Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: fEGYPJwo6adlvuT0N2G7pHBTOAh2QTfzOZTK4X6tBvI=
Subject key identifier: A2:35:D0:CC:DD:1F:E5:82:CD:1A:AA:01:BF:AA:A7:F3:24:9D:FD:DA
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 019E1DC76FC498158CBC4E0A7635FE0AEB7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 20:01:09 +0000
Manifest this update: Tue 12 May 2026 20:01:09 +0000
Manifest next update: Wed 13 May 2026 20:01:09 +0000
Files and hashes: 1: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: LVoE/U3jY1Sddx1slrX6Esu3jy4H3jSVfBqUafDzCTo=)
2: ZEzLOpu5XtR6NBna_6IDb8EqXXs.roa (hash: 3osUcSjQKH0ELMcPBLnQ81viVvl9FJ67k0/UaKaDqp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:6f:c4:98:15:8c:bc:4e:0a:76:35:fe:0a:eb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: May 12 20:01:09 2026 GMT
Not After : May 13 20:01:09 2026 GMT
Subject: CN=a235d0ccdd1fe582cd1aaa01bfaaa7f3249dfdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:f7:e0:d2:3c:04:a4:d6:8e:6c:98:56:cf:
55:e0:16:47:57:c0:7c:ff:1e:3c:ac:f5:32:69:86:
51:42:26:52:4d:c8:6d:e8:07:2c:ed:8c:04:b3:b9:
6a:13:7f:4a:ec:f2:6e:41:bd:f2:be:52:0d:e7:e3:
54:19:7b:05:78:e8:02:76:3a:bb:d4:61:af:87:9a:
be:61:fd:6e:87:03:6a:f5:2c:bd:00:c6:65:8d:f2:
ee:fa:1e:c3:f4:2e:14:cd:1f:bc:45:4a:1c:69:e5:
36:74:96:62:ed:17:1c:09:32:8f:d6:1c:e9:6a:80:
67:9a:d3:d3:12:5c:71:9b:f5:67:1d:ad:2e:75:d2:
c7:46:e7:26:bb:f4:be:f6:ce:b3:57:69:84:37:ad:
0a:48:34:10:5e:f0:49:f0:f0:83:0f:cb:aa:e7:2e:
3e:40:8e:a7:c2:19:37:5c:80:78:72:63:d9:9f:a3:
96:50:80:38:64:88:d3:50:5c:e3:93:c3:9f:7e:f3:
4a:7e:1e:66:fc:f5:4b:7f:d9:72:b6:86:fd:2d:d0:
76:21:1e:e5:83:5c:df:c3:e8:08:11:89:3b:91:a4:
b4:1a:18:bc:49:99:71:5c:3e:67:d6:a6:55:cd:f5:
d1:24:49:90:85:c6:8d:e4:17:3e:b0:ab:53:27:b4:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:35:D0:CC:DD:1F:E5:82:CD:1A:AA:01:BF:AA:A7:F3:24:9D:FD:DA
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ed:1c:a4:90:01:86:0c:24:2e:87:69:79:01:65:fb:11:e5:
de:0f:d9:e2:ea:c1:a9:2f:48:6d:99:7e:e8:38:8d:8d:8f:7f:
95:6e:61:78:5c:05:17:c0:95:be:c6:a6:1d:a2:d7:22:4b:7f:
8e:24:bb:eb:7d:50:74:de:69:21:32:c5:23:6d:f3:78:60:03:
22:fa:81:a1:65:db:61:44:bc:28:ad:38:3f:94:96:eb:c6:1a:
32:da:6e:0b:4b:d1:e3:23:0c:5b:87:bc:63:08:16:05:38:25:
a7:e6:92:f7:d5:8a:87:e3:53:1b:cb:bc:98:f3:cb:35:cd:9d:
91:f5:ea:ae:e5:18:84:5b:6b:c5:e0:34:de:18:c2:58:f9:bb:
67:a0:52:df:78:35:e3:6b:58:eb:77:3d:20:36:1a:e0:4f:18:
90:84:32:04:fb:00:3d:17:63:ac:1f:c2:e5:38:c4:3e:52:8e:
b2:83:f3:37:5e:7d:bf:ab:fc:18:ab:42:9e:8e:b0:d3:2e:a2:
9e:3f:2c:89:ee:1a:01:f4:47:9f:27:ef:46:35:92:2d:13:0d:
9a:c2:b5:39:b5:37:c4:cf:d0:1d:ad:ce:42:52:a6:da:ce:c4:
9d:20:24:54:75:61:e4:89:76:51:81:4f:1c:18:1d:19:1b:89:
df:28:84:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:13:59 2026 by rpki-client