Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
File: 9yjCKwJQJ1-m63NLoA55D343pVA.mft (raw, json)
Hash identifier: yOqogO828vkeYT5NEOLsQYfLqp7tSnYEYfIb6yqSqas=
Subject key identifier: 22:B6:38:EE:98:3C:B1:F6:EC:92:7F:32:B5:EB:69:ED:D2:F2:C0:84
Authority key identifier: F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
Certificate issuer: /CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Certificate serial: 019E1E353BD8DD53875257550E4EFADD47E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
Manifest number: 0C33
Signing time: Tue 12 May 2026 22:01:05 +0000
Manifest this update: Tue 12 May 2026 22:01:05 +0000
Manifest next update: Wed 13 May 2026 22:01:05 +0000
Files and hashes: 1: 9yjCKwJQJ1-m63NLoA55D343pVA.crl (hash: HPniDtb2kLCsTbQ4pMapvwl7qxl6nTpEc0CzhmczL/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:3b:d8:dd:53:87:52:57:55:0e:4e:fa:dd:47:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Validity
Not Before: May 12 22:01:05 2026 GMT
Not After : May 13 22:01:05 2026 GMT
Subject: CN=22b638ee983cb1f6ec927f32b5eb69edd2f2c084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:2e:db:22:45:3c:a2:e5:bc:8c:70:da:cd:
26:0b:82:d0:e0:91:2f:96:31:39:28:b2:35:b2:63:
94:a4:ab:48:84:7a:37:ea:5b:82:9a:c8:11:ed:5f:
7b:22:c6:59:f9:41:ef:38:4c:0c:63:1a:5e:d5:82:
16:67:69:59:c4:d5:71:e7:e8:0c:99:1f:bb:18:2b:
95:69:2e:d3:f7:82:08:85:e1:c3:f3:1d:27:42:a7:
23:5e:8f:d7:fd:78:27:e4:87:5b:71:41:7f:ba:22:
05:78:1d:9c:45:32:1c:af:44:54:81:9e:ed:e0:ad:
ef:ee:fb:91:66:63:2c:69:eb:b2:3b:44:7b:26:f6:
fa:23:ae:e7:e9:62:51:8e:47:fe:0f:51:39:7d:b8:
0e:0b:a5:cb:e2:34:ae:a2:d9:c6:24:7a:02:ec:c4:
e4:75:a6:cb:7a:13:f4:24:73:9c:ac:fd:b1:3b:09:
ec:e5:57:08:8c:38:7d:43:94:ca:f2:95:2b:cb:2f:
75:d9:70:4d:ce:3c:93:dc:00:49:5e:a3:63:09:dc:
dd:58:88:18:7f:ec:99:bd:71:40:b6:ff:1f:d2:b3:
7f:3c:4d:b5:b3:b6:fb:1d:3f:0a:f1:bc:75:39:0e:
f8:e0:b4:63:46:03:c9:0e:e7:2d:6e:bc:33:48:52:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B6:38:EE:98:3C:B1:F6:EC:92:7F:32:B5:EB:69:ED:D2:F2:C0:84
X509v3 Authority Key Identifier:
keyid:F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5f:42:c1:91:1d:60:1f:00:bc:c4:4a:d7:15:53:c9:0e:c2:
b6:a7:6d:60:9d:4c:88:79:f5:61:e8:93:41:dc:0c:9c:05:bb:
85:fe:b2:7e:bc:e4:eb:4d:9c:b9:a0:d2:19:47:14:38:d7:65:
fb:7e:ef:29:90:86:f8:b3:66:e4:da:45:ff:63:68:4a:cb:3d:
3d:9b:73:af:ce:27:28:7a:f8:f5:66:8f:b3:bb:3a:c8:37:ec:
c3:bf:ec:b4:6f:2d:f8:fd:46:8c:ec:dd:dd:7d:1a:64:8a:41:
e7:69:ef:fe:5d:e5:a1:c3:b9:97:78:d8:a2:48:d7:08:e6:51:
42:f9:ef:61:6e:df:9a:62:af:42:a5:18:a7:9e:ad:7d:2b:fb:
45:eb:75:8f:fd:9d:8b:8b:da:be:9a:7b:38:f2:27:be:f6:01:
75:44:b8:4d:a2:f8:bb:dd:af:86:53:30:7f:4d:d5:11:6c:11:
0f:24:e2:3d:83:61:9e:af:68:60:f6:c1:7a:3e:f2:b6:9a:76:
21:0b:4a:63:84:62:a8:8e:97:26:4c:96:75:30:bc:37:6f:de:
f6:bf:e9:53:a0:bf:eb:30:0d:53:37:47:f5:1c:32:19:42:44:
de:eb:99:74:21:32:5a:e7:ed:17:d2:33:7a:79:18:b6:98:33:
2a:8b:39:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:28:10 2026 by rpki-client