Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json)
Hash identifier: rdoqSmN6/WeOWxhk0cODBSY41SIL7FFoS5ijFuSDvfs=
Subject key identifier: AF:FA:1D:3C:E5:F7:86:87:8D:88:D6:1B:91:36:9E:4F:34:C7:E5:BB
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial: 019E314E41DBD21EB865B894FD2DB356D81D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
Manifest number: 1876
Signing time: Sat 16 May 2026 15:01:12 +0000
Manifest this update: Sat 16 May 2026 15:01:12 +0000
Manifest next update: Sun 17 May 2026 15:01:12 +0000
Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: GHCjmfd2JRptDnmCvLI86KlXa7JoFvhTumEgG3crFnA=)
2: oY8wzqxSZtFw6pVYs4NFV60daUg.roa (hash: DFgw9sxWQdsrNBj4RrkibFIZhSj9mHDN7Zn+MkePlLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:41:db:d2:1e:b8:65:b8:94:fd:2d:b3:56:d8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
Validity
Not Before: May 16 15:01:12 2026 GMT
Not After : May 17 15:01:12 2026 GMT
Subject: CN=affa1d3ce5f786878d88d61b91369e4f34c7e5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:62:a2:7a:c4:d2:48:6d:86:5c:9f:b1:f0:
00:df:a6:3e:85:15:97:a9:3c:1c:cf:6c:b4:36:0e:
d9:c1:6b:11:98:78:15:2a:34:4d:19:ce:c1:bb:8c:
dc:31:6c:76:0d:38:6d:2a:49:3f:7e:29:fb:c9:3a:
9c:f9:74:ff:ad:9a:af:2e:87:52:43:54:be:e4:ac:
cb:29:02:8c:5c:3b:30:21:a0:ed:ea:8f:48:d0:3c:
fb:f6:24:dd:dd:f0:8d:67:d6:ae:cc:85:7f:8e:f8:
44:96:56:d7:ae:6e:3a:22:49:45:ff:36:e6:3d:92:
a6:e2:f2:25:ad:f5:ea:17:f3:a5:1e:43:9e:2d:ae:
74:af:09:94:f0:6b:3b:ba:9e:8d:89:c4:ed:e6:86:
24:21:e7:25:6e:b2:0a:bc:51:aa:a8:4e:2f:52:e7:
02:90:67:59:e9:53:fe:4e:14:58:69:85:eb:59:c0:
d2:96:b5:ef:9b:cd:09:7e:73:1f:56:51:32:2e:4c:
73:ff:96:75:c3:58:59:43:ac:8a:ef:3d:4e:f3:19:
5e:04:ba:4b:6c:8f:01:2b:a4:47:20:7b:4f:9a:a7:
14:15:cc:50:98:f3:f1:97:f5:13:4b:14:b2:43:2e:
74:ed:22:5e:5c:f2:9f:e5:23:23:40:6c:5b:73:ae:
c5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FA:1D:3C:E5:F7:86:87:8D:88:D6:1B:91:36:9E:4F:34:C7:E5:BB
X509v3 Authority Key Identifier:
keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:31:bb:79:c6:e3:84:7b:b0:7b:7c:f1:91:58:b6:ec:24:ab:
0d:02:b0:50:e8:59:d1:ae:2d:0d:3f:23:0a:c6:4b:fe:77:9e:
17:51:54:fc:8c:c9:3b:84:79:99:38:32:9e:24:4c:5c:f3:2e:
60:e8:35:19:a2:22:4d:49:cf:bb:63:12:59:2b:ec:63:ff:a6:
17:8c:f0:5e:8d:c2:8c:17:e9:91:52:00:d2:e2:91:c8:5a:b7:
d1:c5:71:c2:e8:0b:94:55:23:f9:87:14:ae:51:86:7c:2a:33:
81:d1:d6:07:50:f3:3b:a3:b8:2c:c9:1e:c2:bd:c0:9f:9b:65:
ce:e3:08:1a:17:fd:5d:f1:88:78:10:96:a1:79:21:c6:28:39:
e6:3a:97:41:d1:8c:74:46:17:90:13:8a:0b:8f:11:73:c2:ee:
2a:4d:3a:d1:8e:07:33:9e:b0:8d:dd:35:ae:f2:90:fb:e4:ea:
98:fd:d9:fc:f6:dc:0c:2d:cb:27:1e:61:e1:a8:19:68:3e:da:
d8:c2:88:33:4d:a1:99:0e:10:e6:fb:66:fb:1e:55:1d:8a:f1:
42:ee:78:77:79:b5:84:41:67:3e:4a:b6:e0:cf:94:70:7d:d8:
eb:fe:af:f4:3c:11:3e:9d:10:4a:e5:05:e5:14:56:62:a2:fe:
57:b8:55:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:45 2026 by rpki-client