
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File: 9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier: 6uRvLSyqLuwN7QsIkOt8OmUDVtPT2OdmQn5HR4aM+9Q=
Subject key identifier: AE:24:CE:02:1E:87:13:CD:D0:B1:69:99:2D:49:EF:75:D9:C1:E3:EC
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer: /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial: 019E2FCDFB8DCF2EE5E7CE089664E4EE69CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number: 190C
Signing time: Sat 16 May 2026 08:01:28 +0000
Manifest this update: Sat 16 May 2026 08:01:28 +0000
Manifest next update: Sun 17 May 2026 08:01:28 +0000
Files and hashes: 1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: XMpe96F8HYCN35uYRWE1Annsb4rXXhtTAihOWGl9fqI=)
2: GNmi18wQl4vtlo-9lVpDdUD44U8.roa (hash: PX3LxFRdOujIRS22JaSLS22PgqGNSnD4VtofU70m2Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:fb:8d:cf:2e:e5:e7:ce:08:96:64:e4:ee:69:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
Validity
Not Before: May 16 08:01:28 2026 GMT
Not After : May 17 08:01:28 2026 GMT
Subject: CN=ae24ce021e8713cdd0b169992d49ef75d9c1e3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:f1:a3:14:76:96:23:93:21:90:1f:93:44:
b8:67:e2:d8:7b:9a:1a:4d:c1:b8:0b:2a:49:52:4a:
61:b4:6c:74:f7:c8:c6:16:23:06:a7:50:e9:52:7b:
60:9e:7c:bd:7b:0b:da:fb:aa:d6:02:c2:cb:7e:0b:
50:7c:0c:98:35:a8:39:eb:7d:da:00:f7:96:a7:33:
6b:76:c8:e6:e2:7d:a9:55:d7:2f:2b:60:d9:2d:6c:
bb:56:9a:b7:11:e9:3b:a2:4b:ad:7c:bc:43:ce:63:
3e:db:9a:ef:31:2e:72:e2:4b:9d:fb:8d:7b:94:69:
5e:56:79:26:7d:26:88:bc:d2:86:09:14:69:47:f9:
32:24:c4:f6:da:1e:e7:12:67:47:90:1e:23:bc:84:
f7:e3:a4:f9:9a:fd:0d:64:1e:05:a8:64:4c:d9:95:
1e:6b:65:21:7e:06:12:0b:c2:42:a3:16:a4:71:06:
73:83:8f:5a:9d:4d:fd:a4:c0:eb:d7:08:10:70:25:
2a:8b:36:72:39:96:3c:61:92:5c:18:34:8a:7f:40:
9d:2f:5f:21:c3:65:81:75:68:48:3b:d0:37:a9:5e:
00:f9:10:40:ee:f2:be:d4:40:25:37:4d:a1:a8:f8:
b5:a6:22:05:10:2c:49:cf:5f:8b:fd:19:29:3e:8e:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:24:CE:02:1E:87:13:CD:D0:B1:69:99:2D:49:EF:75:D9:C1:E3:EC
X509v3 Authority Key Identifier:
keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8c:df:d0:30:ab:59:07:b7:2a:5e:e0:88:24:13:6e:34:de:
3d:b3:37:26:b9:a8:41:56:13:12:76:2c:12:e8:18:ee:ad:b1:
ab:f3:13:d8:0c:c8:3c:e4:ca:f3:5c:0b:a2:4d:27:d0:b4:98:
b6:ba:57:53:00:56:ee:98:f7:94:1e:07:fc:19:29:b3:0c:6d:
5c:31:b3:fc:22:3d:25:41:c3:33:38:cf:02:0b:25:31:9d:5f:
82:50:b6:7d:44:15:22:f2:f5:30:a7:67:9f:96:37:72:39:63:
4f:62:be:2d:1e:ed:da:6c:54:94:b3:2b:16:e7:f7:f9:2a:bb:
34:01:03:8b:13:1d:af:09:ec:2d:2a:93:ca:8d:aa:1a:55:fc:
e7:d7:b4:a9:1a:a9:1b:77:1f:be:5d:d2:28:f3:5e:a9:df:c9:
43:5c:50:e7:fd:f2:52:83:f0:7b:fb:58:9e:4b:c0:3b:ca:82:
8b:be:77:38:02:2f:09:a4:45:54:45:db:e4:c9:b2:e2:3d:67:
ac:b2:94:e2:13:35:d8:cd:6e:60:e8:11:b8:d0:38:72:96:4b:
95:29:4a:fa:ec:76:f2:46:57:e4:e8:05:22:c2:bc:d3:5b:a2:
56:8f:2a:a5:0a:9d:70:d8:ea:89:f9:e2:53:d8:be:9e:9b:55:
07:73:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:59 2026 by rpki-client