Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
File: 9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json)
Hash identifier: Sq9pWCNU2DFhCFEBtqIDDOEMPUM4awec7htAqtvSJ08=
Subject key identifier: E2:AF:7F:F3:76:08:BE:F4:EE:35:BC:6C:75:51:89:F8:7C:59:C5:52
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial: 019E1D22FC92F8012374FEDE0A5B9AE63C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 17:01:32 +0000
Manifest this update: Tue 12 May 2026 17:01:32 +0000
Manifest next update: Wed 13 May 2026 17:01:32 +0000
Files and hashes: 1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: kH/TBykMCtfXXLctrv1wLtcf1I0N8DfyZtjDfYT1QBU=)
2: pY5anUcF6nGQjRStvwUsfXfpPT4.roa (hash: ikRAmfOVAxrB8DLsnpaLa+mv7owmfzH47WnehifEhhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:fc:92:f8:01:23:74:fe:de:0a:5b:9a:e6:3c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Validity
Not Before: May 12 17:01:32 2026 GMT
Not After : May 13 17:01:32 2026 GMT
Subject: CN=e2af7ff37608bef4ee35bc6c755189f87c59c552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:05:49:96:6c:8a:9f:28:be:98:fd:d5:35:bf:
8e:1a:53:41:88:64:2a:93:97:2e:b5:5f:d2:f7:02:
32:a4:f0:cb:96:44:0e:c6:a1:0f:38:a7:88:ff:a7:
48:8f:79:ae:0a:b3:63:ca:77:de:2d:ae:30:d2:ab:
6c:17:78:4c:6c:28:64:ae:66:f8:54:5a:0c:c0:7c:
e5:a4:35:48:21:bf:ee:fb:62:09:15:aa:00:d3:c9:
3a:a9:7f:c5:a7:c1:1d:c0:90:8a:00:b0:8b:a2:40:
89:eb:1a:8a:49:22:fb:04:9d:97:b2:e8:fc:53:7a:
b3:ef:aa:1d:d5:82:46:c6:f2:98:12:d4:14:72:28:
7a:58:b6:fe:66:fa:4d:e5:e1:82:ad:13:2c:9b:6a:
7d:e0:d7:ab:47:85:47:3d:97:51:7d:46:e1:dc:d8:
8c:91:63:7c:6a:a5:00:9a:52:1e:74:47:1b:e3:de:
2a:4d:95:0f:58:ff:dd:1f:b2:6f:8d:60:bc:ad:ce:
15:15:29:62:aa:f4:c2:12:b7:7f:f5:1b:dd:7f:dc:
d0:b2:6a:47:88:3b:22:5d:67:e8:8e:56:6c:ab:46:
b0:68:bd:89:66:ef:55:bf:5e:5f:a1:07:b2:29:7a:
88:c1:83:9d:87:df:f9:f5:58:ba:7e:f6:20:ea:a4:
21:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AF:7F:F3:76:08:BE:F4:EE:35:BC:6C:75:51:89:F8:7C:59:C5:52
X509v3 Authority Key Identifier:
keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9d:88:8b:bf:eb:89:f4:2d:e4:b9:b4:06:f6:b7:a5:02:0e:
d0:fc:45:10:ea:3c:ba:1a:03:bb:b1:d6:bf:68:03:8e:09:27:
2f:18:39:dd:2d:2f:3d:30:d0:2d:ad:37:fd:23:6f:77:d2:fe:
85:98:44:a4:c0:47:79:1f:97:fa:14:7d:46:e4:b4:b6:35:a8:
e6:97:df:4a:6d:2f:74:d1:2d:07:7e:e6:0b:ae:65:8b:2e:ad:
90:4d:4b:a9:5d:4d:df:67:03:95:5a:c7:3e:52:6a:aa:94:d9:
c9:b4:4b:a3:84:1d:6e:de:cf:31:4d:83:59:a6:8a:1a:3f:35:
8f:67:c2:f7:1f:d9:d3:3d:8e:6d:bd:28:8d:b8:87:d2:dc:f6:
67:8d:39:ca:0c:3f:07:2e:40:d9:2a:39:4c:fb:c4:f1:3c:bf:
37:da:d7:d8:96:f4:41:1a:85:ff:36:ca:e5:f3:05:c8:da:c7:
5b:57:4e:59:10:49:71:0b:12:d5:fc:f6:f4:50:a0:44:68:e7:
d5:cb:70:be:15:65:15:a5:21:83:31:cc:8b:4a:43:5b:54:43:
38:0f:17:24:63:14:41:61:3a:93:91:dd:ef:7f:29:47:21:d1:
de:b2:59:84:96:ce:7c:fc:79:13:3c:2f:48:e8:ab:7a:94:6c:
e1:ad:0e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:24 2026 by rpki-client