Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: Gt1/4O3ygdFf3olAMhoaZiBQTovut5dotJ0MqXWaS78=
Subject key identifier: A8:69:C3:A3:C6:D7:3F:37:6E:8A:4F:E4:74:A9:A9:0D:4B:E0:90:E9
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 019E303BC1E2F01896F516237A7E0A0FE15B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 0D39
Signing time: Sat 16 May 2026 10:01:23 +0000
Manifest this update: Sat 16 May 2026 10:01:23 +0000
Manifest next update: Sun 17 May 2026 10:01:23 +0000
Files and hashes: 1: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: wRZ5TpEA8b7i8rnH7etfSFHjgxrBV76TWwJhKMzFJUc=)
2: nt5KsVI8vqdpSeFz_087e62oU14.roa (hash: Bg0m3PuozQ6dYQ2kO4AYYeyWSaWC8O/p5Tn7+bNzG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:c1:e2:f0:18:96:f5:16:23:7a:7e:0a:0f:e1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: May 16 10:01:23 2026 GMT
Not After : May 17 10:01:23 2026 GMT
Subject: CN=a869c3a3c6d73f376e8a4fe474a9a90d4be090e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:c7:65:0b:16:6e:57:91:00:db:9e:a9:37:
59:0a:ac:59:19:8d:c3:30:a6:41:c1:d2:21:cf:71:
e2:d3:6b:05:1c:19:19:d2:4a:70:47:31:d1:c8:81:
9f:9f:a1:33:e6:e0:c8:8e:c9:b2:a6:81:c7:56:7e:
98:77:8c:e4:d5:2f:0e:c3:47:59:47:d6:1b:fd:df:
7d:4f:4e:66:a1:e6:17:3d:ad:9b:c1:1a:43:bb:a0:
8e:60:12:19:c6:6e:b7:56:49:94:bd:65:12:71:9a:
a9:ad:19:b1:17:44:d1:a5:45:84:5a:6a:f0:aa:6c:
2e:54:df:a1:8b:d6:64:95:c8:46:b8:34:cc:de:35:
84:bc:3c:09:91:64:fd:e7:34:d6:e1:66:31:f7:c3:
97:bc:45:a0:f5:fd:15:7f:35:54:f1:cd:12:54:8c:
c3:9d:5a:06:7a:1d:be:39:a7:a0:72:4e:3e:2a:bc:
5d:5d:89:24:f5:0c:79:70:af:7e:05:e1:5b:0e:cc:
40:c8:ce:f7:32:43:a7:ca:5a:45:85:5f:38:1f:58:
53:09:06:17:0e:8e:02:31:c2:86:92:d2:95:fa:8d:
f6:30:a5:63:e6:2a:e5:97:6f:ee:95:86:ee:71:8f:
27:bd:9e:fd:28:8e:1e:c2:c5:e2:7f:f7:83:84:66:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:69:C3:A3:C6:D7:3F:37:6E:8A:4F:E4:74:A9:A9:0D:4B:E0:90:E9
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:25:18:12:52:17:0b:87:fa:e1:2c:c4:53:33:3b:bf:f6:d9:
18:54:c7:b0:4e:7c:ae:91:11:88:0f:a1:74:19:22:bc:38:12:
b8:b6:32:7b:9c:a5:ec:88:c3:69:92:48:aa:41:81:95:d8:8d:
63:86:0c:66:5a:3e:2e:e3:83:3d:fb:d5:71:94:3b:c1:65:33:
de:c5:44:15:4f:81:b2:26:4b:7c:98:4e:00:b6:7b:1a:c2:d4:
21:3c:8b:71:46:1d:0b:c7:16:2c:38:28:78:31:33:2d:44:2a:
51:4d:b0:2a:7b:98:04:fd:a9:f8:97:84:29:19:ac:a5:4e:2b:
c7:a4:ad:ac:47:63:36:c2:ea:c3:10:c2:bd:98:a4:27:aa:5a:
a5:12:db:7b:4c:02:0a:43:66:57:12:5c:30:29:5b:ed:d4:02:
f8:bc:76:bb:3b:ec:55:62:29:cb:c2:b8:c0:0e:ce:de:18:0d:
61:3e:01:e0:9b:f3:fc:c7:27:d9:65:df:0b:04:09:db:11:bc:
30:a7:2d:80:02:80:d9:af:e9:65:0c:b9:a6:53:4a:15:90:f4:
3e:64:84:b0:9f:a3:b9:c3:e2:2d:66:e2:9d:a5:04:72:b1:65:
84:1e:3d:ee:51:9f:00:c4:2b:a9:c6:44:e2:0b:16:cc:9f:c4:
03:d0:6c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:32 2026 by rpki-client