Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier: xjhzM+vbTbrD90KZwbGESafoc0XvBiYXalekxDLThgs=
Subject key identifier: 9B:32:42:83:A8:45:22:D1:13:A5:9C:F2:29:CF:B3:3C:4D:0A:CA:0B
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial: 019E1E35600F98ADF125E5C11A3A140BA786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number: 0ECF
Signing time: Tue 12 May 2026 22:01:14 +0000
Manifest this update: Tue 12 May 2026 22:01:14 +0000
Manifest next update: Wed 13 May 2026 22:01:14 +0000
Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: 98xD7+odF4+ryhZUJM+YGHsVBDujpoulTKYo635GbKE=)
2: I3Cwe_JfIHDw-5FguYkJbkBPot8.roa (hash: NhXNbLKSK6Zii6NTvjleq3atjNt9Qq9hOl62FzoteKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:60:0f:98:ad:f1:25:e5:c1:1a:3a:14:0b:a7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Validity
Not Before: May 12 22:01:14 2026 GMT
Not After : May 13 22:01:14 2026 GMT
Subject: CN=9b324283a84522d113a59cf229cfb33c4d0aca0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:77:0c:6e:2a:6c:ab:ca:7b:5b:55:9c:9d:2a:
ad:4a:87:5d:ed:48:d4:78:4b:1b:37:ff:a8:08:88:
86:1b:88:56:a4:d6:f6:02:2d:c5:87:1b:cc:3d:34:
d4:92:87:4f:5e:bc:7a:aa:2f:30:80:b2:8f:83:51:
d4:ee:0e:7a:ed:31:dc:04:32:a5:13:18:ec:b1:a8:
48:8a:c7:e7:75:3e:07:b3:fe:d8:73:c2:e1:cf:d9:
97:27:c9:72:bf:34:dd:7d:dc:4b:9b:5b:ee:75:dc:
6f:bd:a3:cf:96:56:9e:be:8f:dc:76:ee:4c:8e:fc:
f8:f4:78:83:06:f8:e5:9e:61:4c:c7:f4:da:f5:f5:
ad:59:c7:bf:1b:23:ff:67:aa:d7:41:4a:93:e6:32:
2d:60:59:48:b5:5d:64:c2:b2:de:dc:5e:f2:14:ea:
da:84:3d:51:c8:80:a6:e7:03:f2:96:b5:7e:2a:70:
d8:93:1c:dc:ba:d1:4a:84:2d:88:e6:c7:43:c7:44:
92:37:a6:00:9e:00:75:0b:ed:6b:5e:3d:77:8a:5b:
6b:e3:de:8b:32:05:82:aa:89:b5:94:4a:70:a3:e4:
ae:5d:dd:f1:08:69:de:b1:20:17:07:2b:95:39:65:
c7:a7:4d:39:85:0d:2a:3a:9c:74:17:a8:e2:b9:d0:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:32:42:83:A8:45:22:D1:13:A5:9C:F2:29:CF:B3:3C:4D:0A:CA:0B
X509v3 Authority Key Identifier:
keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a0:23:1c:40:14:df:7e:e4:1f:a2:6b:e9:94:3e:95:9a:5b:
c7:f4:87:7e:51:70:39:0f:c5:d9:81:8a:dd:16:48:c6:73:07:
18:e4:8a:bf:a1:7d:04:21:8f:f6:28:9d:ec:4a:cf:ca:8b:6f:
8c:ea:e6:b8:4a:22:55:20:4d:34:88:fd:42:ca:61:ce:4f:aa:
e4:c5:ff:96:b9:cc:0f:39:92:76:89:0b:fa:dc:47:cf:e6:5e:
01:50:e8:70:d0:db:33:19:ef:e7:7d:4b:ed:89:71:41:77:c2:
59:cc:9e:e4:db:fd:8f:da:51:b9:55:3c:19:11:a5:d2:8a:ef:
09:de:45:a8:d9:16:89:9b:84:c0:87:e2:b8:94:88:85:c5:86:
75:37:fe:ed:d1:a3:bf:29:e7:bc:9b:2e:60:d9:06:02:38:2e:
f7:3a:07:fc:9f:1d:ef:5d:5d:93:24:2f:43:cf:0c:fd:b2:86:
17:12:6a:74:72:4f:d6:cb:e7:8d:b1:6f:4f:19:db:9b:37:8b:
ae:c4:0f:05:61:2d:b8:0c:ae:81:08:9b:ce:c0:a2:3b:ca:67:
94:b3:2b:ea:ef:31:8a:c9:a4:92:46:b1:9c:68:80:9b:fb:d7:
66:bd:72:f6:a5:67:c8:62:46:6a:d2:5b:a8:41:3a:32:48:71:
99:b4:9f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:33 2026 by rpki-client