Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
File: 9XpIEqFZ72qekpcudXKtZi1yIVo.mft (raw, json)
Hash identifier: OKIHeM+1kZ5f1WB/MdNvN5g8luXAcS3pyTMOo6rwexo=
Subject key identifier: B7:B8:EC:C6:4D:CE:A3:47:12:59:06:BE:CA:04:94:73:85:DF:F5:84
Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Certificate serial: 019E1DFE7DCFF6C170998392FA1D0769EC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
Manifest number: 11F7
Signing time: Tue 12 May 2026 21:01:18 +0000
Manifest this update: Tue 12 May 2026 21:01:18 +0000
Manifest next update: Wed 13 May 2026 21:01:18 +0000
Files and hashes: 1: 9XpIEqFZ72qekpcudXKtZi1yIVo.crl (hash: +2adWribHUfpS5a1GfTPQs7KYwuYo6HzCN49ZMpOUnU=)
2: lKVJdRF0hE9bPtqV3XlzvhT3Iqs.roa (hash: GeIEq9ieMXhGCkHBVtks0M5q4Jm8CcNNhR3YdczhVxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:7d:cf:f6:c1:70:99:83:92:fa:1d:07:69:ec:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Validity
Not Before: May 12 21:01:18 2026 GMT
Not After : May 13 21:01:18 2026 GMT
Subject: CN=b7b8ecc64dcea347125906beca04947385dff584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:25:2d:b1:16:74:a7:c1:ce:0e:09:d8:9e:
28:93:52:ae:f7:43:69:47:39:ae:e8:f2:5a:93:40:
ce:d6:fe:fc:1c:02:1a:65:61:b6:8e:41:e9:d7:29:
9f:20:19:4a:67:80:96:11:83:af:4f:05:fe:b2:f5:
ce:ff:a9:9e:5a:60:7f:f3:35:91:33:31:83:a1:1f:
57:0d:ca:1f:cd:87:a6:31:54:e4:2b:6b:40:78:ec:
60:91:ef:29:b5:dc:cd:e5:f4:e1:ae:81:b6:5f:bc:
39:9b:85:6e:38:2a:26:25:db:84:4d:5a:02:30:6d:
ca:07:23:f5:db:b2:a6:14:19:c6:d7:5c:b9:70:53:
8e:47:db:7f:5a:f1:cf:ec:29:75:e1:67:8b:a2:2b:
36:1d:09:a8:ac:ac:3d:de:8d:f7:bf:dc:82:10:05:
94:b6:a2:d3:d3:1f:ba:7b:2f:14:34:f5:76:e7:ff:
72:fd:dd:60:a6:11:32:8d:af:dc:01:76:4a:f5:da:
0d:40:a5:ba:9a:b3:f2:7e:a6:d8:59:bb:d6:13:80:
0d:c5:c4:38:3e:37:18:5c:7d:6b:ad:d0:2e:be:74:
c0:ee:bf:b4:e9:1b:16:0b:f1:88:35:dc:39:16:dc:
25:59:80:51:39:9b:fc:6a:92:6c:98:5e:14:1e:82:
53:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B8:EC:C6:4D:CE:A3:47:12:59:06:BE:CA:04:94:73:85:DF:F5:84
X509v3 Authority Key Identifier:
keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3d:0d:94:bf:62:ad:14:2d:f4:2b:d4:70:bd:1b:1b:7c:4c:
85:3f:bc:be:1d:a1:83:b6:39:d5:ca:da:cd:c4:fe:06:ff:f1:
a8:51:18:2f:08:aa:95:eb:4a:87:d3:55:21:72:8c:7d:83:c9:
2a:4e:0e:5e:1c:52:8d:51:0a:d5:52:12:4d:96:df:3a:03:94:
cd:10:43:38:4f:a3:12:4f:56:7e:15:90:55:cc:42:31:ce:89:
88:ee:a1:b9:ad:19:3a:0a:1a:a7:5f:5d:5b:50:37:de:bd:44:
bf:c7:94:8f:36:f6:ce:0d:d5:25:86:32:6d:d6:41:c0:ef:3a:
e2:7f:2c:bd:e9:58:73:9a:01:a9:f2:24:38:6a:6a:a4:3f:26:
89:e0:b0:85:81:5f:96:7d:68:e8:9c:83:88:66:5f:b2:46:7f:
77:e5:26:16:6a:a8:15:be:ce:3e:c1:04:fc:d6:80:1b:80:41:
fe:81:4d:d0:c8:31:16:b7:d9:f1:16:32:25:24:e1:ea:fc:7a:
56:3d:43:6b:05:6c:e7:85:b9:35:cb:7c:18:12:59:2b:d0:83:
48:a4:b2:67:1d:d1:de:bd:c0:5e:ea:f8:c3:8a:e2:c1:18:4a:
58:e5:cc:59:5a:7e:6e:33:13:ac:1a:31:67:6c:df:ed:3d:7d:
c6:9b:f1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:36:39 2026 by rpki-client