Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
File: 9q9DOXTfNztwq9drE-HHDHdfVUs.mft (raw, json)
Hash identifier: Nr6ZYtiVieNLuEaRfQuWrLzQu91U/w2Fi/LtbxwYSMY=
Subject key identifier: 5B:48:96:22:8A:BA:66:C2:F9:2B:63:96:A4:79:70:7A:93:04:E7:06
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 019E1D22A34E34D593B93F5D9F8F7A4044A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
Manifest number: 11B0
Signing time: Tue 12 May 2026 17:01:09 +0000
Manifest this update: Tue 12 May 2026 17:01:09 +0000
Manifest next update: Wed 13 May 2026 17:01:09 +0000
Files and hashes: 1: 4xcI6-ajxKmP_Ug4IMIxPvlGv34.roa (hash: xrDvVgzmOi/0saXzoSAdi3kdTTIHSg71KS5FPmg6F+8=)
2: 9q9DOXTfNztwq9drE-HHDHdfVUs.crl (hash: YWtdxi1Dejd2giEZG+IXA3FIfJbH3g4b5wtwrjhX5Ic=)
3: FDQzyl-rmR6oM8fvayGaAbR8jXM.roa (hash: om6dO1jietNjIahTo0heBTOJARVlUpLyjegJk+RlSrc=)
4: UQeZhixfXf_YkfYGyO2Lf14Z6_s.roa (hash: eKAIar7WRAnNke9Qfa+HTZNykSJ9iONQr3Jz7CFyN/A=)
5: W-WRMUisoYffopeZka-JuQ9lRDE.asa (hash: ryCAMnvwf0Fvzg8WAkss+7OL5+phrb+J8sGIzFaGz9k=)
6: XBmkVeuFRD2uueboTgIjRhoEQuE.roa (hash: v9V72yDsw7P8I61J+zB2Rok+f/g1fiD48qiwYR7onlg=)
7: iRdgIX5OxjNM1yQqzGrI-IlFYWU.roa (hash: o1VCuPGQGLom0fvLJJYHwM1EdofsHXcxsnsAuKlYpn4=)
8: rVAZAeOQDvwPVh2Fwei2q2CF_Qg.roa (hash: XaxWalW01B0ra8JXzNNUG2fuhXDskHxvyOQTCE4WGSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:a3:4e:34:d5:93:b9:3f:5d:9f:8f:7a:40:44:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: May 12 17:01:09 2026 GMT
Not After : May 13 17:01:09 2026 GMT
Subject: CN=5b4896228aba66c2f92b6396a479707a9304e706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:83:cf:21:2a:7e:56:d6:dd:ec:b7:52:3e:
af:22:7c:64:f6:de:bd:a0:c5:16:43:e5:5b:7f:1b:
3a:66:81:8f:67:b9:21:0f:1f:1f:d7:bb:05:c6:9a:
1a:e9:39:87:19:80:ef:a9:f4:58:b9:d8:9d:7f:14:
bb:43:5a:4e:6a:78:1f:1e:49:c6:57:aa:c6:a3:f6:
36:9e:7e:77:c6:96:b1:9d:cc:54:b3:fe:38:eb:a5:
6d:5a:31:69:94:85:0e:7d:89:05:f9:30:2e:35:9b:
9f:3a:ae:78:da:06:60:bf:24:8b:5e:09:27:b4:eb:
0c:2b:d6:e4:2f:88:03:c9:52:94:99:11:52:8f:ec:
29:77:cf:d0:fe:72:7c:c2:c5:c6:f8:73:18:35:c5:
9d:3c:45:ee:3b:12:38:2c:48:46:ea:b5:d4:a1:39:
7f:96:f5:0b:86:77:e9:df:26:e0:73:6b:50:00:f2:
38:c7:fb:ab:34:b1:da:8f:35:ad:5b:f1:72:34:1f:
8c:f3:45:00:ca:41:aa:fb:89:96:25:01:d2:19:18:
f7:55:0c:7d:24:fa:34:bb:d6:7e:2a:1e:18:1a:59:
61:01:12:fa:d5:3e:27:cd:5a:1e:75:14:45:0d:51:
21:4b:da:87:07:3a:e6:04:1b:9f:73:99:94:01:5f:
a0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:48:96:22:8A:BA:66:C2:F9:2B:63:96:A4:79:70:7A:93:04:E7:06
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:13:d6:52:a3:df:42:ff:51:9c:3d:43:5c:62:d4:71:a9:a0:
82:13:f8:f0:81:78:44:e4:f2:ba:1c:3e:b6:a0:d4:72:7d:08:
09:ad:cc:68:de:57:6d:03:34:f4:64:42:68:83:66:ae:ed:cf:
ba:97:a2:52:ff:03:15:d4:7b:b7:05:68:3b:db:b5:ce:99:57:
9e:7e:82:3e:5b:c5:a7:e7:a9:eb:7c:08:24:c2:dd:da:4b:3c:
36:35:13:fb:17:a3:98:fa:07:64:75:3a:84:d6:62:42:25:f2:
9f:f6:11:79:7c:76:cc:d2:66:3e:14:08:94:e3:f6:09:93:b9:
13:15:8a:14:7c:d4:72:10:9e:c8:97:92:fa:ff:55:4f:9d:f9:
3f:27:07:01:e3:c4:6e:8a:09:af:e9:f8:c5:53:4c:3d:a1:31:
0a:fa:db:f2:f0:26:c0:05:6c:1b:dd:94:7b:08:f3:e2:de:3a:
86:f6:ec:0b:50:f5:3f:ce:16:73:6c:51:6b:5e:c4:68:82:93:
2d:7c:c4:2d:b2:23:20:da:78:7d:07:fe:9a:b0:f8:e8:6e:2e:
8b:06:98:55:f8:5f:0d:06:8e:a1:87:db:6a:6b:83:f1:6b:5f:
24:3d:c3:de:2c:25:76:99:e2:0b:7b:52:bd:91:0c:88:40:e2:
ac:06:d6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:00:40 2026 by rpki-client