Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
File: 9pGrMkX_iVpy3W_wdDw3e28PiaY.mft (raw, json)
Hash identifier: zYwPMVKPbxzpmPD63VEgkGuje/Lhpun7UZoiPIw+n6Y=
Subject key identifier: 89:F9:97:49:5E:58:D7:BB:EF:6A:4B:77:29:D7:42:2A:4D:9E:76:89
Authority key identifier: F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
Certificate issuer: /CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Certificate serial: 019E1C0FF4EB71C38BEE132D581F638BDE5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
Manifest number: 0A25
Signing time: Tue 12 May 2026 12:01:08 +0000
Manifest this update: Tue 12 May 2026 12:01:08 +0000
Manifest next update: Wed 13 May 2026 12:01:08 +0000
Files and hashes: 1: 9pGrMkX_iVpy3W_wdDw3e28PiaY.crl (hash: 8hNQUIj4DgYX+q0MYOl7e3aVVSVpiibUvr8FlZfkb14=)
2: DYss90R4HIuww1mW6-7xbEjXb4M.roa (hash: UMw2Vyr1TU50SIq5R3Ka5Y9X/0d1jW9A+sz46TwWuew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:f4:eb:71:c3:8b:ee:13:2d:58:1f:63:8b:de:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Validity
Not Before: May 12 12:01:08 2026 GMT
Not After : May 13 12:01:08 2026 GMT
Subject: CN=89f997495e58d7bbef6a4b7729d7422a4d9e7689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:98:90:87:d6:87:49:0d:4a:dc:ed:20:25:95:
c5:97:53:9f:fc:35:37:f5:7f:5e:f7:d2:60:c4:b6:
d5:68:ac:e1:f9:ed:db:48:63:8d:ce:93:8e:3c:2f:
17:82:01:b3:f6:67:35:af:82:7c:ea:4b:c2:22:28:
5f:fb:8a:e9:37:09:18:4b:3a:96:6d:81:9e:ee:a9:
90:a2:2a:eb:71:f4:af:53:56:1a:be:0b:fd:cc:d2:
64:23:d8:6a:f0:45:ef:08:86:d9:5c:db:80:82:29:
0d:d2:52:55:40:a6:96:5f:eb:fd:d1:d9:61:a2:5a:
62:da:72:19:8c:1e:79:37:6a:b5:b1:d6:1f:17:78:
c7:ea:ca:30:c6:e3:f4:23:86:f5:e9:a5:50:f0:56:
bd:d9:0f:b8:f8:f4:72:91:76:38:bd:11:70:b4:6f:
b9:60:cc:04:d4:01:2c:53:aa:4d:5e:bf:55:31:a7:
a3:9e:83:d6:85:d4:ae:27:73:e1:38:5b:49:0f:63:
75:53:e0:67:04:59:11:0c:42:be:77:8a:48:05:40:
c9:1e:4c:f7:b0:8f:fd:68:0f:f9:c6:d0:07:6b:c4:
01:52:e8:9e:23:0a:b6:34:bf:14:f6:70:ef:4b:d6:
ee:ba:27:40:3c:af:20:5d:98:a1:53:81:ee:98:72:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F9:97:49:5E:58:D7:BB:EF:6A:4B:77:29:D7:42:2A:4D:9E:76:89
X509v3 Authority Key Identifier:
keyid:F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f5:0f:0f:03:98:e2:8a:01:2a:e4:f7:88:3b:01:d8:d3:47:
56:b7:f2:ec:fa:a0:72:a9:52:40:32:6e:d3:b2:7d:d0:97:18:
38:35:88:e2:5d:cc:df:ec:53:17:b4:4e:64:a1:b9:3c:43:fa:
46:d8:3c:ea:ea:76:ba:e3:88:95:21:9c:10:76:64:ac:19:e6:
7c:ee:9a:26:32:03:a5:41:08:f6:12:d2:bc:21:5d:57:c6:e3:
73:40:cb:c9:eb:82:40:5d:e1:83:c9:60:dc:54:24:14:2d:d7:
12:33:f6:65:a4:bc:45:28:21:65:f8:13:62:09:da:49:e5:a2:
df:7a:13:d3:0c:12:4d:4c:6f:84:99:f2:d6:f4:25:de:86:d5:
00:27:01:10:61:e4:24:5f:89:2b:96:ca:3e:29:13:d2:4b:58:
3d:5d:75:f2:14:2e:3e:2b:ac:7b:26:e7:68:ab:10:3a:a6:7c:
e9:4c:77:9f:70:37:d9:7e:34:d2:01:af:29:a4:3e:43:a6:5a:
49:6a:1c:04:26:e4:39:a2:59:8b:5c:5f:e6:ab:b1:c8:b3:44:
b7:bb:c3:92:b5:8d:f4:02:0a:f8:2b:3e:a2:1c:0a:a5:a5:35:
9e:03:40:8e:e2:4a:4a:48:28:b0:50:55:66:09:71:c4:23:83:
58:9d:dd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:46 2026 by rpki-client