Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File: 9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier: i01AiXGZxgU2d8nKY7dvcH+zIM+Z/kabTVubA3vtOi8=
Subject key identifier: 69:B1:DD:C3:49:1D:BB:F8:02:50:C2:E3:E5:79:01:C8:DE:F8:ED:86
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer: /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial: 019E1F7F701B9BF07BCE4AE2EA8DDB7E5E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number: 0FE4
Signing time: Wed 13 May 2026 04:01:45 +0000
Manifest this update: Wed 13 May 2026 04:01:45 +0000
Manifest next update: Thu 14 May 2026 04:01:45 +0000
Files and hashes: 1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: eDgNIOqeD/bkuyc5YOSOhxdi6wXzaZsj6vULObbzXfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:70:1b:9b:f0:7b:ce:4a:e2:ea:8d:db:7e:5e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Validity
Not Before: May 13 04:01:45 2026 GMT
Not After : May 14 04:01:45 2026 GMT
Subject: CN=69b1ddc3491dbbf80250c2e3e57901c8def8ed86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:c0:4d:2b:70:b2:2c:a5:04:3f:02:b7:53:
fd:1d:2f:33:bf:44:7d:95:36:84:2a:6c:3f:dc:4d:
bc:ff:be:e8:fd:fb:f2:4d:e0:e9:17:58:ed:81:14:
3f:1f:86:32:94:ff:59:4d:e0:32:a7:8f:4a:36:f2:
b5:63:c4:de:84:34:14:2b:b1:8d:43:66:a5:11:ac:
ea:4e:62:70:e7:bb:55:64:41:59:c2:63:4e:df:49:
16:f5:93:0d:c0:e4:ea:f2:0b:3f:45:d8:16:58:d7:
c6:a0:47:da:c4:11:64:b0:58:20:64:1f:bf:3d:dc:
3f:4c:68:6e:99:23:c2:d8:72:2d:8e:ec:52:1f:bd:
71:a2:dd:30:f5:c8:c0:d4:9c:6a:6f:39:69:e1:8d:
fd:d8:36:c9:67:04:bc:d1:7f:c9:8f:d1:40:83:0e:
45:d6:2e:fa:fa:30:f5:a6:f6:cb:74:66:af:6d:2c:
cb:83:34:0f:7f:7e:b3:78:8e:41:0a:7f:ef:9f:5e:
3b:7c:2a:91:c7:c0:45:e7:b3:7e:ac:39:31:c9:ea:
32:b0:05:28:91:93:ce:fe:55:3c:d2:78:c8:2d:55:
4e:69:3b:f8:91:1c:04:61:78:17:be:a4:72:b9:24:
bf:8a:04:18:5e:56:20:b5:09:ba:bb:5c:bf:32:e2:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B1:DD:C3:49:1D:BB:F8:02:50:C2:E3:E5:79:01:C8:DE:F8:ED:86
X509v3 Authority Key Identifier:
keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:14:39:f0:45:4d:26:23:41:f8:5b:7b:76:52:ae:9e:aa:aa:
db:f5:4a:9d:ba:6c:1a:c4:fe:0c:e4:ab:f2:c1:ad:d1:89:fd:
d0:46:95:dd:f8:5c:be:61:67:b7:c4:12:69:d1:80:ab:5a:74:
e9:c5:29:e1:34:61:f2:3f:96:0f:00:bb:10:c7:12:b8:e8:96:
89:85:52:53:51:76:96:57:85:8d:ed:c9:aa:7d:27:3f:e8:19:
9a:16:0e:3d:5d:71:80:d3:8c:e7:c5:8f:f0:cc:78:87:33:bf:
20:1b:5e:0d:5c:d9:47:85:29:36:e0:d1:4c:c8:fd:e6:a1:be:
03:7d:6a:e4:f2:4c:59:8e:d6:9b:8d:99:e5:45:ee:76:22:8c:
a2:e0:59:26:c8:b4:10:a7:b4:1e:f0:8f:9b:db:d7:83:3f:26:
c4:e2:32:80:a6:3b:c0:b4:5f:59:c1:9a:bf:4c:3d:9e:ed:1f:
f4:39:7c:27:24:b4:fc:05:47:b6:ba:47:25:7a:f7:bd:94:46:
b0:bc:f2:bd:3e:1c:c6:d3:d6:46:03:78:90:c2:76:83:58:22:
62:29:46:3e:98:e0:bc:f2:89:36:18:ce:4f:1b:63:54:0e:e3:
4e:9a:db:85:2f:d4:3c:1a:13:98:a5:12:1e:10:e2:bf:e5:32:
b5:1a:6b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:29:32 2026 by rpki-client