Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: Umi2ER5Fpx68lFa18hfja6dRVYjXqy4FyJYD5i/Bsuk=
Subject key identifier: 9C:6F:B7:9B:F2:D9:71:20:73:8C:01:66:D6:B5:B8:E3:C4:85:BD:52
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 019E4F585F4973D34E1AFDDCA9571D8B4CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 08D7
Signing time: Fri 22 May 2026 11:00:51 +0000
Manifest this update: Fri 22 May 2026 11:00:51 +0000
Manifest next update: Sat 23 May 2026 11:00:51 +0000
Files and hashes: 1: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: blyeoapbxIkRCJ+dipJDJVQdw+pQn9HUNrIqxl8xsEA=)
2: Fps0S7Sn9x24RbjpA_m-Wjxe4X4.roa (hash: llVgeSirYRMnxHxg+jow3ZLNY2RJpGEBaB4uInwuLpg=)
3: q7LASc7RAdvhKI2lD0l4EEgjIM4.roa (hash: Nr2UUQFi//KxEpaf+hC6t8vMKhEd7i+ElopwPR5ej6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:58:5f:49:73:d3:4e:1a:fd:dc:a9:57:1d:8b:4c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: May 22 11:00:51 2026 GMT
Not After : May 23 11:00:51 2026 GMT
Subject: CN=9c6fb79bf2d97120738c0166d6b5b8e3c485bd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:49:be:a9:6f:a1:77:4b:68:cc:6d:50:f3:
04:8a:75:43:ca:6d:06:b4:bd:32:ed:8b:8b:69:a2:
c4:0f:e0:9d:73:49:a1:4b:e0:0f:f5:38:f2:94:6f:
74:10:71:8a:ff:82:4a:b8:a0:1c:f2:99:2a:d9:bb:
b1:5c:d2:8b:b4:ef:fc:52:5b:06:9c:b9:b8:75:81:
66:c6:ed:b1:21:b4:10:22:d7:43:ce:4e:d4:2f:b4:
4d:74:0d:51:cd:be:3e:db:01:ef:77:d6:94:96:8e:
f3:78:ab:31:4a:44:e8:f8:86:64:88:30:99:2e:76:
cb:99:44:8b:e3:d4:e3:16:81:e7:b0:ea:94:1d:f4:
a6:b7:d6:72:94:eb:ee:77:2b:4c:be:94:47:21:16:
2f:a5:ab:d7:f0:6d:5e:c5:02:02:50:30:84:95:3f:
26:9d:e0:3a:9e:48:f3:1f:27:1e:0d:17:ca:40:56:
c6:e4:99:4c:38:2e:a0:d1:a8:28:dd:b6:8c:9d:8b:
ac:30:62:fa:aa:98:20:6c:69:4a:97:c8:23:e5:60:
83:e3:3b:5c:b6:60:0c:0a:8a:ca:96:fa:5b:2e:33:
b5:1a:ec:04:fc:0c:fc:55:d5:48:43:bf:8d:5c:c7:
d3:45:67:52:96:b3:01:a1:d1:ac:97:88:e5:e0:df:
bf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6F:B7:9B:F2:D9:71:20:73:8C:01:66:D6:B5:B8:E3:C4:85:BD:52
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:01:d4:72:01:a7:80:93:b6:cb:f8:7b:ce:79:ba:41:28:f1:
e7:f2:8a:51:11:4a:bc:37:14:01:69:54:91:f8:29:8b:44:40:
43:9e:db:cf:0e:74:3c:7d:9c:30:7e:8b:5f:f0:e0:7a:bb:af:
96:8e:78:88:0a:45:fc:4b:68:3a:c2:b8:5a:9e:86:e3:ef:be:
79:5a:96:1c:81:db:51:7a:34:65:73:8b:fa:9a:a9:45:fe:c8:
27:57:1b:32:16:5d:5d:11:b2:3f:f5:19:f3:74:0c:e8:13:87:
9e:74:90:65:3f:2d:90:2d:a9:af:e0:dd:63:f8:0f:d6:56:4d:
60:b2:d5:77:0b:7a:b3:5b:d5:40:c2:b4:37:60:9a:ee:83:1a:
49:09:24:04:ec:01:19:d5:6d:e4:50:95:88:06:c0:44:7b:3c:
f9:43:fa:af:47:9c:a5:f7:08:9f:8c:d4:99:8f:86:55:ca:f0:
66:a5:38:eb:a8:00:7e:b7:32:af:e3:df:29:23:c1:f7:76:03:
37:21:24:a2:31:2c:39:8a:92:40:42:f7:b2:58:7f:05:2c:08:
f2:60:4e:07:56:18:cc:35:cf:57:44:86:df:0c:67:9f:52:79:
46:0d:84:ae:8d:ee:7d:28:45:b0:22:53:37:5a:a3:d6:e1:5b:
62:5b:67:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:11:48 2026 by rpki-client