Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
File: 9bdVrRo8ekUCu8PqNMdba85hyUw.mft (raw, json)
Hash identifier: 5CxnuNqH2U9AMa1aJNCvwC+Cc5ZJQO4Nf4DVWvuYS1Y=
Subject key identifier: 86:94:3A:4E:95:84:6A:C7:0A:06:E3:E4:25:CF:A7:22:1F:D0:92:04
Authority key identifier: F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
Certificate issuer: /CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Certificate serial: 019E1D22FDA394638D99FEE4173E8E932D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 17:01:32 +0000
Manifest this update: Tue 12 May 2026 17:01:32 +0000
Manifest next update: Wed 13 May 2026 17:01:32 +0000
Files and hashes: 1: 9bdVrRo8ekUCu8PqNMdba85hyUw.crl (hash: YOlsZYPyMDwj8Sl87Y+Vet8V1/dGEChqHswHRS8cz/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:fd:a3:94:63:8d:99:fe:e4:17:3e:8e:93:2d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Validity
Not Before: May 12 17:01:32 2026 GMT
Not After : May 13 17:01:32 2026 GMT
Subject: CN=86943a4e95846ac70a06e3e425cfa7221fd09204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8a:0c:9f:d7:71:d7:70:7a:7a:c9:bd:63:09:
33:68:32:37:e0:cc:4e:b1:48:79:3a:dc:ed:4e:c5:
30:14:52:b2:7c:30:5f:a4:e2:32:7a:9e:40:c3:19:
bf:2e:44:ec:59:24:e5:79:a7:b7:89:cc:9d:98:e2:
d0:8d:7c:9c:89:0f:30:02:b0:9d:fe:f5:51:13:77:
3d:b9:54:70:40:13:7c:9b:bf:9c:d9:b7:a5:fd:93:
dd:74:14:0b:34:47:0e:90:1a:51:14:ed:e4:ef:01:
4a:e3:27:a8:ea:0a:28:1c:4e:83:e6:c3:58:7f:f2:
d0:a0:1f:34:54:d7:f9:00:fc:80:9f:b2:a4:8b:21:
75:0c:12:ce:f4:3b:27:73:1a:0d:96:2a:c7:0c:d0:
4c:a2:6a:fa:09:71:df:e2:80:d6:fd:9f:7f:69:32:
e1:70:6f:cb:01:8d:78:4e:33:8e:be:30:21:0c:de:
ae:c3:02:3f:0a:f5:1a:a1:55:a5:20:8b:db:d0:22:
78:dc:53:f5:f7:35:14:f2:72:d9:c4:bf:2c:26:7b:
55:fb:87:f0:01:92:34:5a:f8:5d:68:c3:55:fb:31:
44:0f:2c:6c:e7:9e:c7:04:5e:b8:03:f6:5f:fd:26:
0a:b5:cf:bd:df:3f:21:cf:27:0e:e5:30:d8:eb:38:
eb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:94:3A:4E:95:84:6A:C7:0A:06:E3:E4:25:CF:A7:22:1F:D0:92:04
X509v3 Authority Key Identifier:
keyid:F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:00:a2:82:86:cb:a3:4b:20:35:6f:7a:74:1f:8a:c1:f5:fa:
ec:03:1c:9a:5f:e6:99:62:b6:52:52:23:30:ca:79:b0:4a:64:
18:6d:39:55:99:de:d8:04:29:9e:e8:44:b4:d9:c4:58:ed:85:
d0:9e:d5:66:17:df:9a:46:a5:cd:95:10:3e:f3:6d:10:cc:31:
27:0b:1b:5b:00:39:4a:1b:ac:50:18:ea:e6:a2:c2:c3:ed:cc:
76:03:41:02:81:48:f9:c2:6f:25:39:7a:82:7c:29:a7:f7:de:
bc:b1:34:10:26:bf:ca:0e:d1:5e:9e:fd:27:09:d4:ee:f1:00:
7f:80:a7:66:e8:0e:12:14:56:f1:a9:b5:d6:bf:a7:9f:03:7d:
5e:73:0f:e1:44:66:2d:f1:c1:60:97:da:7d:51:51:f6:10:9a:
35:23:4d:0c:f3:bf:d5:b3:97:d5:e5:ed:7e:31:8f:8c:a4:14:
4d:03:5e:8b:53:a3:2b:6b:15:41:89:c0:ff:c2:74:4d:43:71:
7f:2a:14:f9:92:dc:a8:97:47:21:24:8a:cf:c3:31:09:ea:b6:
d4:38:cb:ae:6f:91:ca:10:01:65:51:4f:e6:dd:63:ff:59:45:
f2:06:54:90:5c:3a:3b:5a:ff:93:07:c6:75:b4:70:3c:1d:c7:
98:66:ce:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:21 2026 by rpki-client