Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier: 464OTDV6zMZGteENf7EtMuAktZfBNpP7xEzkXetrz/4=
Subject key identifier: 31:E4:D3:93:CA:09:F3:C0:71:8E:78:89:DA:7E:6F:0A:92:23:72:2B
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 019DFC4E308BA15951BFEC52BDEDA994ED3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number: 16E9
Signing time: Wed 06 May 2026 08:01:15 +0000
Manifest this update: Wed 06 May 2026 08:01:15 +0000
Manifest next update: Thu 07 May 2026 08:01:15 +0000
Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: C039YXGGmTMPVpqnMXapWM5mrdkqdolRpujFMSvSOhs=)
2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:4e:30:8b:a1:59:51:bf:ec:52:bd:ed:a9:94:ed:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: May 6 08:01:15 2026 GMT
Not After : May 7 08:01:15 2026 GMT
Subject: CN=31e4d393ca09f3c0718e7889da7e6f0a9223722b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:bd:22:57:a8:33:23:9c:c1:b7:af:4a:07:
97:ca:e3:aa:17:b4:38:56:ec:41:cc:32:33:35:1b:
97:15:91:a1:3d:3e:23:e5:80:fa:8b:00:e2:f6:43:
f5:15:60:1f:68:82:ba:08:04:47:42:d3:de:ee:03:
9a:b6:ae:aa:de:6f:b6:fe:22:b5:e5:91:c7:a6:d2:
0b:e8:e2:ea:7c:25:d8:d0:df:32:e5:d8:7b:f1:72:
d3:c8:ee:db:51:b3:ef:f2:20:5c:a9:cd:a5:ff:e4:
5c:47:60:d8:96:1a:50:e9:00:15:00:f4:1a:d7:58:
b4:8f:f5:c3:30:26:79:70:98:1a:d1:ed:c7:0f:56:
84:81:96:6b:73:86:6f:fa:a3:1d:f3:22:66:97:94:
63:f6:83:99:30:b8:da:2f:09:d2:97:f6:9d:3f:65:
61:b3:c7:ef:fb:6e:49:5b:ee:b0:33:3e:40:5c:71:
6d:d8:2b:f2:09:e5:2c:04:da:40:90:4d:cf:62:c8:
2b:79:c6:da:b5:45:29:e7:27:40:ea:8f:b5:bd:40:
94:d7:84:72:03:41:b2:cc:6b:b2:57:15:38:3f:c5:
43:88:27:fd:84:d6:47:2e:df:43:9e:3a:b7:ce:35:
29:cc:b2:d8:fc:72:74:d0:a5:5c:ad:00:bd:08:a4:
eb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E4:D3:93:CA:09:F3:C0:71:8E:78:89:DA:7E:6F:0A:92:23:72:2B
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:dd:de:0d:00:26:02:bd:2e:1c:69:bc:c9:9c:d4:a0:1e:b8:
09:8f:b4:31:cd:8a:f3:aa:f7:c4:d8:45:ef:3a:03:9c:54:ff:
56:ad:13:02:4b:b7:b7:f8:86:c4:fb:08:81:b7:c0:cc:cb:0a:
c0:73:22:75:a4:ec:aa:95:c4:01:05:e3:73:15:84:0f:c0:a6:
26:fb:13:7d:2b:52:37:7d:ac:93:7d:5d:6a:37:56:26:82:8e:
d4:e7:d4:75:b9:2a:2e:74:b6:2c:0a:81:42:aa:53:93:ca:33:
6e:0f:e3:61:6f:19:b7:26:5f:c9:31:57:8c:49:99:80:64:63:
61:68:2d:89:2d:54:63:c5:d5:23:c8:8c:12:ff:fa:71:bb:59:
e7:11:2d:1e:3d:f4:cd:e5:9d:bd:81:75:f9:22:cb:d1:0f:d0:
5a:29:57:d4:f7:37:b8:f9:69:d4:9e:40:44:5c:52:93:6a:f2:
a7:8b:96:63:93:52:c2:ff:07:4f:13:59:e5:ef:48:c5:cb:45:
d9:ab:f2:e2:f1:00:88:f2:5d:f2:f1:9a:0b:a2:c5:b7:34:c3:
17:d7:85:02:a3:9e:09:5a:d6:7b:04:fd:0d:ca:e0:de:8e:14:
a1:26:8d:e0:5d:03:25:d0:91:0a:4f:68:1a:55:38:bd:a1:38:
22:4c:cd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 15:51:01 2026 by rpki-client