Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier: snEQu/8F+cEXUSZFX7spsMg3Dkfs3BQSs5kiG1CY1j8=
Subject key identifier: 0B:45:5A:24:3E:23:1D:3D:1C:2C:48:DB:6C:44:3E:F4:34:BA:1C:FA
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 019E1EA3B4256BB003EF764DA0C688AF23C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number: 0E39
Signing time: Wed 13 May 2026 00:01:45 +0000
Manifest this update: Wed 13 May 2026 00:01:45 +0000
Manifest next update: Thu 14 May 2026 00:01:45 +0000
Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: ufma7d8etFUDZyf1UazMPL1BX7jMYVDq6BiTBV3xDwc=)
2: yCy_86dbJqoexnTrD2dlicXc2yE.roa (hash: JBNXmhezJRCIp5u3OP1UX59OO3DddhKcgHEEF7XBd38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:b4:25:6b:b0:03:ef:76:4d:a0:c6:88:af:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: May 13 00:01:45 2026 GMT
Not After : May 14 00:01:45 2026 GMT
Subject: CN=0b455a243e231d3d1c2c48db6c443ef434ba1cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:5d:40:85:65:b0:b9:e6:af:1d:ce:08:4d:
83:f4:f2:4f:92:3d:24:cc:cf:48:15:55:ef:63:1a:
53:b0:84:57:1f:a0:d8:d8:6a:c7:9b:a7:e3:9c:45:
62:88:11:9a:5c:be:71:27:6c:3a:53:f5:6c:c7:10:
bb:9c:1f:91:53:da:d5:97:89:ff:62:51:db:1f:db:
6c:4c:d4:8d:9a:f2:1c:ae:a9:c4:44:45:8e:e8:90:
06:08:81:02:ca:86:18:2a:f7:bb:60:01:35:9f:a0:
f2:d5:03:23:6b:67:6a:f9:6b:90:04:38:ec:7f:06:
61:ba:8a:f1:57:11:2f:a9:ad:b4:0f:ea:b6:2c:07:
44:86:5b:61:e0:7d:e8:c8:44:bd:00:dd:d4:dc:f3:
eb:71:68:a9:cb:e0:7a:f1:9a:73:7d:d4:92:fc:4b:
6c:c9:8e:9c:2d:ef:63:65:b9:35:82:03:f8:d2:ad:
53:1f:8b:dc:15:c0:ec:4c:59:da:4e:4c:98:7d:39:
df:ae:9f:b0:2b:f2:27:01:23:dd:54:cb:f0:89:dc:
0c:5e:b4:69:ee:23:bc:a2:4b:a5:65:07:27:f4:91:
10:1a:d3:26:5c:04:e2:bb:f5:3d:06:c9:b9:92:a2:
f1:3d:56:9d:27:2c:9c:34:f9:7b:fb:2f:5b:37:d6:
d6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:45:5A:24:3E:23:1D:3D:1C:2C:48:DB:6C:44:3E:F4:34:BA:1C:FA
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a9:97:12:ac:ca:16:28:bf:a4:7e:73:a9:83:2d:a0:ab:3a:
bb:5d:bd:dd:1b:4c:37:67:af:f3:66:e5:7c:d5:54:02:8c:b6:
e3:41:93:c6:1b:9f:a7:00:a8:d1:8c:e2:da:fb:95:70:4a:02:
7f:b4:6d:d7:cf:54:b3:ab:39:32:f5:7e:7b:1e:ba:01:3a:6e:
95:4c:72:10:4c:b8:3d:ad:1d:1c:59:c0:39:d3:ad:0e:f8:33:
79:47:a1:63:99:1e:9d:57:58:9d:21:5f:61:f6:7b:61:fc:3c:
62:68:b2:b4:b7:00:7e:0d:dc:48:72:94:8d:22:33:9f:8c:a6:
f3:e4:a9:d3:6f:d5:c9:bd:5c:8d:11:db:21:fc:4b:44:94:6d:
f6:6c:f8:03:60:ad:e8:60:4a:33:1c:92:a0:66:8a:99:a4:62:
ce:41:c6:f9:37:8f:a1:a7:55:93:02:8c:a2:4f:fb:04:12:33:
aa:b1:39:c8:35:d2:2e:98:68:45:b6:8c:b0:75:ef:33:99:9d:
a2:de:8d:13:74:1a:bf:13:46:ae:81:ce:e8:27:0a:59:d6:f5:
5c:a9:94:3b:91:14:cf:0e:29:a4:dd:88:0f:65:d0:71:72:9f:
1e:65:98:50:6e:7a:03:21:1c:20:e1:77:c2:fc:62:e3:ee:6c:
96:e4:4a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:19:27 2026 by rpki-client