Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier: f3oeNnf3a3CC3LUSmOLNqbzI2CrNOqMDr4qdi9ib5mo=
Subject key identifier: 2E:E7:8A:89:67:49:52:66:1B:1F:C5:D1:37:71:EE:0A:2C:41:C6:BD
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 019E1CB56D377ABC04EDC77E7551A74CED09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number: 14F1
Signing time: Tue 12 May 2026 15:01:52 +0000
Manifest this update: Tue 12 May 2026 15:01:52 +0000
Manifest next update: Wed 13 May 2026 15:01:52 +0000
Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: /SsDQmxjiHiA7GOagDVzEO2RetYyJpzlcbjcb5tXHjU=)
2: YlUOJaq43NpuLvhyIjdUpjtIh5k.roa (hash: CQMT/ddbiL7hLzG2QkDs7berkHQrguNEVB/e2zlXUlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:6d:37:7a:bc:04:ed:c7:7e:75:51:a7:4c:ed:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: May 12 15:01:52 2026 GMT
Not After : May 13 15:01:52 2026 GMT
Subject: CN=2ee78a89674952661b1fc5d13771ee0a2c41c6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:42:ec:b7:8c:91:65:21:9f:b9:94:fc:24:
cb:75:32:09:d7:c5:46:0a:8e:09:75:74:f0:ef:e7:
92:19:c4:cf:1c:ce:43:49:57:2f:6d:d1:2c:49:34:
7a:7f:1d:e5:00:58:8a:ef:71:7e:ab:3d:7d:0b:55:
c4:cf:be:a1:56:5f:98:a9:11:0a:35:e0:55:55:d8:
b1:12:19:23:e9:3e:99:94:96:a4:3e:37:0d:c4:a4:
14:64:47:a0:03:36:b3:e9:51:76:56:e8:2b:59:5c:
b3:b9:dd:0e:bc:1d:48:3a:15:bd:81:a1:d4:7e:fa:
8f:c4:6b:33:42:66:5c:2a:cf:42:e4:a4:4c:11:ef:
3b:8c:19:d3:01:f6:6c:22:e8:7f:af:7f:00:c2:8f:
5b:d1:f0:f6:a1:48:0c:db:c5:fa:40:1c:e6:0b:f2:
cf:ff:28:5d:ca:08:f3:dc:a0:0d:08:db:1f:32:9b:
8f:49:28:4d:20:84:d0:f9:97:98:10:f1:9f:b3:77:
fa:04:17:0d:39:5b:da:72:24:e9:c8:ed:a4:13:59:
0e:16:ba:ab:90:25:10:43:f6:b1:c2:9e:23:4c:ed:
a7:cf:73:fc:d4:cf:34:1e:c7:2c:93:b3:a1:0d:fe:
c0:90:09:e4:91:7d:3c:72:a9:c7:d6:bb:81:88:15:
ec:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E7:8A:89:67:49:52:66:1B:1F:C5:D1:37:71:EE:0A:2C:41:C6:BD
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:88:66:9a:ad:4b:6f:ce:af:1a:46:f8:9a:f4:cb:cb:ec:1c:
f4:bd:3c:95:71:8d:99:65:58:8f:39:d0:49:02:c1:a9:e7:16:
2d:04:96:5a:cc:be:f4:ef:b4:d8:03:df:41:67:3e:c9:74:0f:
75:fb:d4:3a:58:35:29:7c:23:48:07:32:d4:88:3d:05:72:ee:
75:a1:17:af:10:03:48:9b:a3:be:ec:86:bf:4b:18:f2:06:3e:
9b:9f:9d:4f:a2:2f:7a:58:8a:c7:92:54:92:f3:f1:0f:27:1d:
1d:d2:a8:3b:ae:be:df:8d:d5:62:25:f9:e6:7f:e1:61:21:9a:
4c:a8:b7:c3:44:34:4e:7a:ab:cc:68:87:09:df:d0:5f:86:03:
31:92:39:22:e0:ad:2b:44:11:cf:f8:6c:09:6a:5b:25:7a:8c:
46:64:9a:d1:35:43:87:70:26:a8:ed:e2:32:78:61:78:20:b0:
ff:47:6a:ec:d8:86:88:27:1e:8b:0d:1f:04:5b:10:e4:1c:41:
a4:8d:3e:39:04:af:05:44:5c:b0:29:50:8f:29:1d:cc:17:9f:
37:87:d5:ee:23:ce:4d:e7:2b:21:a4:aa:61:a9:9b:88:78:59:
20:1c:a0:72:82:fe:ba:53:8f:89:50:f4:19:96:ba:86:3b:af:
d3:f1:87:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:03 2026 by rpki-client