Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
File: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft (raw, json)
Hash identifier: f1ViFpCIIVldfFFlbJD64G38eFMu91Acik8PbhdkiOQ=
Subject key identifier: B2:71:38:DA:5C:9C:E3:3B:C3:17:24:81:EF:2D:2F:26:78:9E:30:AA
Authority key identifier: F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
Certificate issuer: /CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Certificate serial: 019E284AA661982DC3384011D38B8A3A02E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
Manifest number: 02AA
Signing time: Thu 14 May 2026 21:00:41 +0000
Manifest this update: Thu 14 May 2026 21:00:41 +0000
Manifest next update: Fri 15 May 2026 21:00:41 +0000
Files and hashes: 1: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl (hash: qie71JJ9MGCXtsQOHpeNfUz/1QQg2jNN83eEgPR1vgg=)
2: W3uokoIan0bL_6hGsLT2Lc4cFQY.roa (hash: lnmDhnBJ1en6JgsP5wQ9r3eh318nNpbuOqRdtOpx05A=)
3: c7-vm7ayWM43onBxMirp6xh4ses.asa (hash: Yn9xC9hv7PLljqa8pOnthNeGkVr/8TT8ccV2WmSMABI=)
4: mqyazNOfM1ZVPm3cOVRYyNHDwpA.roa (hash: C7VZbHKV6HPYsBlX1X4bgcS+0xR52AiRYn6dtHpeMwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:4a:a6:61:98:2d:c3:38:40:11:d3:8b:8a:3a:02:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Validity
Not Before: May 14 21:00:41 2026 GMT
Not After : May 15 21:00:41 2026 GMT
Subject: CN=b27138da5c9ce33bc3172481ef2d2f26789e30aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:5e:f9:eb:07:9c:60:e8:2a:7e:3c:08:83:
db:d6:d8:6b:00:b1:58:fe:4a:6a:a3:1a:de:83:7f:
7b:80:c0:63:cd:18:bd:22:5d:e1:6b:7b:1b:70:56:
34:2a:7b:a4:db:fb:76:76:06:bc:e8:fe:57:e8:06:
62:83:b8:e3:0c:7b:a0:61:83:da:b9:16:cd:ac:10:
40:fc:68:4c:4b:94:7a:1f:2f:fb:58:6a:30:bd:2b:
e5:7a:94:87:b4:2e:65:03:19:9f:ae:42:56:07:b3:
37:30:4a:cb:dd:36:d1:03:6c:15:e0:dd:f7:d9:a4:
2a:54:dd:f3:22:f8:e7:bf:26:fb:68:e8:ce:db:20:
b9:2e:cb:11:55:3e:de:32:7f:ad:a8:19:cd:77:85:
57:e6:50:7e:7c:e7:43:3b:df:0d:5f:e3:a6:34:6f:
e5:30:c7:78:37:76:c0:4c:69:81:05:85:27:26:4b:
39:b0:bf:a2:9f:5f:97:33:7d:3b:ec:fe:d2:7b:73:
83:a7:34:d8:89:fe:34:c9:78:fe:ba:fa:8d:6f:28:
be:2c:39:5d:f4:78:0d:49:6d:97:42:5d:32:ea:f6:
73:b2:2d:ec:d1:98:fd:64:e4:9c:f6:f2:51:c5:89:
74:c3:b5:d1:16:23:ca:30:6e:b7:45:86:b0:f2:63:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:71:38:DA:5C:9C:E3:3B:C3:17:24:81:EF:2D:2F:26:78:9E:30:AA
X509v3 Authority Key Identifier:
keyid:F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:66:e4:cc:0e:28:5a:c0:12:07:42:18:ae:39:c0:6f:ad:fe:
f0:58:d9:da:48:33:ee:8b:80:ae:0e:7f:2b:97:00:ad:49:2b:
0f:b5:7f:e0:3b:43:f4:cc:6e:31:e2:a8:76:35:12:c5:15:fb:
72:e0:46:bd:30:de:38:2d:ae:f4:46:9b:fa:9e:57:69:a7:bb:
38:e6:e0:30:05:46:95:c0:57:f2:af:6f:da:1e:6d:b5:79:7b:
04:45:a2:6a:b2:0c:e1:4b:6b:79:22:7a:5d:c1:0f:c1:3b:c0:
f9:3a:9a:45:91:83:3d:c8:70:e3:86:48:5a:71:f2:07:c1:c1:
fa:33:49:09:a7:b1:89:5e:75:59:af:77:c8:10:77:97:fa:b5:
74:10:dc:65:54:44:52:8f:1e:56:bf:68:9e:3e:40:80:33:a8:
00:e7:38:03:c6:5d:f4:62:d3:58:02:b8:9e:83:45:1f:9c:fc:
37:ad:1c:20:4f:cf:45:57:4e:98:73:50:eb:4e:8d:e7:2f:ef:
13:8b:73:7d:44:4a:e5:16:76:b7:33:81:80:47:0a:75:ec:72:
c4:1e:ec:bb:2b:7a:d3:df:b1:ab:85:2f:30:87:f1:c0:6f:aa:
54:61:4a:1d:9d:f0:71:e8:e3:52:c8:a1:29:ef:a0:8e:4d:19:
c4:51:a9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:57:01 2026 by rpki-client