Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
File: 9vSDrNiLUfXUf1d_EBtUV3heDts.mft (raw, json)
Hash identifier: tgCVl/4PmbJtUUdLw2rMSKqka/j8jDoo8yYm/ezoO3c=
Subject key identifier: 36:CB:6A:72:5D:0E:7F:16:F2:7A:64:A4:17:90:3F:C8:5A:8F:55:CD
Authority key identifier: F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB
Certificate issuer: /CN=f6f483acd88b51f5d47f577f101b5457785e0edb
Certificate serial: 019E1CB506BE2F68007830E5E3EE6C4479E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
Manifest number: 0147
Signing time: Tue 12 May 2026 15:01:26 +0000
Manifest this update: Tue 12 May 2026 15:01:26 +0000
Manifest next update: Wed 13 May 2026 15:01:26 +0000
Files and hashes: 1: 9vSDrNiLUfXUf1d_EBtUV3heDts.crl (hash: 5UaaeWrvkx4QkwNKWAX9uqgQeu4eY+xJ+8tbi5S/t3E=)
2: h9dclcnj73gGMmqKRNemWaDpAK4.roa (hash: mJuahx80L+X55SPmqYQeNyVRCkJnTbE2MlO0Pta3IEU=)
3: tTIiXNFmVwT5T0hHiGKIodMu4-0.roa (hash: 1Yst/9/lTuLJaVKmnwJPraD68CwcsXf9gsuFNgo7ggI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:06:be:2f:68:00:78:30:e5:e3:ee:6c:44:79:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f483acd88b51f5d47f577f101b5457785e0edb
Validity
Not Before: May 12 15:01:26 2026 GMT
Not After : May 13 15:01:26 2026 GMT
Subject: CN=36cb6a725d0e7f16f27a64a417903fc85a8f55cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:00:ce:91:dc:c5:d7:69:b5:f9:5b:c5:67:a4:
d0:89:6a:d6:73:d1:6b:8c:a2:e7:58:47:e6:03:43:
66:cd:94:86:38:60:ee:c6:70:3c:3f:c6:b3:57:f5:
b4:2b:08:f5:22:3b:3f:9c:60:bc:e9:64:12:f3:56:
d6:c0:4c:a4:c8:81:ef:1c:90:6e:41:4a:75:a5:ac:
bc:3e:a1:40:89:12:fc:f3:d6:9c:78:48:36:28:55:
1e:61:74:8a:71:8f:d7:5c:4c:91:03:5a:b0:ec:15:
52:c5:19:5c:36:ef:7e:54:57:0b:44:29:b2:ec:c9:
bc:ac:45:8d:fc:96:3b:ca:bc:b6:9a:9c:41:a1:10:
95:e9:65:e4:bb:58:9f:b0:85:cf:27:3a:a2:64:d8:
eb:2d:db:f8:f1:74:82:72:7b:5b:d5:dd:14:6e:31:
f8:0e:b8:62:2d:92:a4:a0:9a:32:65:01:b4:1d:d9:
8e:5c:90:9e:63:97:4a:8e:f0:e4:64:ae:52:b0:eb:
1d:bc:41:3a:b9:e5:48:6e:f3:ac:99:c0:d1:fb:a4:
de:39:8c:e1:fc:1c:dc:56:45:a8:61:82:5e:be:d3:
36:e8:0c:e4:88:85:85:fd:4c:3c:42:1c:39:fd:57:
2e:59:03:0a:18:9a:9f:8c:02:1b:e0:4b:cb:ab:35:
c8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CB:6A:72:5D:0E:7F:16:F2:7A:64:A4:17:90:3F:C8:5A:8F:55:CD
X509v3 Authority Key Identifier:
keyid:F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:eb:5f:b1:42:56:f7:66:f2:86:e6:7d:45:8d:87:7e:d2:45:
f0:9f:99:d3:e0:c4:5d:fc:bf:7e:a0:5c:d3:c9:eb:f5:73:c4:
c6:8f:65:4c:fb:2f:bc:b1:36:48:7c:87:47:6d:7e:48:59:33:
78:85:00:24:6e:21:61:3b:07:dc:a0:2a:ca:d8:ae:fd:e9:f9:
29:0f:16:a9:9d:c2:c9:64:76:d7:ba:3b:98:82:8c:88:bb:12:
06:88:dd:b9:e0:57:96:7c:52:35:6b:fb:db:8f:f0:ec:15:d2:
9e:7a:8c:79:fd:3a:ab:79:0a:bc:be:22:75:a7:db:d2:ce:5e:
ef:ac:2b:5b:fc:3e:eb:92:2a:57:35:8a:5e:87:0d:da:08:b6:
0a:56:2c:a2:5d:5e:11:e9:b7:44:22:b4:87:0d:5c:d6:85:e5:
83:1e:38:b9:48:22:82:a3:f0:e4:f5:81:a4:4a:c3:ba:f5:5d:
a3:52:84:68:a9:df:1f:85:70:ad:53:1c:ee:2f:8c:6a:a7:02:
25:e2:eb:53:49:0b:70:21:58:3e:f4:76:ea:ed:6b:81:ab:1d:
38:06:dc:c4:32:d4:9b:64:b7:a4:dd:7c:cc:cf:55:19:fb:80:
fd:86:56:86:a8:40:7c:1f:a8:79:80:ba:96:6a:f7:0d:a7:99:
63:ef:00:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:23 2026 by rpki-client