Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
File: 9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json)
Hash identifier: tLsoie9xgbUzFgvlpyrqN54g31O8VmWSSpYcuu1fi1o=
Subject key identifier: 0A:D7:77:2C:73:07:14:D4:AD:F0:E6:9E:59:0A:5C:1A:56:2A:AE:2D
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Certificate issuer: /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial: 019E1E34F6EED86F7640C7D3FD820BF8A29D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 22:00:48 +0000
Manifest this update: Tue 12 May 2026 22:00:48 +0000
Manifest next update: Wed 13 May 2026 22:00:48 +0000
Files and hashes: 1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: AX81b7PAhZ4XsAfSAMudwQAmbN5VxB6HeuMl+7GFSpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:f6:ee:d8:6f:76:40:c7:d3:fd:82:0b:f8:a2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Validity
Not Before: May 12 22:00:48 2026 GMT
Not After : May 13 22:00:48 2026 GMT
Subject: CN=0ad7772c730714d4adf0e69e590a5c1a562aae2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:96:92:41:6f:90:24:a9:e5:01:6c:72:b5:7b:
ef:bf:6b:81:89:30:68:e9:64:f2:c0:e6:8c:e4:4e:
92:e1:c8:fc:57:56:d4:bb:3b:06:a1:b4:50:9d:b5:
ec:87:15:98:9e:65:28:39:94:8f:1f:c2:65:e7:e0:
61:2b:98:00:cc:47:47:8e:54:4f:c3:00:53:9e:31:
80:1a:ea:f3:98:a1:61:f5:1c:a4:6f:83:ea:52:ce:
13:9a:5c:8e:31:57:e5:b9:f0:bd:ef:9f:0e:43:96:
bc:0f:2e:d1:3f:d4:26:50:11:c9:f6:e1:ae:2e:a6:
a1:09:8b:f2:e9:e4:17:11:16:02:03:da:5c:76:d5:
39:43:29:3c:80:e6:9e:22:a2:c6:24:d9:89:76:ac:
69:ce:e0:c8:6f:d4:10:e0:07:73:d8:4a:f1:28:64:
f7:96:cd:8b:7b:0e:33:be:85:27:bd:e9:25:9e:e9:
cc:27:a8:04:27:75:9b:9e:01:46:7a:c9:1e:5c:25:
85:75:2a:44:69:c6:52:0d:2b:04:f3:44:ee:f8:87:
b0:cb:fb:2d:7d:06:95:14:51:f2:81:e2:fa:40:20:
e6:41:bb:32:ec:a8:61:e3:8f:fa:6f:56:20:94:da:
bb:55:01:9e:11:f7:b8:4d:10:fd:70:70:0c:ad:e5:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D7:77:2C:73:07:14:D4:AD:F0:E6:9E:59:0A:5C:1A:56:2A:AE:2D
X509v3 Authority Key Identifier:
keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:27:2d:81:82:3f:99:4c:6f:c5:d0:d8:fe:f3:12:1d:78:20:
a8:84:87:72:4e:07:cf:d8:d4:91:20:e0:6e:58:22:bb:0e:0f:
0d:3d:28:5f:d8:6c:1c:4b:61:4a:94:ca:85:5d:1d:93:d9:b7:
53:1c:d3:60:e0:0d:db:09:d4:b3:01:c8:77:7b:fc:7f:17:16:
8c:c6:bb:a0:41:11:95:f3:5a:21:2e:a2:dd:2f:e4:8a:26:6e:
de:6e:34:82:17:d9:65:e6:4e:f4:58:bc:da:0e:0a:55:b9:5a:
52:ed:93:95:7e:9c:3b:70:77:fe:d5:09:a8:eb:98:99:f0:15:
88:ca:cf:57:6c:8f:15:46:fa:1b:28:ad:84:ad:4f:c1:a7:3e:
31:80:fc:6b:08:65:ed:10:83:32:0e:f5:15:55:ad:e1:8c:16:
d5:b1:d3:86:70:f7:a8:83:0f:96:47:40:73:4f:a9:80:06:de:
e6:93:79:52:13:80:59:f1:3a:64:87:fa:4f:79:3e:23:c9:f3:
df:ae:78:f8:b1:d3:e1:2e:87:29:17:00:29:25:cb:a7:a6:4b:
83:99:f9:e5:cc:d2:5f:a8:9c:68:85:65:88:1e:af:24:04:b8:
51:bf:44:b1:88:c1:89:60:bb:ad:74:a2:27:a3:c5:7d:f8:d0:
40:52:50:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:28:37 2026 by rpki-client