Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier: EWBlOpwyAPfNP2jYwhxZ7sAEf7RXhGPmjA/oXcU6/c8=
Subject key identifier: 2C:90:9F:5B:82:DD:74:3E:F7:D2:81:58:03:5C:A7:6E:A9:43:F3:F0
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial: 019E1D227F88174A538D3F916CF139905D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number: 14D7
Signing time: Tue 12 May 2026 17:01:00 +0000
Manifest this update: Tue 12 May 2026 17:01:00 +0000
Manifest next update: Wed 13 May 2026 17:01:00 +0000
Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: qPNboWdS4r3QbciX/De/cs6U01JiytAHRcbCPG9ymMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:7f:88:17:4a:53:8d:3f:91:6c:f1:39:90:5d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Validity
Not Before: May 12 17:01:00 2026 GMT
Not After : May 13 17:01:00 2026 GMT
Subject: CN=2c909f5b82dd743ef7d28158035ca76ea943f3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:aa:db:7d:75:2b:0a:54:06:c5:6b:c4:ca:
f2:3c:8f:2d:24:c6:ca:5f:8d:7d:f8:9e:f2:46:92:
2b:e3:57:00:71:d9:1a:dc:64:3a:e3:ed:4f:86:7f:
08:cb:b0:ff:7a:f4:a9:27:14:e2:b2:b0:e8:2f:51:
0e:3b:dd:94:d3:35:45:a3:2f:e3:3e:fc:78:e4:88:
44:94:95:10:e8:e8:c7:9f:f2:b1:14:f9:c0:43:37:
98:5a:95:40:d9:b7:d1:f0:a5:ae:4b:7e:fb:7d:b5:
24:d7:21:d0:3f:99:c5:10:14:08:38:ea:a1:5d:d8:
a2:37:85:ea:8f:f3:95:ce:4b:25:80:09:9f:0a:15:
c1:11:de:0f:c1:71:30:13:2f:bf:b0:be:43:18:80:
1d:9c:1d:30:ca:ab:ec:73:f2:b6:56:6e:4c:ab:7c:
49:20:86:89:95:5f:05:6e:60:27:cf:b6:5c:13:0c:
26:4b:f7:41:b7:4b:32:a9:65:90:be:73:d1:29:39:
9b:32:f4:e6:41:68:53:70:c8:40:b5:88:b1:89:7a:
58:5d:fe:93:9e:8d:ee:be:35:e3:e7:b6:fd:63:ea:
4a:42:6a:9d:cb:50:7a:1f:b3:c7:12:a5:69:7c:0d:
2b:b0:54:0c:5d:88:15:3e:7b:46:cc:e7:1c:b8:5c:
09:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:90:9F:5B:82:DD:74:3E:F7:D2:81:58:03:5C:A7:6E:A9:43:F3:F0
X509v3 Authority Key Identifier:
keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:af:91:ca:2f:4d:54:e4:72:d6:7b:ed:4d:88:95:40:ae:76:
f5:85:92:b1:f8:11:6d:b7:54:d1:2c:43:37:ce:1a:dd:b8:f6:
b1:5c:ff:99:08:65:d8:8d:75:34:02:b1:58:b4:a4:4b:e8:54:
12:13:df:68:2f:16:a8:c1:d8:4d:68:ac:7e:72:ce:e5:e8:11:
8e:0f:80:3a:1c:65:1d:92:e9:62:69:43:a4:2c:86:79:a2:05:
d5:28:37:5e:c2:4e:09:ae:23:35:49:f2:bb:4b:7c:9e:47:21:
29:9d:72:52:20:32:b9:ad:0c:82:3e:e1:53:1e:54:05:7b:a1:
64:6f:cb:32:24:ba:0d:82:81:6a:3f:e6:4a:ed:80:08:32:e6:
88:8b:88:c4:16:c6:aa:12:7d:65:7a:b4:a0:2c:9a:2f:82:b7:
b1:e6:59:eb:5b:05:23:1c:6e:80:e1:ae:89:f4:0f:ac:9b:bf:
e5:4d:2f:8b:c9:1f:98:f5:af:51:f7:e6:09:42:6d:a9:5d:96:
9d:0a:e3:0d:c5:db:28:48:fd:60:fb:24:e1:77:eb:14:4e:8c:
57:87:58:f1:5f:8f:da:9f:c6:1c:39:3b:25:0d:39:6b:b3:ae:
95:21:4f:13:71:11:b3:c5:7b:0c:46:5a:bf:a6:04:7a:fc:dd:
5c:26:3b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:02 2026 by rpki-client