Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
File: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft (raw, json)
Hash identifier: sUdzt+OgtyqJL7k9HgdvrySsqQdjiddkVUVSyajt0gg=
Subject key identifier: CA:46:E2:06:6C:C5:B3:4B:4D:BF:31:8F:32:00:37:98:3C:35:DE:FB
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Certificate issuer: /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial: 019E30720282061BE73AB5DB2F253E783777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
Manifest number: 1786
Signing time: Sat 16 May 2026 11:00:38 +0000
Manifest this update: Sat 16 May 2026 11:00:38 +0000
Manifest next update: Sun 17 May 2026 11:00:38 +0000
Files and hashes: 1: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl (hash: aoylFbQv8mwUJij4RtEozYl71OLBPi3UHxsHQoOiVsE=)
2: BrhtiCQ6piwiqQ1pBvv28oLuyG8.roa (hash: ryijqGxwQHpnmrcmVfe+7BnWPcERkXO0XSnxMSNhaks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:02:82:06:1b:e7:3a:b5:db:2f:25:3e:78:37:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
Validity
Not Before: May 16 11:00:38 2026 GMT
Not After : May 17 11:00:38 2026 GMT
Subject: CN=ca46e2066cc5b34b4dbf318f320037983c35defb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:24:ef:52:57:bb:60:c0:cb:15:c2:9b:4e:
80:f5:28:c4:a4:ed:44:d6:e1:36:90:fa:6a:94:ec:
10:68:dd:c0:9c:37:91:52:7b:4f:07:63:91:84:0d:
a8:fd:78:bc:f8:7a:93:c5:df:07:16:a1:b1:17:38:
79:4f:85:0d:1c:5d:00:29:c5:3e:38:f4:ac:df:ec:
ac:c4:21:d9:58:51:b9:89:b1:08:c6:b2:09:ef:df:
8f:a8:fc:15:7e:e2:09:c1:20:17:2d:69:11:a0:75:
d1:83:8e:0c:86:0a:a7:e9:07:86:91:88:06:c7:4c:
11:f9:93:d8:7d:ba:9e:dd:ab:32:67:58:ec:95:37:
5b:f4:cf:48:d0:0d:6e:b9:9c:fd:29:d8:e9:80:05:
f6:6d:f4:57:bc:73:be:f3:64:be:dc:03:17:42:76:
cc:07:19:3d:1f:3e:f1:a2:52:6b:d5:79:5b:b0:cf:
71:1e:67:68:5f:b8:af:a4:dc:b9:a7:9a:f6:dc:b6:
30:1e:e5:70:4e:25:ac:e5:42:58:ea:d2:ea:35:33:
98:ff:89:5b:cb:19:81:f2:b7:29:8a:a5:c3:bc:9c:
6f:64:a4:34:8b:5d:8a:cf:9e:53:d5:15:53:c2:75:
dd:15:51:41:ff:1d:db:d2:9b:68:b6:c1:5c:2f:ce:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:46:E2:06:6C:C5:B3:4B:4D:BF:31:8F:32:00:37:98:3C:35:DE:FB
X509v3 Authority Key Identifier:
keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:cf:b0:69:70:3d:19:43:ce:ca:3f:c1:60:2f:fb:16:16:ad:
ef:04:74:38:a9:bb:df:61:31:49:ba:29:94:ae:9e:15:91:ff:
18:f1:08:fa:c6:6b:2e:a1:2a:af:92:f3:29:3b:9c:54:9f:21:
70:6b:1b:15:c1:90:f4:09:35:ff:17:60:51:36:61:0e:c5:61:
24:14:8c:12:fd:b7:49:6a:ce:e2:b1:22:31:39:de:e2:37:9e:
46:f5:bc:92:ae:f1:45:cf:be:3c:24:72:dd:c1:21:b0:45:52:
d3:7c:11:aa:52:e7:ed:f5:af:e7:00:c6:59:a4:36:aa:ab:b2:
dc:70:a0:d8:95:70:64:63:28:88:05:ee:74:51:41:ac:d3:e2:
d6:be:1a:59:b1:db:92:66:b1:9b:3a:ea:93:09:8e:87:fe:f8:
c4:c0:7b:0c:e6:47:06:7a:f6:fa:6a:22:c0:a9:8c:ef:3e:49:
32:70:90:46:45:25:ed:4f:94:c8:3a:bc:ee:ea:86:c6:65:08:
59:92:8d:53:af:7b:20:af:04:cb:ea:6f:d7:db:ff:49:f3:7d:
99:a9:ea:a6:9a:23:b1:aa:e9:e3:c1:73:c8:f1:4e:90:41:6f:
a1:37:28:4f:0e:a2:30:69:e7:9a:ee:d9:ac:92:94:0b:81:ca:
38:83:b5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:20 2026 by rpki-client