
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
File: 9OcXTG90-poisK3uJRqNZDEjE_I.mft (raw, json)
Hash identifier: ahJkPJBRaBoQT0qgrHHuJZ85i7rc/xGIRUMWEMdIlPE=
Subject key identifier: 1C:62:27:53:C2:5E:24:34:0E:FD:1F:23:4A:53:D7:E2:70:1F:D3:64
Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Certificate serial: 019E1F7E84CE29115C19D1EFB6420CA082BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
Manifest number: 1898
Signing time: Wed 13 May 2026 04:00:45 +0000
Manifest this update: Wed 13 May 2026 04:00:45 +0000
Manifest next update: Thu 14 May 2026 04:00:45 +0000
Files and hashes: 1: 9OcXTG90-poisK3uJRqNZDEjE_I.crl (hash: gsOQKkv2+xGYahYQ2ef9fHVhHoyH6XTFfsaNZ+LkfOM=)
2: n5-SbGgTWlbW_C1J7zQnQwhdk_I.roa (hash: 20MmpTiNHIRI615LwLOcDmRN7JohlEVDp5KlQ4ApT5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:84:ce:29:11:5c:19:d1:ef:b6:42:0c:a0:82:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Validity
Not Before: May 13 04:00:45 2026 GMT
Not After : May 14 04:00:45 2026 GMT
Subject: CN=1c622753c25e24340efd1f234a53d7e2701fd364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:af:fb:a7:d1:51:15:4a:bb:56:04:cc:28:
80:28:26:c7:4a:4d:5c:5e:7d:72:1e:7d:53:fd:62:
ac:0f:f9:b8:ba:cb:ca:c0:8b:dc:97:30:b8:3c:cd:
05:61:0d:6e:ce:4e:ee:19:6c:f1:2b:ee:ad:98:b7:
61:85:2d:a3:d1:99:23:d8:b4:05:f4:31:7d:c2:3e:
48:9e:c5:b9:de:51:36:a4:05:40:42:dc:eb:72:10:
bf:45:f0:33:9b:56:25:93:8a:13:e0:ad:c6:0d:fc:
fb:8c:c0:60:30:e7:66:6e:8d:14:09:1a:e7:4b:d2:
2f:c4:de:43:91:21:7c:7f:62:16:5b:e9:af:f8:d9:
c8:ab:fb:f8:77:e7:a2:64:11:e1:1e:62:03:fd:ca:
38:24:7b:46:a8:9a:1c:16:e1:a2:99:d8:dd:cb:0a:
f0:ce:b8:64:db:10:4a:d8:82:0c:9e:db:9e:ce:69:
ff:5e:6c:1f:db:24:2b:8c:ef:cd:c3:46:be:3a:66:
5f:ce:5d:c5:8a:f1:eb:ae:85:31:83:f5:ce:b4:57:
17:39:54:9d:13:36:d7:d0:fc:87:33:72:a0:d1:ca:
c7:b1:51:cb:70:b8:5c:bf:fb:d8:ed:dd:9e:7d:6c:
46:b7:1e:ba:c8:be:83:e0:12:a9:1e:55:23:30:fc:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:62:27:53:C2:5E:24:34:0E:FD:1F:23:4A:53:D7:E2:70:1F:D3:64
X509v3 Authority Key Identifier:
keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0e:f6:15:a4:7b:01:00:f5:98:f4:42:c2:66:0f:ee:12:08:
9c:4b:d3:3e:00:ed:38:9f:23:ea:ff:38:e4:ed:6d:9f:38:ce:
0e:d0:7d:9a:b9:2f:4b:51:8b:7d:46:a0:56:41:fa:c2:af:f4:
75:b1:78:c7:3c:02:76:3e:1b:17:28:4f:f8:d1:9e:5c:5e:3f:
8b:14:6f:67:d6:ab:2a:02:c6:a5:c5:33:75:51:64:77:28:81:
0d:e2:7a:3d:e3:5c:7b:ab:7d:37:79:d2:82:66:bc:22:43:0c:
63:1c:e2:f0:f1:fb:1b:a6:bd:e1:10:25:b0:6e:2d:38:54:aa:
25:26:38:5e:71:c8:64:55:04:a4:98:8d:6d:67:d8:59:f5:2c:
0e:bd:22:0d:70:da:fc:1c:b1:51:00:1f:b2:08:f2:51:e0:50:
9a:8e:ba:d2:b0:c9:88:20:9e:8f:0d:db:6a:38:da:fe:81:ec:
8b:a8:8e:72:6b:89:c9:3a:14:e9:a3:49:2d:70:89:c3:c8:d9:
98:32:85:8d:75:30:31:43:58:a1:18:2c:66:b1:bf:16:55:d8:
21:6c:b3:ef:2e:48:ef:a1:fd:b6:18:4a:f0:86:ba:da:24:06:
8f:cc:95:ea:9e:e1:21:e0:66:9b:66:a6:86:ed:db:c0:32:5a:
96:b4:c1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:32 2026 by rpki-client