 1: 5VaEr_9CgIk0hDvBuz897kphjAA.roa (hash: O8HVzXpA3yJisGesiXqBb6I5Gg2zmpPDn2gcT3B2Ub8=)
2: 9rLInTH2F1Fqhgp4IrumgkinaaA.crl (hash: LhbSBSWQoFGeKdc4pp6Pm6CXROKcTaLiu7JVljfWEL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:59:73:e7:2a:0d:17:2d:0f:ef:d0:76:b0:5f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b2c89d31f617516a860a7822bba68248a769a0
Validity
Not Before: May 12 21:01:08 2026 GMT
Not After : May 13 21:01:08 2026 GMT
Subject: CN=357e6ec968b8d825333440332fab0a324e85f86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fa:5d:0f:aa:88:1e:3c:f7:c2:70:ce:d4:7c:
3f:98:52:36:0a:ae:ad:b7:27:88:24:c4:16:17:cc:
6c:0e:d9:05:4f:e9:19:5d:ad:30:28:36:f4:1e:15:
16:4f:5a:05:b2:3f:e9:9c:7c:67:24:85:54:17:ae:
a4:15:7b:25:53:43:6a:4c:53:dc:8e:e2:72:2d:f6:
33:19:0e:d4:81:eb:b3:a8:75:53:79:42:1a:b6:db:
70:a4:d5:11:14:7f:fd:ef:67:ce:46:05:e0:08:06:
be:2f:04:49:ea:36:2f:60:ca:c8:7a:87:50:e0:18:
4a:08:03:4b:d2:49:50:28:c2:18:7c:ef:e4:c6:96:
5a:00:61:1b:af:99:9b:0b:75:90:97:c0:ce:e1:3c:
ae:0a:09:dd:fa:93:4e:52:da:a6:13:62:ac:86:c2:
2d:0b:a8:3a:f8:33:c1:8b:d7:84:63:b2:fe:d2:be:
1d:44:bf:70:e0:45:30:4a:fc:96:a6:3d:d5:95:28:
3c:88:c6:21:d9:dc:7e:41:0c:fa:dd:32:0a:18:c2:
cc:7b:55:73:07:12:3d:ef:de:b0:20:81:bd:c4:23:
64:aa:5c:cc:6a:12:ad:29:f5:ee:4e:ce:59:f5:8d:
df:22:9a:04:6e:25:71:63:94:a1:73:88:8b:33:b9:
08:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7E:6E:C9:68:B8:D8:25:33:34:40:33:2F:AB:0A:32:4E:85:F8:6B
X509v3 Authority Key Identifier:
keyid:F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7b:02:2f:b8:6a:70:42:86:e2:9e:fc:fb:20:a4:9d:25:85:
53:20:f5:b5:6f:7b:0c:fd:d9:05:c9:e7:c7:fd:6f:e5:90:56:
42:35:a4:c9:e3:cf:d6:f8:76:93:c3:05:c0:5b:7d:3b:56:1a:
77:e2:05:ac:19:e9:a8:7b:c9:03:dc:51:63:bd:d6:ca:3d:2e:
4f:56:9d:d9:2a:8b:81:ea:94:33:04:0f:5c:e1:9e:23:92:e6:
b6:72:7f:c7:8f:ec:13:cd:0b:cf:9b:5b:59:f9:18:3d:42:88:
73:47:02:01:2a:d2:16:77:33:12:ba:b6:b3:89:81:b5:e9:e2:
c1:5a:c2:25:ed:9c:cd:5c:74:89:14:d9:ef:8a:c6:49:9d:18:
2c:2b:37:ca:72:4b:05:33:67:0b:66:db:2a:46:4d:ad:45:31:
03:b5:83:c7:ea:86:6b:ce:18:56:18:cc:74:60:f5:4b:5b:62:
87:7e:95:1f:88:76:52:72:49:8b:fe:68:17:c9:34:1a:58:86:
97:ef:16:35:b3:4e:47:6a:60:24:6f:42:b4:19:a0:e1:79:c1:
89:fe:8b:df:22:0f:b4:9d:ba:c4:71:12:b1:20:8a:4c:8a:16:
e1:25:08:09:ab:99:26:62:c5:c3:07:5c:70:54:b2:95:58:21:
96:2f:21:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:31:47 2026 by rpki-client