Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: 4JxSDWkwaS73EBeF4pIntFnRtTl/e+Zlb3KF3sEzlNQ=
Subject key identifier: 86:AA:13:08:65:4B:B5:AB:35:A5:E5:21:0B:B9:DD:36:BB:6A:D8:C5
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 019E1CB4CF9569373C7C778AD9A017CBF64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 1013
Signing time: Tue 12 May 2026 15:01:12 +0000
Manifest this update: Tue 12 May 2026 15:01:12 +0000
Manifest next update: Wed 13 May 2026 15:01:12 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: vNp8xeR9wX/QTEC27XfXRiFLCXQn0QT5xAWJev1pXzY=)
2: GdXLtakb-VVZb4sIMxasJO3C9e0.roa (hash: lYew3AcxBQCaUjqVtA2l1sMtRC1UlXtpZ4kuSqJbBQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:cf:95:69:37:3c:7c:77:8a:d9:a0:17:cb:f6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: May 12 15:01:12 2026 GMT
Not After : May 13 15:01:12 2026 GMT
Subject: CN=86aa1308654bb5ab35a5e5210bb9dd36bb6ad8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:6a:5d:66:00:60:a6:ee:4f:71:79:46:78:
00:2d:dd:8a:14:ff:54:4c:23:f0:02:91:fd:f1:8f:
ce:e4:35:85:04:54:e3:fa:23:d4:a5:c1:c6:4b:ca:
1a:be:a1:c0:d6:67:15:82:91:5d:6e:fa:02:d0:3a:
bd:58:a8:a2:af:0d:cf:39:11:29:24:be:eb:61:f8:
ca:bf:ad:ea:a5:ab:71:2a:32:bd:59:7d:0b:9f:b2:
ae:e3:91:82:63:23:f0:03:c3:32:73:17:e1:61:b2:
8e:00:ac:86:e8:59:0d:30:4e:72:24:5b:30:a7:34:
86:79:f3:4e:6a:f2:80:c2:83:c6:ce:34:e1:33:94:
04:e4:2a:c3:8e:be:b9:3e:dc:95:c3:07:0c:40:5c:
66:04:10:d3:cc:e9:e7:30:f2:43:af:e1:5c:7b:1c:
a5:2e:c2:e4:6c:f1:d9:7d:54:5f:b8:d6:18:06:54:
02:ec:f0:db:d6:ca:a2:f9:5c:cc:a6:c0:19:a4:0b:
a3:82:1e:fa:53:2a:ff:32:03:c5:da:bf:2c:eb:8b:
dc:57:c3:25:28:a3:e2:9d:35:7d:62:d5:3e:b8:7f:
6f:e5:ab:10:b4:ee:8d:f9:c5:ba:59:08:ac:e3:8a:
7a:26:69:fd:35:7c:7d:de:60:20:e6:aa:d8:ca:74:
82:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AA:13:08:65:4B:B5:AB:35:A5:E5:21:0B:B9:DD:36:BB:6A:D8:C5
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:49:37:42:41:97:63:cf:b3:58:4a:5c:f7:5b:3e:65:c9:34:
3e:48:e6:20:27:ea:38:6f:c4:6e:87:c2:42:31:23:55:84:d5:
9c:b5:b6:13:62:55:c5:fb:d5:10:61:4b:0e:ab:42:24:f0:75:
4f:ed:ab:18:ec:e4:48:33:ce:63:d6:fc:82:d3:41:9b:45:cc:
c3:60:05:41:63:e2:84:6c:6c:df:54:98:e4:85:88:c1:80:a1:
0d:c9:00:67:77:53:11:fb:60:d6:0d:09:22:5a:b7:7a:23:c2:
5c:ad:15:5d:f2:2e:5d:0e:85:9f:c8:96:b6:ca:74:d8:89:35:
e7:c4:c5:61:3e:a8:06:69:26:9a:20:4a:d8:67:9a:80:73:35:
5f:ec:81:30:97:76:8f:94:ce:33:fb:08:2f:84:1c:4b:19:f7:
13:27:87:4b:46:b6:b0:f8:27:b2:53:22:0c:22:af:55:a0:79:
fa:91:86:0c:80:29:b6:44:e2:e3:82:bf:5d:e8:f9:18:81:06:
81:6e:68:67:1a:e0:f9:7f:7e:e8:cf:f9:02:b7:69:d6:35:98:
22:4c:d5:eb:58:bd:37:92:78:09:38:d1:5c:43:7f:9a:5d:60:
32:48:7b:7b:22:9b:55:e3:9c:94:8a:b8:b0:d6:9b:3c:2e:1f:
4c:33:ca:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:15:41 2026 by rpki-client