Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
File: 9iZUZY9nKqzzcTO1xxz0sRwYado.mft (raw, json)
Hash identifier: 3rKuH3QM7hW5qj8/VkH9V8T0Q6B8Y6E0v8Pv2LPRJhk=
Subject key identifier: 92:F8:84:C1:91:EB:EB:20:5F:7C:9C:0E:F9:88:84:25:43:DE:7A:4B
Authority key identifier: F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
Certificate issuer: /CN=f62654658f672aacf37133b5c71cf4b11c1869da
Certificate serial: 019E2994F4AA46E5D8FC7002A6559F4D5F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
Manifest number: 0417
Signing time: Fri 15 May 2026 03:01:28 +0000
Manifest this update: Fri 15 May 2026 03:01:28 +0000
Manifest next update: Sat 16 May 2026 03:01:28 +0000
Files and hashes: 1: 9iZUZY9nKqzzcTO1xxz0sRwYado.crl (hash: F1NZ7MjbYEiGeBVpllH9FjAnKt7Q0CIK69qv8v8ybnc=)
2: d6pd06B5mnNywdYo5eZBwLJxfT8.asa (hash: ETla8YTJcM+5uBnfvCMaInkUnAmAwDLx0tjpRZMyWmk=)
3: tvMXQZLl7Wysz_xvdn4KxR27LYI.roa (hash: DS+mGSmFWnDI1NNRJFgUsn5iaFW320NJTO3U5Mk3hfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:f4:aa:46:e5:d8:fc:70:02:a6:55:9f:4d:5f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62654658f672aacf37133b5c71cf4b11c1869da
Validity
Not Before: May 15 03:01:28 2026 GMT
Not After : May 16 03:01:28 2026 GMT
Subject: CN=92f884c191ebeb205f7c9c0ef988842543de7a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:97:b1:09:cb:e2:20:af:d2:97:03:f1:c2:
98:f5:0b:54:c7:67:4a:a9:82:78:d0:7d:86:7a:e7:
de:6a:02:ff:7a:07:28:63:47:f8:2a:fd:6b:37:b5:
17:a7:2a:2f:f6:82:39:9e:77:6d:92:f6:5d:45:6d:
8e:b5:04:5c:69:45:8b:a6:ba:b0:4f:db:ac:32:ad:
bd:6c:cb:e4:1e:05:16:dc:87:51:52:bb:32:02:ee:
be:52:a3:97:dd:48:0d:dd:62:80:3f:15:7c:24:35:
fc:6d:5b:02:8c:ec:b1:e2:10:48:16:81:38:a6:2f:
18:74:11:fa:ca:21:6a:7d:13:1a:82:80:00:03:1d:
fa:eb:2b:dd:25:09:78:ee:b6:ae:d1:6b:a1:10:e6:
9f:18:02:aa:d9:c1:c2:70:03:c1:a0:9b:68:a5:8c:
58:84:30:87:47:62:50:1a:f5:94:f1:aa:c6:32:26:
82:f7:ba:86:37:88:99:02:e2:cc:9c:ce:3e:63:2b:
8f:a8:85:4e:e4:5b:1a:f5:36:f1:fd:46:4a:27:5b:
8b:41:d4:83:da:e1:de:e5:81:23:e5:02:4b:dd:83:
a1:27:f5:e0:da:d2:cb:66:25:93:5f:2d:77:7c:6e:
4c:a5:11:00:18:59:e7:7d:a3:e5:ac:11:41:25:55:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F8:84:C1:91:EB:EB:20:5F:7C:9C:0E:F9:88:84:25:43:DE:7A:4B
X509v3 Authority Key Identifier:
keyid:F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0f:8f:9f:2a:32:1d:0e:44:15:33:6e:2b:ff:05:26:b8:b1:
51:d6:3e:4c:35:43:2c:8f:ed:9f:86:f9:51:fc:cd:a6:8a:f4:
62:97:ae:54:90:4c:c1:9c:86:ad:0c:47:c0:42:fc:b2:89:da:
48:4f:97:c0:cf:5d:e9:8f:11:82:eb:4d:78:24:bf:a4:42:22:
39:67:7d:91:54:67:85:17:30:e4:18:ea:65:af:25:a5:7d:2d:
5b:e5:2a:b7:d0:75:39:c6:09:40:6d:0e:12:8d:b7:d9:01:5d:
12:be:e0:20:7e:c1:8f:23:24:fe:bf:9e:ee:bc:a5:ee:58:39:
3f:b1:f7:e2:38:24:4e:f9:78:9c:d6:8d:53:5b:89:8e:47:c0:
d5:63:a3:8a:b3:36:4c:62:ae:dd:17:e5:d7:93:f4:1f:4d:ec:
29:dc:ea:7c:7f:75:28:b8:06:84:8b:03:2d:f1:9a:4d:44:dd:
01:81:6f:de:c5:44:93:46:b6:5e:cb:05:cf:1c:73:1b:d9:b0:
a6:36:a7:8f:19:4c:ae:1f:23:97:77:60:e0:b0:b9:79:68:df:
2c:ed:7a:67:27:b4:0d:11:fc:b5:d0:5b:e1:27:a0:df:f0:8f:
cf:1f:78:3b:0f:0c:34:82:14:73:28:dd:fc:2d:fc:e9:21:68:
72:01:f0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:50 2026 by rpki-client