Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
File: 9RMq2BqEohEhxQRHsgidzl5LI4o.mft (raw, json)
Hash identifier: mZlGSgaEj7GkdyqbfA290k2cIuSGNlu3DolGd9BZ1R8=
Subject key identifier: 0C:5A:BE:F2:21:20:01:1E:C0:99:0A:7D:38:C6:86:F9:DE:98:B6:20
Authority key identifier: F5:13:2A:D8:1A:84:A2:11:21:C5:04:47:B2:08:9D:CE:5E:4B:23:8A
Certificate issuer: /CN=f5132ad81a84a21121c50447b2089dce5e4b238a
Certificate serial: 019E1CB5831E5847F662F74F415701D83A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
Manifest number: 4C
Signing time: Tue 12 May 2026 15:01:57 +0000
Manifest this update: Tue 12 May 2026 15:01:57 +0000
Manifest next update: Wed 13 May 2026 15:01:57 +0000
Files and hashes: 1: 810BVakNXZc-eZCkm84wPbkx0zw.roa (hash: 4W7QJcIB5zQfI2eP/65KAZgZifjdrkX8vzWfoESNuGg=)
2: 9RMq2BqEohEhxQRHsgidzl5LI4o.crl (hash: rLIBfc1UG7j8HSYXY6BW3PJIR2mWr9GmBx5thLzZutk=)
3: T7Q4ZInr7nmTwTSXGOP2lYQS6SE.roa (hash: Y1/e/IgPvhokjR0rrttCkxlf/wWiyXtQnZX5Qj+ssXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:83:1e:58:47:f6:62:f7:4f:41:57:01:d8:3a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5132ad81a84a21121c50447b2089dce5e4b238a
Validity
Not Before: May 12 15:01:57 2026 GMT
Not After : May 13 15:01:57 2026 GMT
Subject: CN=0c5abef22120011ec0990a7d38c686f9de98b620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c2:ea:09:18:89:f3:54:17:b4:5b:ec:01:61:
de:1b:32:3e:b8:b9:0c:15:b2:18:33:f0:0d:f7:92:
bb:8d:9e:b1:ec:9b:91:a0:76:d3:4c:a5:b3:7d:d2:
87:3c:10:97:57:25:f4:1f:8d:b7:df:dd:6c:5c:ac:
72:a4:62:8c:c5:f6:9c:5a:1c:c4:8d:00:26:de:49:
a1:ad:6a:e1:e2:42:c2:55:1a:a9:0a:e3:3d:fe:e7:
96:50:f4:42:34:c8:6c:fd:d5:fd:7e:16:be:0d:e9:
db:73:5e:e5:6b:32:0d:ce:af:a6:9f:76:ad:c4:ec:
dd:21:d6:f1:34:13:35:0a:ee:f1:f2:b2:69:f0:3c:
a7:3a:85:55:54:29:93:4a:bb:8f:e5:f3:aa:83:be:
98:25:24:51:32:d6:b0:96:6d:9c:f3:44:30:fd:38:
b4:eb:73:d7:bf:d2:f8:45:96:40:f9:0a:ff:3c:15:
7d:2d:9f:db:76:db:37:b8:21:50:5d:9a:ed:ba:39:
d3:96:de:1f:e2:69:f3:ed:d1:4a:19:b4:42:a3:ad:
ea:2b:a5:f2:cf:e3:2b:d5:d4:da:0e:64:10:63:a1:
75:34:ee:9f:0c:2a:f1:60:9b:97:17:6d:28:31:a1:
25:85:71:2a:c6:10:10:0c:c4:a0:0d:fc:b2:c3:ef:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5A:BE:F2:21:20:01:1E:C0:99:0A:7D:38:C6:86:F9:DE:98:B6:20
X509v3 Authority Key Identifier:
keyid:F5:13:2A:D8:1A:84:A2:11:21:C5:04:47:B2:08:9D:CE:5E:4B:23:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:88:dc:96:77:84:4b:36:bf:2f:26:60:f7:72:e7:33:87:0a:
a7:67:56:bd:c6:a5:b9:56:da:9a:38:6b:11:30:47:94:0f:9d:
16:f6:3e:cd:41:da:d4:32:1d:38:a9:a2:23:78:ae:86:a5:04:
e2:86:2a:58:92:b1:dd:6d:9d:8d:8b:a1:ae:9d:ab:d6:34:b2:
13:50:1a:d7:c3:3c:e6:0a:ae:dc:91:73:9f:e3:54:b5:4c:b8:
d9:c9:a4:d7:59:8e:c0:2c:6d:8a:b2:da:6f:48:62:de:24:39:
f8:3b:78:4e:d6:5f:47:f4:ca:9c:6d:42:57:c2:88:25:6d:0a:
94:d6:da:7e:33:f8:f4:d2:5a:c2:9b:e7:80:b3:b2:f4:86:13:
d3:3b:ef:0e:f4:55:a5:0b:da:de:5c:7e:70:c6:f8:4d:6b:b5:
6a:05:36:e1:9b:dc:be:6d:61:13:df:fb:7a:07:41:ff:26:c3:
57:5e:4b:98:be:d3:44:53:75:8a:11:9f:a0:ff:0c:6e:b9:9b:
2d:0f:08:f7:0a:50:27:32:72:97:e5:be:4c:b3:38:36:8e:8a:
c3:a0:41:d4:8c:cd:00:d6:cf:7c:ed:83:92:1b:41:a4:9c:17:
41:50:59:7c:80:81:88:7a:ca:83:51:8a:1a:0b:0b:60:21:b0:
2c:0c:6a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:08:00 2026 by rpki-client