Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
File: 9SHhdPhPcWWWHUG2jqcmLigzfWk.mft (raw, json)
Hash identifier: uEdyrv5jMFi5xs2pb0ZUxZ27fXofDI66mxFDWzQibVg=
Subject key identifier: 5B:84:49:26:51:D2:13:5B:B2:5D:24:A2:93:34:00:0E:2F:EB:47:91
Authority key identifier: F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
Certificate issuer: /CN=f521e174f84f7165961d41b68ea7262e28337d69
Certificate serial: 019DEE5B5DC11BC65E92CAD9A125E5441DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
Manifest number: 026F
Signing time: Sun 03 May 2026 15:00:58 +0000
Manifest this update: Sun 03 May 2026 15:00:58 +0000
Manifest next update: Mon 04 May 2026 15:00:58 +0000
Files and hashes: 1: 1-rxopH5LJ9Uzi5ISHJXR-dur0jc.roa (hash: aHfsmVZKRy+7AFPaygX163J+5qjXxNU2emyKoCQGtN0=)
2: 9SHhdPhPcWWWHUG2jqcmLigzfWk.crl (hash: GC0dH+uf+eWZ0RHJuH5TPBDCxeQx5Mq7XezoEk+AIQQ=)
3: F_pPHJDcrHyVOVWzvhakia7DJiQ.roa (hash: tFJBSOLCH7tZWWFthieckptanNdtDSMnw7UCYwe6+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ee:5b:5d:c1:1b:c6:5e:92:ca:d9:a1:25:e5:44:1d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f521e174f84f7165961d41b68ea7262e28337d69
Validity
Not Before: May 3 15:00:58 2026 GMT
Not After : May 4 15:00:58 2026 GMT
Subject: CN=5b84492651d2135bb25d24a29334000e2feb4791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:ed:07:5e:97:0f:55:83:2b:a5:81:93:d7:
f5:84:d8:11:5c:48:6a:d1:33:88:71:83:fa:c4:12:
ec:4f:50:37:62:4c:55:18:40:af:ed:ea:a8:a5:84:
8b:93:be:b7:dc:6a:e6:e8:a0:40:25:8b:5c:94:ea:
07:ef:76:de:dd:9b:ae:c6:0e:00:57:62:77:db:9a:
4c:d8:25:57:90:02:74:69:20:96:79:48:d5:ec:1b:
93:6c:6e:ef:88:98:2f:8d:ec:c9:ca:22:c7:33:78:
ba:ba:4f:90:75:fd:c7:b8:84:c5:33:83:1b:37:9c:
59:8b:d3:05:82:9b:7f:26:3c:19:38:14:56:70:cb:
dc:64:f8:cd:6b:f4:27:39:48:f8:73:57:88:f0:29:
9e:27:a9:80:3c:08:40:bd:89:25:66:cd:b4:d3:63:
20:7f:70:21:b6:20:c6:0f:b3:4c:29:0a:c6:dc:d6:
19:27:ba:84:cc:d2:38:68:7e:41:51:4f:2f:bf:fc:
69:fe:2b:b8:3f:33:4c:f4:38:5c:97:0c:d7:65:85:
9c:e8:2b:d6:b5:a9:91:35:e7:10:3a:c8:1b:df:eb:
02:54:59:b5:57:44:22:d9:99:95:3d:cc:7c:38:7f:
4b:0f:45:1b:24:a3:b6:25:bc:b1:7c:eb:7f:d8:ca:
b3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:84:49:26:51:D2:13:5B:B2:5D:24:A2:93:34:00:0E:2F:EB:47:91
X509v3 Authority Key Identifier:
keyid:F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:65:51:53:fe:bb:5b:87:88:1b:4f:20:9a:fb:85:a9:33:41:
62:de:75:2c:8f:87:d2:64:d9:c7:f2:40:21:09:e8:f6:eb:c0:
3c:3a:e6:ea:c1:45:2f:e2:6a:f6:45:00:4c:c6:8a:92:65:dd:
14:dc:a2:e8:34:fb:b1:68:45:63:1d:c7:c8:b6:78:27:ba:a3:
8f:c1:4d:39:49:e2:03:05:40:5e:0a:6a:eb:f8:79:b2:21:97:
fd:90:64:33:1c:36:59:73:40:0a:3e:ac:ee:41:40:ee:f3:02:
72:e3:d6:4a:3f:5c:8b:d1:1d:9c:b5:17:8f:7f:01:6d:a3:f4:
c2:70:8f:be:df:56:a8:b2:42:87:4e:d3:58:4f:b9:38:e5:04:
82:e5:08:bc:44:75:b4:68:ad:a8:7c:35:ff:a0:fa:c6:a6:b5:
1d:b2:ac:aa:c9:95:5c:a4:b7:70:aa:4e:fb:65:ae:d0:ab:fa:
d9:28:ba:4b:97:92:7b:a9:2f:49:69:7a:bf:21:80:7d:c6:11:
4a:e1:75:41:99:eb:43:4f:27:72:15:6d:ed:33:89:f1:69:92:
4c:69:54:5b:0f:dc:53:33:c1:89:2c:4c:a7:de:1e:04:4a:ff:
80:ec:e1:5e:7d:7c:68:62:71:55:49:d5:2b:fd:ca:48:95:30:
18:e2:32:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:50:17 2026 by rpki-client