Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: ebFsh/+S8KIruPJ8uJ96e7jsMv5PkGatYQaDOZ+lNu4=
Subject key identifier: B5:5F:60:53:9A:19:92:69:9F:8E:E5:EE:60:83:C1:E7:0C:2D:F4:EA
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 019E299470D949FDBAC461FC1BCAE9B8B06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 0A88
Signing time: Fri 15 May 2026 03:00:54 +0000
Manifest this update: Fri 15 May 2026 03:00:54 +0000
Manifest next update: Sat 16 May 2026 03:00:54 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: cmkxwSay0IaqZiim+7Dy4RhBCBuuYOymLa93r9SbBAc=)
2: BcFq67gt-RKOvupOqp8wx9B2E4U.roa (hash: by17HKxYLGTRqXTNejn/CxcA/Hu0QDCXw3xviknWPjI=)
3: vlpxtqpjpQxPD5I7h8_GagReIJQ.roa (hash: TD2wCDrzMV1HjU3in4n/cQ4TcCR7y/LDU6bd62cCGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:70:d9:49:fd:ba:c4:61:fc:1b:ca:e9:b8:b0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: May 15 03:00:54 2026 GMT
Not After : May 16 03:00:54 2026 GMT
Subject: CN=b55f60539a1992699f8ee5ee6083c1e70c2df4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:6d:1f:78:08:03:b3:97:47:65:54:02:6f:
c2:ee:38:48:b8:92:00:87:d4:49:aa:66:fa:f0:5f:
79:9d:2e:5d:9e:8b:65:2c:93:2f:80:86:05:3f:bf:
6d:ff:a0:be:08:8f:92:29:d0:d0:6e:86:f3:84:ea:
84:43:b3:a8:4b:ee:5b:2f:37:aa:d6:0a:0a:4f:57:
02:e1:76:2c:50:8c:56:0e:09:15:48:5a:3c:92:dc:
c1:e8:3a:85:b3:a7:24:3f:a4:a9:65:ea:08:7b:e4:
b1:45:a7:15:7d:2f:93:c8:66:2a:80:a2:de:b0:e5:
cd:3d:fe:5a:47:d3:b0:e4:61:d9:a0:73:ec:9e:ed:
06:bf:61:d9:09:c2:8a:c0:a7:a4:95:d2:37:aa:ec:
33:9a:1a:86:16:2d:c3:eb:51:8c:15:d7:a9:51:5a:
32:65:61:7c:84:22:01:24:7b:22:b9:e7:fd:e8:b3:
e2:1c:60:c2:e3:d8:ed:bf:0a:0c:07:ae:2e:27:28:
b9:0d:bf:7e:ff:d2:54:99:ca:a5:b8:c6:0d:d8:25:
50:c1:f2:26:5d:44:f5:67:ea:f6:bc:1c:2d:34:25:
28:d2:49:75:8f:a1:e8:a8:f3:e2:04:b6:f1:e5:99:
c2:14:24:1f:c7:1a:74:1a:b8:a7:9e:56:c4:0e:50:
45:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5F:60:53:9A:19:92:69:9F:8E:E5:EE:60:83:C1:E7:0C:2D:F4:EA
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c4:e3:dc:7e:96:55:63:03:df:11:2a:52:cd:24:16:7b:00:
35:57:e2:b8:f9:93:0a:71:c0:70:c8:26:47:70:bc:ae:ac:6d:
97:4f:f0:2c:c7:e5:94:91:5c:08:a1:8d:da:fc:a0:ef:a4:77:
ee:4e:b8:17:d3:6d:96:24:20:a5:bb:e2:28:b3:36:ba:26:af:
de:91:89:6e:29:6b:bd:d1:1b:1b:c0:70:e5:65:75:49:0d:40:
7f:a9:fa:bf:13:3e:69:4d:e5:23:f6:8e:1a:e1:42:ea:0f:42:
94:27:c7:df:6e:57:83:0b:d4:6d:8e:a8:a5:b1:e8:c3:2a:95:
12:71:41:75:29:64:44:55:75:b9:1a:ba:cb:85:06:aa:40:30:
35:5e:2d:ba:a6:93:14:3d:03:4d:92:e9:89:84:d6:ee:c8:e5:
39:45:8a:b7:9c:b0:ce:6d:93:fe:7e:7e:99:bd:d0:9d:46:ac:
6b:25:d6:b5:ec:69:88:70:1e:4f:78:6d:5b:62:9b:63:45:7e:
8a:c2:14:3e:f6:be:bd:06:9f:85:f2:c0:46:81:3f:49:dd:58:
a4:16:b8:db:1f:91:71:e5:49:4d:1d:63:5f:b2:4f:2e:0a:85:
be:d6:03:3b:36:5c:bb:1c:5d:ae:8e:72:cc:da:07:cf:ca:67:
1d:01:63:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:15:04 2026 by rpki-client