Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File: 9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier: QC1ktPSHRFCW9Suc9NOzh4/gCn97etL0eynnAnn85QA=
Subject key identifier: BF:26:C2:F2:26:64:86:94:EA:EC:78:86:CD:EC:77:A1:BF:B5:CA:E2
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer: /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial: 019E1D23377C36E92AEB7C17B190B8BA1C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number: 0DE8
Signing time: Tue 12 May 2026 17:01:47 +0000
Manifest this update: Tue 12 May 2026 17:01:47 +0000
Manifest next update: Wed 13 May 2026 17:01:47 +0000
Files and hashes: 1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: xyW5eHGxzQ2MXDUFtDcqsOg9A4H6XQ4wnP85kOkFfJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:37:7c:36:e9:2a:eb:7c:17:b1:90:b8:ba:1c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Validity
Not Before: May 12 17:01:47 2026 GMT
Not After : May 13 17:01:47 2026 GMT
Subject: CN=bf26c2f226648694eaec7886cdec77a1bfb5cae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:fa:8d:b9:d9:e5:95:d3:17:2d:c3:32:b1:
0d:0a:50:1e:1c:98:72:3a:7a:49:b7:1b:32:b4:de:
44:71:3f:0d:69:1f:1e:e2:69:86:ce:05:02:06:71:
71:7d:ba:cb:69:8f:54:ac:d4:31:21:27:79:9f:de:
d9:ce:32:ed:4f:9c:8f:5b:33:9d:77:59:52:5c:aa:
3c:00:4f:9f:80:a0:f1:7d:e3:5e:fd:0f:ca:fd:8e:
d5:c4:34:0d:01:f7:81:3f:f8:95:35:9d:29:bb:40:
ee:70:9f:ed:88:a2:06:3a:c4:1c:59:2f:3c:31:18:
14:b7:4d:4d:e1:6f:76:27:ac:81:1d:47:52:da:8c:
6d:64:3f:2e:68:17:18:e9:b5:cf:c8:10:9e:61:67:
56:1a:cc:48:e4:02:63:21:8d:44:40:f2:cd:5b:a7:
2a:42:e2:46:e2:e7:4f:20:42:15:3f:f4:73:be:ca:
09:84:5a:ed:09:0e:7a:89:3b:fb:3c:54:e1:18:82:
3f:7a:4f:c7:8d:17:94:5a:31:07:f7:5e:0e:d4:40:
ff:6b:70:a4:50:fb:1f:3e:49:43:be:51:23:43:da:
d8:39:e1:fd:53:48:80:a1:3e:39:c5:e5:dc:6e:b1:
e4:22:da:9d:7e:7e:19:21:ef:4d:c2:5a:96:c7:ab:
ea:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:26:C2:F2:26:64:86:94:EA:EC:78:86:CD:EC:77:A1:BF:B5:CA:E2
X509v3 Authority Key Identifier:
keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9a:4a:3e:e9:8b:cf:d7:84:3a:dc:de:86:de:bc:7d:f0:62:
68:76:67:11:08:18:80:a5:97:a2:8c:83:30:fa:5f:45:26:b1:
56:26:7d:68:f6:d6:b6:f2:54:38:91:bf:5d:bd:0a:45:e5:ce:
af:b7:69:7d:4a:dc:4c:db:e1:cd:2d:d3:1a:a2:ac:33:1e:cc:
a6:62:49:4c:e1:34:fb:da:df:3f:9a:ce:33:53:cb:16:90:29:
be:2b:a1:72:c7:32:3d:00:d0:a7:9b:5d:a8:00:56:02:79:22:
00:a9:3d:c7:c8:01:16:d5:11:2c:f3:ef:bd:f1:e4:32:b6:29:
81:87:bc:e8:c7:6c:6f:0a:e3:34:e0:2d:62:ea:22:0e:0d:57:
f2:52:82:f3:3f:56:09:6c:e9:c4:35:17:f9:48:1a:59:c8:30:
94:6c:15:0d:ab:cf:64:f3:75:a2:46:c2:f9:92:dd:6d:42:8f:
e4:b5:5a:db:64:26:a5:ad:47:50:5e:2e:45:e7:09:2c:78:d7:
2b:be:6f:ab:c4:be:8b:b7:3a:c1:6b:97:51:7c:7b:d6:71:f0:
0b:64:b3:1e:0f:a6:52:df:27:43:9a:27:97:44:e2:13:4b:00:
e7:ee:7d:80:65:d9:79:e8:86:ce:94:26:d0:6d:fe:66:cc:7f:
e0:d5:85:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:42 2026 by rpki-client