Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: 29VQb3TTOhMQsiUe3bUJABxbMKZV4rY7ue/Cp9x5ZAg=
Subject key identifier: 27:78:B7:19:29:14:BF:46:07:6E:83:99:1F:EA:B1:4B:99:4B:16:07
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 019E1DFE6FED992B67C0605E5CF6C9CA9AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 096D
Signing time: Tue 12 May 2026 21:01:14 +0000
Manifest this update: Tue 12 May 2026 21:01:14 +0000
Manifest next update: Wed 13 May 2026 21:01:14 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: mom2Aaf9mQyrxFsFfDg5gL7oL3NlKqVeJjFrLSQPJys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:6f:ed:99:2b:67:c0:60:5e:5c:f6:c9:ca:9a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: May 12 21:01:14 2026 GMT
Not After : May 13 21:01:14 2026 GMT
Subject: CN=2778b7192914bf46076e83991feab14b994b1607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:31:0b:a9:ef:2e:54:63:8f:32:59:82:35:
b7:3d:a1:c4:5b:c9:ec:24:65:e7:6e:58:96:29:a6:
85:76:80:16:0b:d6:4b:96:e2:40:ce:b1:51:9e:2b:
90:84:9e:8c:4f:90:eb:95:f5:a1:8c:9f:c2:a8:2e:
a3:7a:d5:52:b1:4b:0e:91:63:d6:50:93:65:47:9e:
b1:ac:f2:29:38:d9:36:6e:86:3b:14:7f:51:13:45:
ef:a0:3d:36:fb:a7:1b:05:59:cd:eb:a8:e4:25:e5:
85:56:c1:58:30:92:f9:56:2a:7e:57:c9:76:b9:38:
01:3d:11:ad:ba:0a:6f:13:88:13:2b:8c:0c:c9:7a:
60:dd:aa:11:17:8f:06:0c:f5:29:4d:e2:50:34:e1:
4b:5c:05:bf:09:a8:7b:7c:e9:07:d7:9a:34:fd:c4:
ba:fd:3c:7b:e7:ac:2e:3c:c6:23:c9:d6:58:52:09:
52:e9:fa:e6:79:42:f8:fc:4c:0b:34:4a:a5:8a:00:
12:b8:52:0f:29:04:59:fe:04:7b:b9:d4:18:84:1c:
f2:11:f4:0c:48:3e:53:48:67:6f:16:6b:80:43:66:
e1:63:84:d6:48:b2:41:ee:56:5d:41:77:ff:85:6d:
85:d2:b7:9f:bf:24:4d:b8:8a:78:85:4c:0c:ff:60:
3c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:78:B7:19:29:14:BF:46:07:6E:83:99:1F:EA:B1:4B:99:4B:16:07
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5e:00:85:c9:52:4d:7b:c3:4e:a1:3f:0e:f8:eb:7e:64:e5:
ef:5e:71:17:a1:5f:a1:ae:19:a3:08:55:9f:38:c1:1a:f0:a3:
9b:1f:bd:ff:0c:f4:b1:0e:1f:8a:00:3f:a9:24:14:0a:a3:29:
eb:2d:db:94:16:60:33:a2:1f:77:08:a2:e1:ad:a1:2c:80:7a:
27:f8:b2:99:b2:0a:35:33:ff:6c:8a:55:e4:1a:44:99:d1:1b:
55:8c:fa:45:09:19:4c:26:94:59:6b:47:ce:fa:4b:3b:04:da:
7b:a4:fc:e6:f5:0f:d5:4e:cf:e8:b8:81:49:1b:fb:6e:03:21:
ae:82:4b:51:5b:8e:05:b5:cb:1c:6f:39:cd:d0:0a:e1:28:0d:
f8:c9:3b:84:c9:e7:11:93:ee:7a:46:ad:48:2d:44:a0:38:fc:
81:af:bb:b8:1f:18:71:4a:e9:71:bf:ef:d0:12:8c:e1:eb:23:
84:05:09:a3:83:0c:69:b1:17:30:37:78:d7:59:bd:59:90:4b:
8e:4d:58:a6:21:1f:e5:15:7e:5f:34:e4:e5:e2:4d:35:eb:de:
25:37:84:14:90:dc:53:1d:e3:54:e2:41:bb:2d:0a:97:74:2e:
56:cb:d8:19:58:95:21:c6:1a:ab:8e:4c:45:01:78:39:10:4e:
d8:86:2d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:02:00 2026 by rpki-client