Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft
File: 9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft (raw, json)
Hash identifier: jPFWMs69mI/CSC/PC9vKlZmdRJjwqmsFWjXhv4PRuiI=
Subject key identifier: E3:24:62:87:7C:8A:63:7D:C0:A9:8C:35:DC:B3:B6:25:FB:F3:7D:2E
Authority key identifier: F4:7E:52:64:58:49:7C:25:D5:DC:3D:C2:F4:A8:37:4D:4E:44:94:9D
Certificate issuer: /CN=f47e526458497c25d5dc3dc2f4a8374d4e44949d
Certificate serial: 019E20808FB74840E80349D6C35F8E88ED88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft
Manifest number: 017C
Signing time: Wed 13 May 2026 08:42:36 +0000
Manifest this update: Wed 13 May 2026 08:42:36 +0000
Manifest next update: Thu 14 May 2026 08:42:36 +0000
Files and hashes: 1: 9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.crl (hash: HVLOkxM2Dt7FIxKNssbp2YXWnCSzXrU5ID91zc7kCU0=)
2: y_FNVbdikbBWzs5LhqoDeRQMNlA.roa (hash: WWd5ILv5zYGPBJplTtrocqicsl6CMsf0eLm4LCFpsyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:80:8f:b7:48:40:e8:03:49:d6:c3:5f:8e:88:ed:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47e526458497c25d5dc3dc2f4a8374d4e44949d
Validity
Not Before: May 13 08:42:36 2026 GMT
Not After : May 14 08:42:36 2026 GMT
Subject: CN=e32462877c8a637dc0a98c35dcb3b625fbf37d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:48:2f:bc:97:58:62:fd:55:d7:7a:27:36:
0c:76:47:2c:e7:7c:0b:e6:c0:96:3f:62:99:70:20:
46:60:8a:b7:d9:1f:84:4f:72:cc:64:c5:63:de:08:
ce:78:52:62:76:6b:1c:81:d5:d7:08:67:d5:4c:fb:
e7:4c:e2:35:a8:a6:7f:5c:9e:ed:ca:58:2c:b7:ff:
39:38:47:90:50:d1:c1:70:3b:af:b7:38:f9:8d:4c:
2a:ad:79:43:dc:2e:47:c2:6e:a8:bf:c7:96:93:1d:
4a:01:3a:8e:00:6a:d2:cf:c5:15:7c:24:73:fd:87:
57:ee:4e:05:79:56:71:b9:5f:66:c6:d2:ee:b4:0c:
2b:f8:67:18:e1:46:5a:0c:f3:d6:63:e0:f2:10:79:
47:ee:05:bd:69:2e:32:ad:0b:b8:40:e5:d3:4b:20:
e7:09:47:04:95:b2:dc:61:4c:5c:53:11:d3:2f:e4:
4e:ff:51:be:81:1c:73:a2:c8:6f:15:67:0c:00:0e:
9d:da:bb:b8:1e:c9:45:53:94:ce:57:bd:dc:1a:2a:
92:67:d0:3a:39:51:9c:43:2f:a9:6d:a1:39:d4:b8:
7c:c8:16:64:e4:b7:43:d0:0e:ef:34:40:3b:7f:93:
b8:e5:07:90:46:35:ae:c1:52:50:07:10:4c:c0:2c:
c1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:24:62:87:7C:8A:63:7D:C0:A9:8C:35:DC:B3:B6:25:FB:F3:7D:2E
X509v3 Authority Key Identifier:
keyid:F4:7E:52:64:58:49:7C:25:D5:DC:3D:C2:F4:A8:37:4D:4E:44:94:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e1:67:f6:95:b9:62:95:36:42:f4:d4:c9:99:71:27:ab:26:
c4:f0:7d:cc:a6:3d:42:c4:7c:27:df:a0:87:43:17:91:8d:36:
98:0f:0f:d8:1e:aa:6a:b3:90:ab:54:50:01:b7:8c:d7:eb:05:
41:d6:cf:34:d6:bd:6f:9c:bf:78:ce:ea:9a:d6:cf:37:dc:e1:
78:d5:47:a6:25:2c:d6:37:0a:f0:fb:f3:66:2b:eb:85:c6:6c:
9a:20:02:3e:c6:8b:a6:a0:be:01:b3:42:3d:b7:6a:17:6f:80:
a4:e7:87:64:28:d4:05:68:96:44:a9:2e:0b:58:02:df:0d:13:
e4:73:f9:c7:c3:48:d4:cf:ed:62:73:02:e3:a7:8d:ba:66:82:
c0:4c:6c:9b:80:cf:ce:72:3e:be:d3:2a:0b:29:d7:f1:89:7d:
dc:21:12:7a:49:03:d9:30:c1:af:9d:44:6e:2d:25:fb:cf:9c:
d8:69:95:d4:0d:c8:9e:e1:dd:a2:b3:08:df:8c:50:04:8d:de:
42:cb:62:4e:e3:bf:0c:5f:35:05:43:b7:96:47:ee:44:34:fb:
83:96:3a:24:62:fc:f6:1c:61:98:3f:cf:7c:e8:03:15:42:d0:
da:f6:01:99:a8:98:23:ba:d5:84:0d:6a:de:58:0b:7d:f3:1a:
4d:17:66:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:37:13 2026 by rpki-client