Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
File: p9368Tt9vgXaoytYeLi2gCQEWXE.mft (raw, json)
Hash identifier: 9770qQmaN3+z5FclE1LQ1pRvwkK5bh/84f6jmc42S4o=
Subject key identifier: 12:18:A1:AB:62:04:9E:CA:AF:08:EB:43:82:D3:1A:30:3D:41:64:E5
Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
Certificate issuer: /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Certificate serial: 019E2A020CB4A7F007E3BC864148E0EB1E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
Manifest number: 1095
Signing time: Fri 15 May 2026 05:00:37 +0000
Manifest this update: Fri 15 May 2026 05:00:37 +0000
Manifest next update: Sat 16 May 2026 05:00:37 +0000
Files and hashes: 1: X44UuuaUhAM50Kozh7XZVDvdF14.roa (hash: kIvHQLjOEtZWEUfUCpYD6bbto6town5tHTLofDklsdI=)
2: dAQr9ygVW7afaoDzLId5HtYFpKw.roa (hash: gWNR3pSMI8yeOAqKnvOXgWPtPa0bDKYn5eIcfvgVCNQ=)
3: p9368Tt9vgXaoytYeLi2gCQEWXE.crl (hash: kG21U8DNNjfzLq6bKjSDc08XwAN1PvIa233OQnc5cJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:02:0c:b4:a7:f0:07:e3:bc:86:41:48:e0:eb:1e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Validity
Not Before: May 15 05:00:37 2026 GMT
Not After : May 16 05:00:37 2026 GMT
Subject: CN=1218a1ab62049ecaaf08eb4382d31a303d4164e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:18:35:2c:c3:01:62:7f:3b:f8:c1:6e:fe:
17:0e:e5:4d:8f:d9:a4:1b:9f:cb:41:2b:86:7c:2f:
a1:97:df:4b:04:63:95:2e:0a:9e:cd:70:d0:f3:04:
32:0c:1d:ed:86:72:a7:36:f4:53:88:cc:d1:a8:ea:
fb:89:dd:a6:71:f6:1f:bc:be:e6:16:c1:a1:2b:1b:
69:67:39:f3:33:a9:37:f3:06:f3:83:78:7c:0c:0a:
36:1e:2a:5d:43:ba:8f:6f:62:7c:d6:f1:4c:f5:7e:
06:91:4d:07:43:9d:4a:75:22:b2:ea:0a:99:e3:92:
e5:a8:f7:61:e5:80:0f:d9:f5:f8:be:f3:96:2b:b6:
ac:46:c0:c1:27:eb:21:e2:b6:72:40:37:16:d1:92:
0a:f1:20:8b:74:3c:23:cc:c4:fc:7c:be:39:ee:c1:
d4:e5:9d:88:cb:74:34:96:6a:c9:70:42:59:c0:fa:
45:1a:de:3b:a3:8d:bf:62:2d:0c:22:49:15:ec:07:
16:3d:d3:af:2f:d3:6b:fc:0b:e7:b4:50:c5:29:29:
87:1c:ac:fd:90:16:70:cf:5d:11:a3:13:0f:5e:01:
7a:9c:e6:86:80:aa:66:18:25:96:b3:0c:11:cc:f8:
ae:eb:21:18:c8:99:af:75:13:b2:77:d4:7d:1a:01:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:18:A1:AB:62:04:9E:CA:AF:08:EB:43:82:D3:1A:30:3D:41:64:E5
X509v3 Authority Key Identifier:
keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:a5:80:ef:38:ba:d9:03:7c:0a:dc:be:b6:ad:8d:2e:14:be:
0c:0c:6a:6e:63:99:6d:18:8b:6c:fa:99:9e:b0:a6:78:28:a8:
57:6f:f0:72:2c:09:65:fc:43:1e:92:e8:4a:b5:27:cf:13:fd:
ee:4b:45:ad:fe:13:4c:0f:c5:ac:59:5c:ce:e5:bd:0b:2f:d8:
6d:6c:53:0c:49:03:83:03:7c:9e:56:60:f1:4c:03:a8:fa:59:
95:e0:37:8e:09:a6:e3:e1:5c:9a:55:be:68:f4:1e:2e:12:fa:
a9:9b:4c:f0:8f:ee:f5:a1:85:9d:f7:eb:a5:b4:aa:94:92:14:
4d:10:9b:42:42:04:fd:c7:18:0e:52:e8:90:8a:47:9b:0e:b2:
8f:58:74:79:92:2a:73:d6:39:32:0b:b4:44:7a:14:2f:66:91:
fa:2a:7a:1e:4f:d8:97:2a:42:fc:b1:23:51:88:88:43:bf:c6:
d1:34:72:bf:79:f4:f5:19:c2:5f:3a:e6:bb:6a:83:f5:01:68:
c6:32:a5:90:8f:73:3d:c8:d0:bd:7f:df:76:58:56:44:63:f3:
97:24:0a:d7:b9:c6:c9:4d:46:20:02:16:46:ca:ec:b2:55:ec:
9f:da:7e:ad:b1:e5:24:25:d0:79:93:34:1e:0e:aa:d5:9a:68:
84:88:87:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:11:56 2026 by rpki-client