Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
File: 9oBoAaqBnIocqImNFZiUkJzoKCk.mft (raw, json)
Hash identifier: XRsPfHBMOxCNZMet0hLE6VdZc21w29MD32TsUm9lLXQ=
Subject key identifier: D7:C5:63:EB:CE:25:78:64:BE:0F:48:BA:DE:EB:AF:9D:7F:5A:B1:BB
Authority key identifier: F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29
Certificate issuer: /CN=f6806801aa819c8a1ca8898d159894909ce82829
Certificate serial: 019E29CBC169A56A897B3447FEAC4F1BBDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
Manifest number: 1E
Signing time: Fri 15 May 2026 04:01:19 +0000
Manifest this update: Fri 15 May 2026 04:01:19 +0000
Manifest next update: Sat 16 May 2026 04:01:19 +0000
Files and hashes: 1: 9oBoAaqBnIocqImNFZiUkJzoKCk.crl (hash: HZ5Y1Pt+gndewKIduLHlN/S4rXmJeHEwxufDsaLvAoM=)
2: ystfWuwLG_sjkRPz74-K9kJmCS0.asa (hash: A/Zpc7HU31s0tuJut1dPdLlpZdSrvy9Su9vtCFoJBpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cb:c1:69:a5:6a:89:7b:34:47:fe:ac:4f:1b:bd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6806801aa819c8a1ca8898d159894909ce82829
Validity
Not Before: May 15 04:01:19 2026 GMT
Not After : May 16 04:01:19 2026 GMT
Subject: CN=d7c563ebce257864be0f48badeebaf9d7f5ab1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4c:07:46:d5:d2:cb:04:9e:76:a9:4e:87:8f:
4d:fd:21:55:07:cd:86:ce:fe:4d:b7:37:6f:1f:ec:
3f:7f:d2:ef:50:94:e9:3a:0f:36:44:fa:d0:72:ce:
7d:56:c0:b0:ae:a7:ad:35:7f:a2:d3:2c:2a:46:41:
6b:c3:23:ed:17:4f:86:75:fc:a1:21:d9:ad:ac:46:
e9:b7:17:60:ec:85:ea:a0:a9:d8:cb:35:d8:95:e7:
ca:1a:84:ba:69:d5:7f:f7:84:b8:91:a5:16:af:c9:
9a:d2:b6:81:dc:9c:29:87:3e:26:e0:66:9d:e4:30:
22:b6:9e:bb:e2:44:d1:41:14:e1:9d:87:63:06:76:
c6:86:85:c2:bc:4a:3c:70:5d:43:46:11:22:72:f1:
7d:01:3e:12:32:a9:dd:02:4c:a1:e9:19:06:a8:ba:
75:a3:67:eb:00:c6:80:ef:96:83:a1:90:4c:25:95:
05:91:dc:46:d7:bf:33:56:b7:0a:2d:3e:0d:a6:7f:
24:85:50:30:e7:cb:60:7e:52:d7:cd:d6:2b:6b:e8:
ae:18:6f:66:89:f4:75:fa:4f:cb:91:c5:0d:ab:6f:
33:b9:3f:e1:2d:ca:d8:c4:cb:81:ec:e7:42:13:d0:
3e:e4:ea:ba:d2:51:d4:89:51:d8:54:53:c8:e8:88:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C5:63:EB:CE:25:78:64:BE:0F:48:BA:DE:EB:AF:9D:7F:5A:B1:BB
X509v3 Authority Key Identifier:
keyid:F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9d:2f:0e:9f:32:0b:8d:22:6c:d7:87:1f:f9:87:b3:85:62:
84:c6:cf:3e:72:8f:85:ff:31:ee:20:f1:a2:64:ca:94:fd:f7:
ee:c9:3a:04:db:5f:b4:dd:5b:eb:9b:33:65:03:47:06:ca:fa:
b5:c8:5d:c0:d7:91:fa:04:0f:11:41:8e:c8:a5:ff:40:69:e3:
73:9d:d6:82:40:f8:bc:98:b6:07:8d:91:29:d3:57:eb:53:8e:
8b:03:57:5f:d9:1e:ee:b3:f6:dd:33:ff:a1:8e:8e:fe:8e:27:
0c:a6:ff:9a:0e:60:42:3f:90:ef:5b:94:fe:02:73:ae:ef:d2:
90:a1:2f:d8:fd:53:a2:5e:7d:ea:d8:01:c1:ea:6f:1f:5a:e3:
e4:3d:e4:3d:a9:92:88:45:64:0a:a6:51:7e:29:b0:45:48:70:
8c:c3:ff:aa:7d:11:d8:b3:80:c8:3a:bf:5b:59:96:33:88:3b:
90:5b:90:c0:9c:31:2b:2a:38:28:a1:6d:bd:d5:2a:fe:79:79:
8a:35:01:7e:60:82:c7:07:21:64:b2:e5:94:60:af:82:69:ec:
f6:45:8d:7a:62:56:08:b8:c7:8a:e5:84:3a:86:7b:78:16:6c:
05:f1:8a:80:aa:3a:e5:d2:4b:b7:fd:de:0d:29:c7:ae:21:5f:
97:8c:40:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:14:14 2026 by rpki-client