Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
File: 9E8rYv2EXJFI4OImQldIw8bpdTk.mft (raw, json)
Hash identifier: P6ArfHtkIC5eK0vspMkXxhSz9p18JMPs+el/eqD/cgI=
Subject key identifier: 4D:63:95:2D:36:02:0C:1C:D5:04:BF:10:3C:81:A8:BA:D4:6A:B5:2A
Authority key identifier: F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
Certificate issuer: /CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Certificate serial: 019E1D599812C04EADB0AEBBCECC2244FF06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
Manifest number: 0887
Signing time: Tue 12 May 2026 18:01:11 +0000
Manifest this update: Tue 12 May 2026 18:01:11 +0000
Manifest next update: Wed 13 May 2026 18:01:11 +0000
Files and hashes: 1: 9E8rYv2EXJFI4OImQldIw8bpdTk.crl (hash: Ge+ZV5F8HcGk0nXOOoZneEAd2+HgyChUKpaaBuh191E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:98:12:c0:4e:ad:b0:ae:bb:ce:cc:22:44:ff:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Validity
Not Before: May 12 18:01:11 2026 GMT
Not After : May 13 18:01:11 2026 GMT
Subject: CN=4d63952d36020c1cd504bf103c81a8bad46ab52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:05:ab:cd:bc:2d:f8:3b:5b:24:0d:9b:a2:
bc:30:d5:5d:f4:57:d4:a2:dc:97:53:02:b3:7a:1b:
4f:37:63:b0:82:fb:57:16:e7:e1:8c:a0:21:0a:43:
bd:2b:39:93:49:74:d6:0f:db:9a:04:0e:df:19:cd:
22:6c:02:c6:ec:ec:5b:f2:d6:ec:97:63:d3:33:de:
e5:67:14:f8:4d:d7:4a:12:77:7f:70:9a:1b:58:5a:
68:2a:c0:26:99:7e:af:10:a3:bb:d7:58:e3:09:a3:
08:7b:f9:e0:12:80:e7:13:7e:7c:29:ed:47:94:10:
c7:11:7e:7f:b2:99:6e:f3:7a:fd:3d:72:84:a0:db:
51:74:9f:6f:ff:82:c5:3f:6e:65:a6:ee:88:17:ea:
ea:44:69:32:ab:e0:50:37:0f:ae:17:d0:38:13:44:
1c:14:32:02:b9:02:82:89:ef:b7:7f:7e:fe:f3:69:
d2:8c:8e:a0:6f:dc:50:09:4d:09:f7:c2:4b:ef:38:
7b:5c:9b:55:13:8b:d7:59:03:b6:aa:37:9d:37:69:
45:af:e6:de:b4:43:b7:db:7a:57:1c:6b:4f:b0:a4:
de:3c:6a:72:e3:b9:cf:9d:d2:57:54:7f:9a:3d:51:
5e:ef:af:34:51:0b:9b:a5:40:a7:96:f1:33:00:95:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:63:95:2D:36:02:0C:1C:D5:04:BF:10:3C:81:A8:BA:D4:6A:B5:2A
X509v3 Authority Key Identifier:
keyid:F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9d:70:fd:11:ea:8f:a7:35:fd:14:1a:9d:34:56:2a:f4:a3:
b8:3e:06:3f:04:f1:47:7c:6f:0b:a2:6b:00:bf:fd:29:86:93:
a4:52:7c:50:28:d4:1d:9a:9d:7b:75:48:3d:87:9a:85:fe:93:
1c:6f:ce:71:77:22:12:31:4d:0f:b2:0a:66:87:3b:b2:3d:5b:
12:b4:01:59:83:56:24:e6:39:8a:ee:b3:26:93:d3:fd:d7:37:
72:d4:af:8c:a7:de:a1:67:97:b6:8d:35:df:75:d4:14:d2:14:
7f:79:3f:f4:0a:44:4c:09:30:3c:23:ae:25:cb:58:8b:0a:5b:
b2:dd:fc:a7:42:55:1a:34:d1:f4:c8:47:d7:68:fc:38:20:bc:
bc:d7:58:f0:fe:34:97:4d:6c:16:bb:7f:d9:31:cf:ad:ae:3a:
a1:70:b9:5c:85:ed:cc:25:72:39:5d:68:c3:02:b4:12:07:f9:
34:ff:f5:6f:56:63:12:f9:11:af:b2:e8:de:51:14:56:0e:68:
e5:2e:34:ad:b7:b3:8a:b5:13:a9:fa:e4:8a:2e:c2:77:ca:b7:
2e:0f:6f:c3:95:b1:85:f2:c6:1f:98:2e:41:54:31:70:cd:2c:
bd:64:70:ec:a7:ce:03:ea:f7:d2:f1:b5:4b:f4:2d:8e:fb:4f:
25:c6:db:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:45 2026 by rpki-client