Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: Ov0IELDQBJcZMntW7wWrndr0QjZ9OBwvzc/qOBGeAIE=
Subject key identifier: FA:FF:07:59:05:03:AC:B5:CC:8F:DC:50:43:15:1E:A9:B3:E4:FA:96
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 019E1D22D3FDCF8BC2404A596DD514E65A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 096A
Signing time: Tue 12 May 2026 17:01:22 +0000
Manifest this update: Tue 12 May 2026 17:01:22 +0000
Manifest next update: Wed 13 May 2026 17:01:22 +0000
Files and hashes: 1: 0DAQlpT9x-QaKyJ8cOE4xeRFybQ.roa (hash: cLzURrgNbzm6pPzLt8hQc5OKqgGCPtGdJQ9/RRN5LZU=)
2: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: u7RsIj5JFeyAnYKCsZDKDaYyDoPfIrI8CcK0r9n+Ask=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:d3:fd:cf:8b:c2:40:4a:59:6d:d5:14:e6:5a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: May 12 17:01:22 2026 GMT
Not After : May 13 17:01:22 2026 GMT
Subject: CN=faff07590503acb5cc8fdc5043151ea9b3e4fa96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:a7:e8:1e:9b:14:78:d9:0d:a0:07:33:ec:
83:fa:25:ad:a8:2c:bf:56:4d:73:07:cd:f8:b6:a8:
6f:7b:e4:50:78:1f:f7:21:8e:20:40:33:a7:f3:40:
12:fb:4f:c3:b8:36:d8:a3:0b:8e:e3:5b:c8:69:c6:
60:bf:ca:cb:72:03:cf:ae:57:c5:c9:b9:e2:cc:94:
40:e3:85:ac:11:15:74:61:2f:f1:1e:ed:f6:2f:0c:
3a:53:7e:80:47:1a:9f:af:72:8b:d7:28:15:bf:d3:
5a:c4:bf:9a:29:6a:c8:36:97:3f:82:f7:f2:da:6e:
2a:88:70:94:32:d6:e9:75:c3:da:df:1e:bf:ba:de:
aa:c3:f9:b9:bd:b5:85:d5:0d:a8:9f:a9:60:2c:0c:
77:53:8e:31:50:96:a9:2e:87:b5:85:66:1c:6d:d4:
ec:93:b6:0c:3a:cd:9b:c4:46:5a:03:dc:33:f5:6c:
91:c8:c4:2b:9c:b4:3f:0f:cb:2b:4b:8f:c0:ba:3c:
09:7c:66:ed:cb:be:2d:31:0b:7e:1c:ab:f5:32:61:
73:df:c9:d0:69:35:a6:1a:a2:12:77:c7:19:50:cf:
8e:d6:2c:99:df:38:31:32:70:dc:a5:86:4e:c8:db:
6c:6f:99:22:aa:ee:f8:d9:23:e9:4c:d4:56:43:4d:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FF:07:59:05:03:AC:B5:CC:8F:DC:50:43:15:1E:A9:B3:E4:FA:96
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bd:be:6c:ad:48:c1:52:1f:86:31:40:62:ee:14:ea:3d:b6:
26:d6:68:41:a3:14:59:54:77:e5:0b:4c:83:94:17:c7:0d:32:
ea:c1:2a:f8:55:a1:de:5a:35:35:2b:84:bf:0c:6a:7f:f7:58:
8f:7e:b9:ab:ee:43:a7:61:80:b0:18:d9:2d:ce:61:d7:61:84:
ef:5d:86:d9:3a:d0:52:87:9a:36:79:26:9e:89:dd:db:7f:f4:
55:72:06:70:9d:36:81:a4:59:2f:70:b3:10:c7:16:2a:bd:4a:
45:d3:1e:4f:83:d9:38:e1:58:3d:b6:fc:9c:c6:a8:df:46:9a:
bd:f4:a2:37:0a:59:58:36:9f:27:b8:ee:dd:62:71:97:4e:3c:
7b:48:b5:6d:53:e8:90:13:e4:11:34:41:fd:ca:aa:60:bf:27:
0e:9b:24:85:a6:68:d1:3b:4c:53:21:5b:f5:fb:70:dc:e0:07:
c7:05:3b:45:2a:c9:eb:77:0b:65:ae:1a:72:71:5d:2f:89:3f:
ee:ee:63:c3:b1:e1:d2:f8:b2:d4:e1:26:cf:27:7c:94:ea:4e:
68:f9:39:ab:6c:f4:fe:a5:34:4b:18:4a:e4:9b:dc:47:0b:a6:
82:04:c8:74:66:44:67:71:5f:36:5a:af:1a:6f:5a:6c:e2:5e:
03:f4:21:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:02 2026 by rpki-client