Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
File: 9jXHTatSTz72yWtovplcMCXPD-A.mft (raw, json)
Hash identifier: e2YfnUVZu/v2tSNRj+8wtMMTUGV8JVsY931s5uG+cRo=
Subject key identifier: 43:5E:29:22:02:B1:9E:4F:58:90:AA:71:61:1A:BE:9A:52:46:39:E2
Authority key identifier: F6:35:C7:4D:AB:52:4F:3E:F6:C9:6B:68:BE:99:5C:30:25:CF:0F:E0
Certificate issuer: /CN=f635c74dab524f3ef6c96b68be995c3025cf0fe0
Certificate serial: 019E2A708848B54A9DD91AA6D65A65D8003E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jXHTatSTz72yWtovplcMCXPD-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
Manifest number: D4
Signing time: Fri 15 May 2026 07:01:18 +0000
Manifest this update: Fri 15 May 2026 07:01:18 +0000
Manifest next update: Sat 16 May 2026 07:01:18 +0000
Files and hashes: 1: 9jXHTatSTz72yWtovplcMCXPD-A.crl (hash: zLRcj6xPKd47Sq7SMgdHIYtcZI01r1iFymYg/vcJsLw=)
2: JYgzUyiaZYs05bVlx3hglGkBd1Q.roa (hash: BMikKwWOpzTQc4z6QjV3HCSDgmz4fqzntIpupmntBpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jXHTatSTz72yWtovplcMCXPD-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:70:88:48:b5:4a:9d:d9:1a:a6:d6:5a:65:d8:00:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f635c74dab524f3ef6c96b68be995c3025cf0fe0
Validity
Not Before: May 15 07:01:18 2026 GMT
Not After : May 16 07:01:18 2026 GMT
Subject: CN=435e292202b19e4f5890aa71611abe9a524639e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3f:a6:fa:ad:d8:c0:53:0a:9e:32:ca:0b:82:
be:ab:1d:ef:95:8e:02:86:18:b7:75:2e:3a:e3:0c:
6e:86:2f:6c:9c:c2:d2:05:6b:e2:d6:ee:56:db:c0:
c9:6e:21:1f:6d:43:88:e9:6b:0f:80:5d:99:96:fa:
29:76:e9:3e:66:65:72:d0:ea:c6:08:13:b9:ef:7c:
7e:ad:da:7a:bc:ed:e6:2d:cb:d5:05:1a:f7:48:1a:
da:ae:08:a9:14:ce:2a:16:4c:80:3e:78:73:3a:c9:
d9:f8:4d:86:49:ad:d9:59:89:b5:6b:ba:1e:c2:9a:
7b:fc:2f:9c:2d:9d:f6:c8:52:7b:41:8f:ee:fc:7d:
de:97:de:e0:e7:bc:25:62:41:e0:4d:06:82:56:67:
ce:b2:b6:76:b7:a4:e6:5c:b1:9b:96:35:bf:d9:a1:
01:35:cb:a5:7c:c3:39:65:b5:27:fc:79:09:75:31:
d9:3a:d0:ce:df:77:38:bc:3d:20:bd:9d:f7:8f:1f:
48:92:42:10:e0:d6:2d:6d:ac:ee:6f:be:c6:f2:cf:
d8:c8:58:22:e9:26:bc:88:bc:9d:c2:20:99:3a:89:
ff:c1:42:a9:65:6c:06:53:c4:fa:be:49:60:73:5d:
81:5a:35:91:33:cc:21:90:fb:c6:9b:87:ad:4f:d4:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5E:29:22:02:B1:9E:4F:58:90:AA:71:61:1A:BE:9A:52:46:39:E2
X509v3 Authority Key Identifier:
keyid:F6:35:C7:4D:AB:52:4F:3E:F6:C9:6B:68:BE:99:5C:30:25:CF:0F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jXHTatSTz72yWtovplcMCXPD-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:74:e7:a0:34:df:8a:e3:54:e5:b7:0d:2c:80:9d:54:ce:3d:
90:a6:d8:c4:c5:b6:e9:15:59:2e:d5:fc:a8:12:95:63:36:82:
66:2a:df:b8:a7:8b:f6:6f:89:32:c2:ee:0d:b4:b8:e2:08:cb:
8f:08:32:45:62:46:7e:10:17:74:46:a3:1d:94:b6:9d:76:34:
7d:b9:38:c7:5d:e7:17:97:02:f3:f9:40:72:ab:21:20:05:00:
43:1a:d6:9e:0b:bb:93:28:16:55:2a:e0:1c:71:c6:65:41:5a:
b5:b9:39:07:cc:c5:5a:d6:eb:f7:0e:aa:2b:43:67:42:92:b8:
21:dc:3f:35:20:cf:ec:4d:68:07:c3:da:c9:11:17:e8:d1:29:
fb:67:88:23:f5:3f:1c:17:1b:43:d7:4c:a6:81:fc:72:7d:85:
4d:01:92:85:ff:bf:83:3d:a8:29:e7:3c:4d:db:c8:98:17:8c:
c5:bb:cd:da:d4:7c:2e:8c:d6:40:a1:2c:31:ac:05:63:ca:82:
7d:20:38:55:fc:75:b9:53:4d:99:00:9e:43:d9:37:8f:1b:ae:
e0:8f:56:08:3c:8d:fb:b6:d4:fa:d3:bd:f3:ba:43:f6:e4:35:
73:f8:a3:80:04:15:42:12:62:8d:68:d0:6b:aa:92:e6:dc:3b:
ae:91:0e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:45 2026 by rpki-client