Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
File: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft (raw, json)
Hash identifier: xKC+5lO9xDnLmnteDjW82KZYPbeidcL734bnquu1eyA=
Subject key identifier: 48:84:90:AA:D8:64:CB:CF:9E:3A:1C:00:63:6B:5B:23:89:31:22:D2
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 019E1EA2BBD82302DD897A1B393CD5463A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
Manifest number: 1937
Signing time: Wed 13 May 2026 00:00:41 +0000
Manifest this update: Wed 13 May 2026 00:00:41 +0000
Manifest next update: Thu 14 May 2026 00:00:41 +0000
Files and hashes: 1: 2gp85iNI9hOHVMoD-AVmhaVIeZQ.roa (hash: axs71u0qY3GNU78vZgfYXYLH532ZZvavOcB1PlEaAyE=)
2: 5V_xONqzwKma1n0RRaZThBrg5gE.roa (hash: z1TwNh3QakcyBUbCZgGTjXYrrx8YDgv/xgtP0R9TjOI=)
3: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl (hash: ONDYA1SDnjEnqcrViySl2cyhtOn9u9MuBjsbzcxC5WQ=)
4: MXdV921MJ9HnU0g8Ibj56jqCHec.roa (hash: WqDnr1oQ50UZLn7z3oCewJtJXaNubJJPYPVKuEtg2us=)
5: QJTkOmElpeJHG2eadXYZEfdH9Ew.roa (hash: QajHiauxJnpQk0ZVdLy5C2eged/kBvFsMhoSIGwW6WM=)
6: Sr8taJwNmM6IUIh68pFCremKsP0.roa (hash: 8hNtlSLs+hgRIJnDDfJh2MIcy6zUGifsMLAL3xiKJ1I=)
7: cJSB3QS13j7tmP3z_rxKXgO4j60.roa (hash: 9yWuPk6TuuusjVGKVizh7DPc+s1P+89Z5o314zB49FI=)
8: kGPfhXxpreZtjaPga5IzFyy5BYc.roa (hash: i9y196dGRt0WCvB/nvKsvdx4WF+EKGdHmOuGX6kQ6qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:bb:d8:23:02:dd:89:7a:1b:39:3c:d5:46:3a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: May 13 00:00:41 2026 GMT
Not After : May 14 00:00:41 2026 GMT
Subject: CN=488490aad864cbcf9e3a1c00636b5b23893122d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ad:87:47:69:71:04:55:ea:3a:4f:6c:63:ab:
0e:93:b7:62:83:a3:a0:65:bd:82:89:ea:f1:7c:00:
fe:ca:c6:bc:c0:35:26:05:b4:c0:c8:cf:5c:fe:0e:
2a:fd:80:f7:2b:b1:17:24:ba:48:b8:da:10:04:e1:
fe:f6:9b:4c:4a:0e:47:34:93:47:29:30:72:e9:8e:
88:4d:be:d1:cd:20:26:9d:f9:eb:50:ca:87:8b:43:
4f:c2:4a:fa:4f:18:59:51:a3:ac:ec:26:c6:23:fa:
27:6f:a2:7f:62:79:08:d3:c1:88:35:f5:ff:ba:10:
18:7c:3a:d1:2f:a6:de:a2:91:33:bf:e2:91:7d:9d:
f5:26:9f:1c:66:8a:cb:44:e5:9d:d7:a4:59:0b:5d:
e2:47:d9:50:8d:7c:8e:a3:99:f7:18:75:3d:9e:54:
cd:ea:66:49:9e:74:c9:56:3a:40:35:65:36:84:09:
b1:d5:5e:78:97:08:0e:9b:98:61:fa:55:1b:26:40:
53:70:e9:f5:6e:70:8c:d5:e5:21:e1:09:50:7e:c4:
7a:e9:0c:ab:5f:b5:97:85:a4:2c:67:1a:ee:b7:47:
07:fa:af:9e:17:a9:35:e3:43:69:59:a7:8f:c6:4f:
ff:bb:5a:5d:18:50:06:b8:dc:82:fe:27:9a:37:78:
bf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:84:90:AA:D8:64:CB:CF:9E:3A:1C:00:63:6B:5B:23:89:31:22:D2
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bc:b5:89:a9:e8:8e:e8:c5:20:fd:89:be:c9:79:98:7f:d7:
b0:b3:a4:71:ef:34:bb:49:37:92:d2:13:c8:13:1b:87:f6:8a:
81:e9:24:9c:46:93:d5:a9:10:75:d9:6b:32:2c:6f:dc:0c:c7:
b9:dd:6e:77:af:75:ec:e5:ae:24:60:e3:e4:9f:46:0b:a7:0a:
2e:4c:5f:e4:2d:e2:62:2e:54:72:9a:85:65:ae:0a:43:1e:6c:
27:bf:a0:47:6d:5b:93:8d:ff:bd:d8:f8:12:02:e2:51:0a:2a:
8a:e4:63:08:88:d6:a0:65:09:f7:4c:1a:9f:ff:de:12:86:2c:
51:e5:32:e6:a6:2d:41:92:8f:82:30:36:16:bd:32:57:27:cf:
f7:17:43:18:46:ff:25:b3:80:5f:01:d4:97:e4:14:66:83:42:
4a:df:8e:d9:e7:5c:45:a4:9e:0e:31:4b:8a:5d:98:dc:56:ef:
66:73:33:20:ba:34:14:bb:5c:6b:78:da:6b:2d:61:fe:36:fa:
fd:01:ef:94:76:42:dd:9b:92:54:10:3c:a9:c9:17:00:97:3a:
8d:90:8e:a5:5e:ef:14:d0:fa:42:dd:81:a9:97:56:04:0e:c0:
51:83:f0:b7:b4:85:b2:4c:e8:eb:3a:b7:87:aa:d3:9a:59:70:
41:22:97:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:03 2026 by rpki-client