Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: AzAvjm+g42xNfo/89H9SHYrcpkggTNdpRwkrF+b6M38=
Subject key identifier: 67:39:DF:BB:73:D1:CE:EF:60:E2:4F:A7:CF:09:DE:DF:7C:DA:27:27
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 019E1CEBF5B2753E2B08899148044F397616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 16:01:26 +0000
Manifest this update: Tue 12 May 2026 16:01:26 +0000
Manifest next update: Wed 13 May 2026 16:01:26 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: B2cdv+9pgcAv4U6PNt2uNBfxgM0HgH5OuK+Fb+qp8Bs=)
2: BqRJvB_nPRiPWuTGUs43OFgE1cg.roa (hash: CouaUfaCJlCnH6IGbuUpQJc4a6XZQ+ovYHzWhnqUp88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:f5:b2:75:3e:2b:08:89:91:48:04:4f:39:76:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: May 12 16:01:26 2026 GMT
Not After : May 13 16:01:26 2026 GMT
Subject: CN=6739dfbb73d1ceef60e24fa7cf09dedf7cda2727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:c8:72:4e:a5:96:9d:62:aa:21:b0:11:20:
75:36:44:18:f3:78:49:1c:94:ed:aa:00:f8:4e:0b:
ec:45:8c:cd:29:d4:a5:3f:92:14:27:cb:ef:8b:a2:
fd:77:16:c8:c1:12:e9:61:ec:a7:6a:bd:f4:ee:c1:
c0:74:c8:4a:a2:e6:aa:ba:c3:ed:2e:58:15:32:21:
c8:f9:ba:00:7a:33:4a:15:bb:f4:5d:ec:81:b6:da:
6b:78:b9:9f:1b:8a:6c:98:1d:e0:42:b5:f3:00:0a:
73:d9:57:3a:7d:65:6e:2e:ee:6f:86:c1:85:1f:4a:
e7:f5:b6:f1:4f:47:a7:01:1f:e9:5d:92:2e:47:9b:
58:75:1b:2b:80:25:22:2c:5c:ed:01:52:88:ef:f8:
a6:a7:de:ad:59:d7:22:aa:2d:e5:fa:fc:9c:1a:87:
26:23:2d:9d:e1:24:32:f7:ee:60:80:ed:15:a8:31:
9a:2d:17:53:12:22:a0:ce:ba:15:1e:75:63:d0:b0:
54:9b:31:f5:15:c6:df:23:df:18:1f:70:bd:3c:2f:
50:f4:d8:33:5d:e2:f9:e0:9c:7e:49:38:ad:e7:aa:
fc:94:da:85:97:0f:1f:9e:0e:19:cd:a4:02:d0:27:
e6:f2:c9:f7:bd:22:6a:10:d8:a0:d4:ba:64:24:3b:
fc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:39:DF:BB:73:D1:CE:EF:60:E2:4F:A7:CF:09:DE:DF:7C:DA:27:27
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:99:af:14:3f:3d:69:c4:1a:4e:4e:6d:0a:ba:10:bc:af:60:
2e:7c:0a:23:42:90:ad:55:7f:29:37:3e:c7:a2:dd:3a:8a:ca:
a6:01:86:cb:36:57:9a:ee:97:a6:be:31:3c:bd:90:55:8a:6c:
c5:70:10:8f:4f:2f:7e:31:91:aa:ee:8f:5e:a7:b3:d5:cc:25:
66:25:f6:72:14:a6:d7:7c:b2:1d:fe:d0:9f:0e:27:5f:95:ba:
c8:1f:21:78:8f:0b:64:7b:43:1d:37:fe:74:9a:9f:68:0a:5d:
1c:9e:64:4b:46:9e:46:08:0c:d3:44:1a:5f:18:69:c5:48:fb:
59:32:b2:81:9a:41:2a:ba:79:70:9b:88:a0:e1:42:2b:f8:6a:
d6:ca:34:89:9d:a3:69:5f:ad:74:20:39:72:a0:62:37:b1:ae:
4f:9e:fd:99:0e:a8:cd:9c:d8:75:89:81:fb:1d:0a:60:f9:41:
70:eb:0c:46:ed:5f:26:d1:9d:8d:aa:7e:08:a5:7b:e1:d5:08:
e7:e3:16:a6:55:1c:5c:c3:0a:11:22:fd:07:47:f7:79:69:74:
2d:61:67:f2:8f:30:9e:9b:c0:e8:06:f9:ae:14:85:a4:1e:1b:
3e:da:94:8d:73:8f:3e:73:1a:37:c4:7e:98:bf:8d:77:4e:6d:
66:a4:1d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:23 2026 by rpki-client