Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
File: 9bJzfl2X4RCOsEmQTemxbzauseA.mft (raw, json)
Hash identifier: qIuzMwCwNyoc+xsKS4hy7ezsfnZU/hMbDulMIB99H/4=
Subject key identifier: 2A:4C:E2:7B:44:AA:D0:EC:7D:4D:FD:6A:77:68:80:2B:38:85:74:D8
Authority key identifier: F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
Certificate issuer: /CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Certificate serial: 019E1C467CAD6E73D82B0B2441455E567E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 13:00:41 +0000
Manifest this update: Tue 12 May 2026 13:00:41 +0000
Manifest next update: Wed 13 May 2026 13:00:41 +0000
Files and hashes: 1: 9bJzfl2X4RCOsEmQTemxbzauseA.crl (hash: OEchm1r41JcF8mhLyXy7YnBwp6Q9HodKYwiZpxir9kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:7c:ad:6e:73:d8:2b:0b:24:41:45:5e:56:7e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Validity
Not Before: May 12 13:00:41 2026 GMT
Not After : May 13 13:00:41 2026 GMT
Subject: CN=2a4ce27b44aad0ec7d4dfd6a7768802b388574d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:73:16:3d:73:7a:ba:7f:b8:94:d4:43:aa:
3a:b3:29:97:0e:53:98:da:47:61:46:bd:4d:a7:70:
42:2d:da:2d:a9:b6:61:9e:19:a0:0f:f2:99:98:a2:
66:0e:a4:7f:5c:ac:ee:45:17:79:3d:80:4c:99:bb:
90:88:f0:a2:85:6c:51:7c:a0:64:36:9b:a2:e9:53:
ed:63:6a:02:a4:41:f8:a7:08:68:66:65:5e:d7:cb:
09:27:2e:e3:10:78:ca:d3:e7:ed:c6:16:35:8d:f1:
c0:1f:c4:94:51:ff:ad:98:c4:fa:96:b7:91:03:d8:
30:7b:5c:72:b7:a2:44:c0:35:8f:a6:47:e2:46:de:
93:db:81:61:b5:92:b0:64:bf:40:10:9a:0d:50:19:
59:26:37:a6:73:c5:b4:ca:b9:1d:bd:2a:22:4f:50:
ff:ea:f5:96:72:f9:fb:69:6a:a7:77:1a:64:7c:42:
95:39:6c:9b:9c:1b:7c:8d:fb:62:0a:63:a3:6f:53:
81:af:2b:3d:22:f0:c8:6e:8c:89:1a:16:dc:04:5d:
b8:9f:bc:7d:8e:ca:67:84:56:26:23:88:63:2b:8d:
75:16:85:5c:4b:aa:c2:9b:ec:82:f1:89:9e:b6:01:
1e:7b:6d:02:42:20:e9:d1:e7:dd:78:76:d1:2b:c0:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4C:E2:7B:44:AA:D0:EC:7D:4D:FD:6A:77:68:80:2B:38:85:74:D8
X509v3 Authority Key Identifier:
keyid:F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:cc:d5:c4:d4:23:57:18:21:ec:26:a5:ac:b2:0b:bc:d6:ba:
a1:09:d0:d7:15:62:9d:01:67:68:f0:49:92:55:b4:9c:dd:94:
39:9d:33:0a:d8:60:2b:3b:0a:76:94:95:21:ec:2c:26:af:ec:
1a:21:fd:24:2e:ce:f7:a3:55:e0:f6:b4:e6:e2:15:28:71:92:
4a:ab:fc:8d:87:57:3d:01:13:7c:69:e0:d2:81:35:aa:cf:22:
0b:f7:3b:7e:d9:ba:96:9b:07:e5:3f:91:42:4e:d9:b8:fc:f0:
57:03:b1:2e:3d:88:3d:80:c6:f7:9d:49:c9:8c:1d:9a:69:4e:
86:f5:fa:73:7e:d3:b5:24:86:bf:13:b2:33:70:80:12:f4:aa:
45:7e:c9:a8:cd:6c:0a:77:1d:49:01:da:ea:a1:b7:46:f8:c2:
9e:c6:b3:d7:fe:21:9d:bf:d7:5f:35:6f:fd:72:4d:06:b3:57:
fa:5e:1d:aa:25:be:8b:3f:dc:be:85:4e:3a:ed:d2:8e:48:93:
33:44:c0:62:74:75:6d:b3:67:e8:ed:b9:86:92:db:b2:46:ed:
64:c1:eb:c8:fe:4a:d4:51:32:06:eb:d7:97:45:e1:98:09:f7:
f9:92:c4:30:a1:11:51:e1:ef:f7:39:83:25:ae:24:92:a7:aa:
43:2c:18:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:27 2026 by rpki-client