Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
File: 9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft (raw, json)
Hash identifier: ZmVo5JiZ52tQ/9vwM4M7gXRijohIXs/x8zXgj9Rm4ss=
Subject key identifier: 8D:70:11:B0:DA:E6:20:80:01:FA:97:08:EA:CE:9B:8C:48:4C:47:39
Authority key identifier: F4:B2:51:1F:B0:74:F5:E1:65:85:35:BA:46:1E:45:80:DB:D8:41:37
Certificate issuer: /CN=f4b2511fb074f5e1658535ba461e4580dbd84137
Certificate serial: 019E1CEBD260D13705B8B1A91D0EEB9D5671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
Manifest number: 0142
Signing time: Tue 12 May 2026 16:01:17 +0000
Manifest this update: Tue 12 May 2026 16:01:17 +0000
Manifest next update: Wed 13 May 2026 16:01:17 +0000
Files and hashes: 1: 9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl (hash: HUUSDStQbM+omqODnihFKXvXcECJC/R/qG1neNQrKGA=)
2: w4OPW1w1cwaWMj4uXqpkKkiEaKk.roa (hash: jUe+lcC4F+1K+YbOo4TiwqXw96cjr2eJwGRjPOVvNjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:d2:60:d1:37:05:b8:b1:a9:1d:0e:eb:9d:56:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b2511fb074f5e1658535ba461e4580dbd84137
Validity
Not Before: May 12 16:01:17 2026 GMT
Not After : May 13 16:01:17 2026 GMT
Subject: CN=8d7011b0dae6208001fa9708eace9b8c484c4739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:17:49:3e:86:43:f3:8a:9c:11:bd:34:3a:c2:
5a:b9:8d:9a:e1:67:c0:f6:84:0b:e8:7f:62:58:6a:
3c:56:72:55:09:8f:02:c7:d1:30:14:97:d4:fe:71:
c1:d4:a5:cf:3e:3a:2f:58:44:4b:4b:56:1b:36:f8:
72:6c:ab:64:66:22:07:ae:8d:ee:bc:f3:ac:6b:1f:
87:ca:59:ff:38:1b:36:85:87:b9:4a:da:c4:ab:44:
5a:ef:eb:d8:26:f5:08:8d:48:df:dd:a2:a8:bc:cd:
7e:13:10:c5:7c:c0:2d:ac:fc:23:0a:61:1b:10:6f:
c4:3b:e2:50:7d:c6:aa:bc:83:39:2e:a6:50:d4:4a:
20:32:02:c5:47:f9:6b:3b:f0:eb:7c:b2:bf:a2:de:
01:04:1a:ae:bb:60:e2:d7:9a:22:25:f9:c7:db:9f:
3b:a5:5c:18:a0:71:c3:23:79:c3:4b:29:68:46:5f:
ed:34:94:be:33:ea:3a:87:a9:66:c8:59:66:c1:bf:
4e:f6:10:60:db:10:da:3f:99:00:a3:2c:dc:26:80:
d5:0a:27:a4:51:c3:cb:70:fc:6d:5c:0c:1d:21:b4:
f4:d6:f6:27:4b:15:b3:23:e0:41:40:b6:b5:fc:b9:
40:60:f8:e0:39:42:ae:f2:ce:f7:5b:97:2b:a3:a5:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:70:11:B0:DA:E6:20:80:01:FA:97:08:EA:CE:9B:8C:48:4C:47:39
X509v3 Authority Key Identifier:
keyid:F4:B2:51:1F:B0:74:F5:E1:65:85:35:BA:46:1E:45:80:DB:D8:41:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:41:4f:9e:76:05:ea:d4:f7:2c:da:5c:ad:93:71:0a:07:d6:
40:fa:20:a1:91:8b:1f:24:06:95:f8:1e:b6:30:4b:67:65:fe:
42:32:5b:6c:09:7e:a0:03:25:43:00:3b:72:a0:f7:7d:05:74:
0d:71:d7:9d:d7:6f:42:ed:21:7a:7f:ec:ed:33:f7:bd:e2:17:
44:9d:2a:26:01:01:09:6e:6c:dc:05:c9:63:e8:0a:8b:24:3c:
c2:73:4b:2a:f5:e3:fd:fa:52:72:6c:5f:f0:05:f8:57:f8:86:
11:c6:ff:3b:ea:8b:d0:4c:0e:24:c9:1a:7b:87:3b:cf:d4:8e:
d1:b1:34:5a:34:ba:60:9b:2b:de:7f:0d:76:a2:4c:48:63:b6:
c0:40:62:61:0d:d8:85:4f:18:4a:c5:47:7e:b5:fe:dc:d4:a9:
ce:df:b4:db:50:7c:e8:14:e7:be:24:40:90:b4:a2:28:c3:a9:
c7:98:04:79:a3:fb:fd:04:d9:4a:09:3e:bc:97:c7:85:00:8f:
83:39:fb:15:32:6e:a1:31:1a:d3:9c:79:6e:59:12:cf:ae:7e:
48:26:16:7d:6b:d1:fe:1b:85:42:36:6e:2b:6d:5d:3b:82:75:
b9:7e:4f:de:d8:6a:8d:4a:f6:c1:8f:0d:bf:b0:70:5c:fc:ac:
30:2a:0c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:39 2026 by rpki-client