Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier: nl1g8SDU5sBRQZOataLRxbPQSDvtlHBfAevoiDL3DMs=
Subject key identifier: 43:AB:3E:46:41:3B:45:7D:CC:AD:71:7F:D9:1E:05:87:8B:68:27:33
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 019DE1449936A58FA20E7D87BD504F3585EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number: 16DB
Signing time: Fri 01 May 2026 02:01:02 +0000
Manifest this update: Fri 01 May 2026 02:01:02 +0000
Manifest next update: Sat 02 May 2026 02:01:02 +0000
Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: yPpWwlg2cxID9+4RavzUmbPw5XYuz5eqZRJsa5mhspA=)
2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e1:44:99:36:a5:8f:a2:0e:7d:87:bd:50:4f:35:85:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: May 1 02:01:02 2026 GMT
Not After : May 2 02:01:02 2026 GMT
Subject: CN=43ab3e46413b457dccad717fd91e05878b682733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8a:e1:2d:de:be:a6:02:df:22:21:37:92:4a:
bb:80:e0:b4:ec:c1:87:0c:1a:64:d9:49:ed:d8:4d:
46:dd:69:70:90:28:2e:9d:fa:dd:f4:37:68:9e:65:
39:4b:11:85:ab:f3:c4:d9:b2:f6:cd:48:9e:ac:d6:
c0:5f:31:bd:19:e6:41:b6:4d:31:37:d9:fa:7e:4c:
b6:d6:e9:da:37:8d:b2:63:e6:cb:e9:65:b2:77:5a:
2c:d6:4d:b4:e2:93:9d:e3:5d:06:10:09:52:82:2d:
18:d0:b1:c8:6c:80:47:7b:58:a5:d3:37:78:43:27:
0d:ca:aa:52:77:59:0a:89:7b:23:ac:d0:a0:78:86:
84:31:e8:ef:e3:4b:62:4b:1a:ee:17:35:45:65:2d:
8e:b2:ec:b8:34:ba:9d:5b:3c:0c:d0:b3:70:23:d0:
d1:fc:1d:c8:92:89:bf:fd:9c:f2:31:83:aa:ec:25:
6c:1c:d4:49:7b:17:06:88:35:d5:a4:79:e9:55:ee:
21:79:33:32:53:66:34:d1:87:98:7a:c7:f6:d8:9d:
3a:3b:f9:cc:45:9a:8f:99:2a:15:de:d7:56:82:1e:
15:50:2b:5c:12:b0:c1:a6:50:11:d1:f6:91:23:7f:
f1:a3:f0:f9:3f:5a:46:5a:54:ad:59:88:72:a9:eb:
be:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AB:3E:46:41:3B:45:7D:CC:AD:71:7F:D9:1E:05:87:8B:68:27:33
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ea:cb:21:bc:17:48:88:7a:18:36:04:01:32:88:3c:ca:68:
60:9f:b9:ae:11:f5:bd:c3:d6:b5:47:4e:7d:69:8d:2c:c5:16:
e9:90:cb:9c:3d:24:15:c7:4d:80:21:17:29:a9:09:1f:4e:1b:
b5:da:31:45:bb:db:e8:72:86:01:fe:2a:6b:e9:4e:fa:87:00:
d0:41:bf:1a:b7:0d:36:7a:77:da:3c:94:89:bd:66:38:26:c6:
4a:6e:cd:b7:ec:f7:34:ed:ae:a8:9e:59:6a:0c:50:38:2b:1b:
e0:9c:90:0e:e3:05:b3:70:8f:bc:a4:ca:dd:2d:7a:f7:66:64:
3b:d8:e6:74:db:96:f4:a8:48:e3:c3:d2:83:ec:f0:47:15:94:
89:89:42:7f:36:55:64:35:60:a0:e4:d9:f5:40:28:0b:59:da:
b8:d5:8a:8a:13:16:f6:13:0f:e7:68:9f:43:a3:bd:6c:75:01:
00:f7:55:22:37:d1:7a:52:fe:66:4c:c7:7e:00:b9:82:d9:df:
05:65:d2:20:36:e2:ed:7a:e3:d1:fb:50:cd:82:57:9e:b0:0c:
84:a2:52:98:e3:a2:9f:cc:7d:48:88:39:e9:13:58:ed:ea:93:
2d:52:f3:01:ee:0d:dc:0b:62:15:e6:82:c5:69:84:fd:4a:3c:
0f:bb:80:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 08:33:53 2026 by rpki-client