
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier: CAtnXWhrI9WGnv9z16nSE2jp88pyEFH2gN9kk6Hhoqg=
Subject key identifier: 72:5C:A9:56:CA:A2:E5:4B:EA:1C:62:59:B5:E3:80:69:D0:3C:67:8E
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer: /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial: 019E27DD0B0B9D705FC0CDAF74B2BAF45B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number: 0D44
Signing time: Thu 14 May 2026 19:00:58 +0000
Manifest this update: Thu 14 May 2026 19:00:58 +0000
Manifest next update: Fri 15 May 2026 19:00:58 +0000
Files and hashes: 1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: ImxJ1vXg2oU1zeHQP15wjjhGv5wY/yePJZ2O7aOZNVg=)
2: d5odnptrjJaW4wbv5e-w-InznHA.roa (hash: HdS9hjcjd6FA7NCMLYoBnDJO3cACO6YPZ4nZtli4PVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:27:dd:0b:0b:9d:70:5f:c0:cd:af:74:b2:ba:f4:5b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
Validity
Not Before: May 14 19:00:58 2026 GMT
Not After : May 15 19:00:58 2026 GMT
Subject: CN=725ca956caa2e54bea1c6259b5e38069d03c678e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6b:3a:5c:a9:45:0d:cb:0d:15:f7:98:cf:ad:
a4:4a:9a:96:da:bc:fa:38:a5:da:4b:da:e2:ce:c9:
49:81:55:f2:71:cc:d3:c9:21:74:c1:4a:55:da:3c:
9d:a0:4b:cb:74:d8:74:92:c9:52:28:bd:2a:84:c6:
6b:bb:c1:cb:7b:96:6e:19:aa:97:5d:5a:c1:3e:1a:
2a:83:74:3a:83:cd:13:0d:ed:02:0a:2e:0c:95:ac:
93:2e:ea:29:c9:6f:57:32:77:91:7d:d5:b9:60:ac:
73:4a:5e:d1:44:e6:c9:27:f6:6b:45:a7:07:02:56:
94:8f:21:69:42:8f:0f:cd:16:c5:7b:ba:a1:3c:40:
53:93:34:9a:55:11:e5:0a:82:42:1a:b2:b5:d5:8b:
ce:98:6b:a6:c6:7e:74:79:61:25:19:40:ec:8e:87:
f8:b3:22:32:1f:8e:b0:49:6e:0e:73:27:64:3f:68:
b0:22:80:6f:d9:2a:8d:cd:a4:11:a5:5f:d7:7b:6a:
66:a5:36:cf:48:df:e7:12:68:76:0f:1f:92:93:ea:
3b:56:2e:58:79:5e:bf:04:0d:48:c7:5f:f5:d2:5f:
1c:ff:90:e9:ee:84:cf:09:fd:24:36:df:01:82:8b:
62:f9:75:8c:bc:b7:94:25:46:39:fe:d1:75:8a:a7:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5C:A9:56:CA:A2:E5:4B:EA:1C:62:59:B5:E3:80:69:D0:3C:67:8E
X509v3 Authority Key Identifier:
keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:05:97:96:ab:f0:80:4a:ca:46:6b:26:b7:dd:ad:0e:7b:2b:
f7:48:a6:15:0a:17:15:29:fe:86:bc:ae:de:7c:d2:72:90:19:
30:67:7e:f1:00:cb:0a:af:f5:6e:37:63:d2:6d:74:cf:ae:0a:
43:d2:95:72:5c:e9:50:26:b3:13:df:6b:46:8a:e9:43:c5:dd:
b5:ac:2a:ae:19:d5:36:eb:66:7d:a2:78:80:aa:ee:8a:e7:93:
1d:d4:ba:35:51:c0:6e:cb:ca:56:6f:fe:84:df:cf:d7:74:ff:
ab:f2:6b:dc:7f:e2:70:eb:0c:91:ae:99:aa:95:b0:70:be:aa:
6b:45:df:80:c2:2a:96:c4:f2:65:3f:91:c5:3e:34:cd:83:5e:
f3:05:02:bd:75:a1:e6:40:4a:83:fd:e0:3d:c6:cd:a7:df:bd:
94:be:9d:ae:1f:64:50:43:08:ed:ba:61:9f:25:56:d3:0b:22:
d8:03:59:a8:79:21:2c:20:64:69:8e:c4:f8:3b:97:0a:5d:4e:
bc:4d:bc:43:0e:7f:c3:b9:55:1a:e8:14:85:09:54:94:aa:db:
80:b1:0c:57:da:f5:2d:f5:33:fc:2d:fb:81:51:0e:1a:d5:9e:
fc:a9:fe:c1:92:89:89:b6:29:04:b5:01:a1:be:81:ea:3b:0f:
9d:24:16:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 23:48:55 2026 by rpki-client