Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
File: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft (raw, json)
Hash identifier: UJDtiohmLC0xxAeXXHEKX6rFMeLAzmFGp5g8UtNYizg=
Subject key identifier: 21:5C:8B:14:E4:8E:D0:50:B9:18:8D:2B:B7:34:58:89:27:20:30:EA
Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
Certificate issuer: /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Certificate serial: 019E1C471770A0EFF76901A32F34E7168CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
Manifest number: 140C
Signing time: Tue 12 May 2026 13:01:21 +0000
Manifest this update: Tue 12 May 2026 13:01:21 +0000
Manifest next update: Wed 13 May 2026 13:01:21 +0000
Files and hashes: 1: 0mgkR8Oatppf6KwkGwCdocguoA0.roa (hash: xBRpWZu5TH9MlFJBVgXYiAXfSpweoxy68K+P+8afR20=)
2: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl (hash: UkpXmvYPxeTym4R3/Jyc1MNSbamsLB7l8CS21mtQ+RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:17:70:a0:ef:f7:69:01:a3:2f:34:e7:16:8c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Validity
Not Before: May 12 13:01:21 2026 GMT
Not After : May 13 13:01:21 2026 GMT
Subject: CN=215c8b14e48ed050b9188d2bb7345889272030ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:1f:7c:54:e2:97:97:6b:ec:cd:aa:54:fb:
ca:42:72:25:d9:c7:4c:dc:09:92:eb:71:6a:51:76:
6b:e3:79:91:52:dd:ac:53:8e:df:c3:77:ed:5c:a4:
56:94:25:27:7b:42:19:95:a9:33:91:54:b2:86:d3:
20:f8:1a:a4:bf:86:33:14:06:1d:85:a3:c7:b4:44:
0d:5d:63:06:71:50:18:84:55:0c:ba:17:48:19:e9:
68:68:69:28:c4:8e:60:60:f1:af:19:12:b6:b1:b1:
13:d8:7e:fd:7f:64:7d:ad:2d:7a:1f:80:fb:12:ec:
9c:75:d5:02:f1:e8:2c:dc:db:35:9a:74:5a:e0:c3:
22:22:cc:f2:97:4f:b4:b5:68:c8:f1:51:8e:c5:3a:
42:f1:b3:19:73:a7:5d:52:3b:07:56:fa:76:65:1c:
04:8f:b8:15:7d:94:cd:e1:8d:ed:57:97:1f:88:d4:
84:ea:c5:7a:1f:e1:09:81:06:96:df:74:48:54:3d:
36:18:25:b8:d2:a4:a8:21:b6:bd:23:ab:dd:cb:0d:
dc:6a:cf:e5:ff:5c:f4:b7:05:e2:61:fa:04:94:37:
d1:21:d5:90:5d:6e:96:42:44:f4:34:66:24:1f:21:
cb:46:eb:99:29:ad:89:10:7a:ef:fc:25:ca:f6:89:
a7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5C:8B:14:E4:8E:D0:50:B9:18:8D:2B:B7:34:58:89:27:20:30:EA
X509v3 Authority Key Identifier:
keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2d:13:17:37:d8:25:4e:9c:a8:59:2d:11:d9:ac:2e:32:38:
d6:32:b2:11:1f:98:61:98:d5:38:33:c0:a7:9c:4d:b8:66:26:
12:21:3d:c0:0d:ba:4c:8c:f3:d6:06:bf:67:c3:ba:74:57:8f:
4e:58:f3:94:5b:91:46:9f:b1:83:d6:c6:ee:24:cd:68:24:3f:
e6:dd:e9:a0:8c:d6:f9:40:60:23:3d:56:d3:af:74:99:78:e5:
d6:c4:59:ba:21:b4:a0:5a:34:cc:b0:d2:99:5b:e3:ef:e1:05:
a4:f0:99:d2:d5:2d:0c:73:c9:17:00:70:dc:01:87:ca:a6:52:
d0:2d:52:b1:cd:3f:49:f1:69:2d:81:81:4f:7f:26:ab:9d:35:
90:c1:29:49:39:5b:7a:13:ba:2b:ba:7d:cf:28:ca:6e:ca:b0:
c8:1a:32:ba:10:ab:2a:95:42:eb:00:d4:92:24:06:14:99:13:
b4:bc:1b:a3:91:6f:39:8f:9b:60:9b:c3:a1:d4:b5:8b:3b:37:
09:4a:d0:ed:9a:6e:46:90:41:ae:98:30:7d:68:37:80:40:45:
b4:c2:97:96:16:47:70:cb:df:38:52:52:89:ab:d7:c7:4d:2b:
0e:df:6c:9c:e3:f8:f1:a3:9a:4f:e8:bb:1b:a9:d3:91:59:e0:
f6:cb:51:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:37 2026 by rpki-client