Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier: 33s7mE2BXZWu4t4oSXAi7064sFcjBvqwFvOQkJlVzL4=
Subject key identifier: 0E:70:99:25:EE:5C:F1:2D:46:13:E9:8E:7A:53:A3:AC:64:6A:D4:AA
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 019E1D90851D046994F69496CD6F0C3497C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 19:01:10 +0000
Manifest this update: Tue 12 May 2026 19:01:10 +0000
Manifest next update: Wed 13 May 2026 19:01:10 +0000
Files and hashes: 1: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: e4LH4AhleF2jqwRo8NNR/lQjrKbDnE2J3ps8YAM8iaI=)
2: NE7pTp4QnaDUGUHHElFTbo-gDG0.roa (hash: r/+SGcFjTDLD6C4xVwjhnpDBi0wwxr0NEt4KOnZIJYg=)
3: p4Ci63x1biX5rkNwdgShagWDKiQ.roa (hash: +XOGwU+R4ACvZpm15Ra20YpWSpLTXsRXodHyyF4EiU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:85:1d:04:69:94:f6:94:96:cd:6f:0c:34:97:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: May 12 19:01:10 2026 GMT
Not After : May 13 19:01:10 2026 GMT
Subject: CN=0e709925ee5cf12d4613e98e7a53a3ac646ad4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:e0:bd:23:b0:6a:3d:de:74:11:8f:8b:29:
d4:d1:52:bc:01:85:31:c5:85:58:da:ef:60:ac:24:
80:fa:30:0f:dd:66:6e:c1:75:7c:dc:9a:8a:9a:e5:
48:91:35:c6:ee:39:7c:46:a3:fe:d5:13:42:05:5c:
21:9d:c0:10:28:c9:cf:8c:6d:b1:c0:8d:55:79:c4:
b0:55:94:b8:3a:cb:93:ea:6d:56:cb:2d:a3:87:52:
ff:16:d2:d3:87:7c:1d:4b:25:53:25:97:1b:de:dd:
0c:3d:22:80:c1:d2:fe:a2:6c:72:e2:5d:5c:17:7e:
20:ab:14:72:92:34:a6:e6:39:fe:20:ac:60:d1:78:
20:fa:b7:ee:43:d2:2e:39:5e:22:32:0d:97:ec:ab:
4f:64:da:1b:e4:84:27:28:47:51:a7:26:ad:49:5c:
61:10:24:34:7a:a9:7b:5a:dd:15:4f:10:72:c2:68:
5e:68:45:62:67:50:c3:26:f1:82:f6:fd:7e:f0:f8:
0a:82:a9:a0:c1:7e:2f:d4:5b:40:24:23:08:f7:47:
73:86:fb:c6:03:04:f2:7b:32:f5:f6:9d:ef:60:2b:
44:47:af:d2:30:ff:80:fe:c8:07:3d:a3:9f:62:95:
a8:b0:f9:2f:24:ac:63:00:87:69:d1:fe:31:0a:28:
bc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:70:99:25:EE:5C:F1:2D:46:13:E9:8E:7A:53:A3:AC:64:6A:D4:AA
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fa:f9:a5:73:95:02:bd:89:fc:62:2a:c4:4e:32:11:d1:29:
c9:0b:3d:db:8b:a8:f1:49:e1:d7:fd:6d:ed:db:59:dc:93:aa:
46:3b:17:04:02:e9:eb:e3:51:e1:50:8c:eb:f4:3a:26:50:71:
7d:b6:8b:20:bb:f9:f1:d8:20:2a:a4:05:5c:d2:8f:a8:b9:90:
c2:56:9d:5d:73:e2:89:44:26:40:60:a8:8d:b2:fc:e0:78:23:
73:a3:06:f9:ea:ad:55:bb:f9:7c:77:8a:b7:1f:04:d3:9b:47:
e1:e6:61:c6:f9:45:ae:d1:05:b0:24:66:11:82:05:16:76:1f:
51:15:e8:72:01:82:ad:cf:7a:1f:0e:c6:8e:50:7d:11:c4:8e:
7f:7e:79:33:b4:31:b4:8e:48:03:4d:20:d5:39:05:16:9b:9d:
c3:3b:6a:62:f4:ff:90:54:86:85:40:0d:5c:b4:51:72:ad:e2:
46:6e:a4:2c:29:59:6c:fa:f9:a5:64:e5:69:c2:bb:57:8d:57:
06:26:2b:05:f8:90:87:23:e4:09:d2:b5:59:81:6f:ca:6d:b2:
ae:07:ca:49:3e:2a:56:23:2e:57:55:9c:2c:0d:59:2d:4b:c1:
34:ae:0c:a0:5b:5a:34:32:6f:3d:4e:9e:3d:7a:ad:7b:80:17:
16:1f:9a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:09 2026 by rpki-client