Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
File: 9hUWPY_cRSP7uCJN89wgese94ck.mft (raw, json)
Hash identifier: awFWhHVvb2aT7ZxvTCfSYcDxds9PofOoFsCWmdJkbfg=
Subject key identifier: 42:0C:20:1A:5C:EC:3B:0B:67:96:37:05:C2:1E:78:55:32:3C:16:D2
Authority key identifier: F6:15:16:3D:8F:DC:45:23:FB:B8:22:4D:F3:DC:20:7A:C7:BD:E1:C9
Certificate issuer: /CN=f615163d8fdc4523fbb8224df3dc207ac7bde1c9
Certificate serial: 019E1BD8F2C18A7B7F9D721468A4B7DAF719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
Manifest number: 0219
Signing time: Tue 12 May 2026 11:01:03 +0000
Manifest this update: Tue 12 May 2026 11:01:03 +0000
Manifest next update: Wed 13 May 2026 11:01:03 +0000
Files and hashes: 1: 9hUWPY_cRSP7uCJN89wgese94ck.crl (hash: 84W2LZQ0RGVJ+dP4i//Dm0jfNJvmsAmW87ni/BKh62g=)
2: ZW4Y1TGuNOmvztoKC-GttBiocmk.roa (hash: Pc22uXR6lgCrGRVc00EDjUUEOpeb78zqYMkdzAmaFbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:f2:c1:8a:7b:7f:9d:72:14:68:a4:b7:da:f7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f615163d8fdc4523fbb8224df3dc207ac7bde1c9
Validity
Not Before: May 12 11:01:03 2026 GMT
Not After : May 13 11:01:03 2026 GMT
Subject: CN=420c201a5cec3b0b67963705c21e7855323c16d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7f:5f:7b:b5:f0:70:a1:98:13:04:9e:7a:cd:
a6:b5:df:c0:37:29:bb:f9:d9:a6:70:c8:b7:a3:1b:
01:8f:b4:40:de:da:8c:58:1a:81:48:d8:0e:52:9a:
ef:12:b6:9a:36:b4:cc:f5:2f:04:08:9a:a4:f3:bf:
e8:f0:a6:99:73:2c:b4:71:94:6a:38:7e:eb:d3:77:
1d:39:07:8e:66:43:e1:3a:d9:2f:70:02:61:66:0e:
d5:95:20:f2:38:a9:8a:90:4a:b9:ac:05:df:36:09:
b2:26:f2:fa:cf:29:97:be:29:80:f4:72:67:e4:82:
09:1d:5e:cb:75:0d:c2:27:c7:66:98:75:67:be:d2:
71:a7:3d:51:3b:a1:27:88:53:6d:64:7a:20:09:f6:
c6:60:b3:45:3c:94:86:69:ab:4c:b2:5e:99:e4:d9:
1d:f8:f3:95:66:cc:ce:cd:e9:af:12:e0:9b:f0:59:
35:91:05:dc:d7:f6:32:17:bd:35:20:74:46:83:5a:
29:5f:04:82:78:ab:27:fe:b6:ec:d6:9a:a2:60:03:
c3:6a:e3:41:b9:69:29:8c:dd:26:b8:d0:e8:26:7c:
8b:6d:89:3f:fe:e4:99:21:02:98:c4:ce:0a:0d:9c:
41:24:bb:aa:bc:ea:64:d2:7b:26:5e:78:1e:aa:f0:
c5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0C:20:1A:5C:EC:3B:0B:67:96:37:05:C2:1E:78:55:32:3C:16:D2
X509v3 Authority Key Identifier:
keyid:F6:15:16:3D:8F:DC:45:23:FB:B8:22:4D:F3:DC:20:7A:C7:BD:E1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:19:d4:1f:3b:62:0c:5e:d2:c4:f9:fe:40:13:a1:b6:26:35:
5e:07:c6:b4:04:9f:99:21:e7:94:05:28:65:a5:29:5f:13:b4:
c5:0f:11:90:a2:31:11:0e:fc:47:8b:38:36:f9:49:4f:41:c8:
80:42:5e:dc:c3:1e:20:78:c1:75:e5:8c:11:22:c8:c6:f0:5b:
e0:af:30:81:40:be:09:f5:fe:b2:08:fc:93:93:30:94:62:aa:
0b:c8:a6:61:4a:16:5e:f5:f8:bc:21:be:84:00:4a:a5:2c:a3:
8c:7e:e4:d2:92:63:19:77:83:b6:b0:64:df:f8:ba:c0:de:61:
c0:2f:60:0a:44:37:3a:c2:11:70:a7:2c:00:4a:b0:fc:cd:e5:
3e:90:42:c8:1e:9e:58:5b:c0:a9:8c:30:c9:64:0a:89:5e:71:
42:0c:7f:60:27:73:b8:a1:82:9c:33:aa:7e:bc:0f:9e:5d:e0:
c4:e9:eb:b9:f6:26:2d:17:d0:a0:ff:ff:02:61:e0:7c:13:4f:
87:84:af:39:47:b3:8b:e7:f5:44:4d:9d:87:e8:28:09:9e:7b:
d4:5b:47:ef:1d:e0:77:a3:04:7e:95:f6:66:2b:54:3c:37:8f:
aa:90:6d:9b:07:4c:ad:9d:05:5e:a0:35:6c:e9:7a:e9:4a:27:
e5:5d:c7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:27 2026 by rpki-client