
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
File: 9MCqez48v_iCYq3ZKzOeNQUc4aA.mft (raw, json)
Hash identifier: iHbh4MYSz2o7IwfyeUOlQXmrnPWb56eiaWVLBlybO7I=
Subject key identifier: 49:00:34:3C:C9:46:63:C7:EF:29:3F:32:2F:F5:90:3C:8C:D9:85:ED
Authority key identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
Certificate issuer: /CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Certificate serial: 019E31BC24D64FD14DB7C0089E7CD455968B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
Manifest number: 191F
Signing time: Sat 16 May 2026 17:01:14 +0000
Manifest this update: Sat 16 May 2026 17:01:14 +0000
Manifest next update: Sun 17 May 2026 17:01:14 +0000
Files and hashes: 1: 0_QYSKDM1E8AIeaj5A3-e2-IZDQ.roa (hash: iSrziuFWhwGiTIYynmk/3TshTVjLewHwXF7ynz9OoD4=)
2: 1R40RwSkegC_HsL5IAb308RJy7c.roa (hash: NUiWWxJmf6nBjZL7nemqUuYwgnn2w0RTzkdB/U1hYno=)
3: 9MCqez48v_iCYq3ZKzOeNQUc4aA.crl (hash: 34+60d5UE4/btIxU03F7kiFky9kRSZjketB+/G0fic8=)
4: EqS1nZtD5q3-hD6eGWo79wyXkPI.roa (hash: EvlZqUb0IshNQRyxXXr64YjbLkvNa5sXZ6G8L2JNtcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:24:d6:4f:d1:4d:b7:c0:08:9e:7c:d4:55:96:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Validity
Not Before: May 16 17:01:14 2026 GMT
Not After : May 17 17:01:14 2026 GMT
Subject: CN=4900343cc94663c7ef293f322ff5903c8cd985ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:93:42:c5:a1:12:a3:57:b5:c5:0b:8b:a0:
07:91:e9:58:a2:e9:79:2e:1e:d9:b2:33:55:35:4d:
11:50:7c:56:6b:eb:c0:c6:27:25:49:ea:a4:e2:56:
3e:ec:9f:5c:fc:46:15:26:74:d2:a3:cc:ae:98:ee:
d5:92:d6:cf:96:0e:a5:56:22:e5:2e:5d:e7:99:0e:
d3:27:4c:2c:57:82:2a:e7:72:9d:1f:59:c5:c6:84:
fd:00:71:5a:6d:92:1e:2a:b6:c7:b4:47:67:d2:36:
65:8d:4a:44:9d:00:a5:bf:44:0a:ff:cb:c2:d1:1c:
95:d8:71:2b:c8:8a:9c:40:82:1d:65:0c:dc:8d:be:
6b:48:af:26:3d:a3:44:77:6b:35:de:fa:a8:92:98:
bf:14:0d:69:d8:58:70:6a:d7:73:d1:e6:c2:21:8a:
d0:e7:66:cf:67:7f:71:20:cc:30:9d:bc:15:ca:e9:
43:a2:d9:e6:e5:d2:0e:48:ff:cb:39:5d:24:6a:77:
80:49:9f:b3:15:66:41:46:0d:65:07:00:84:2d:52:
82:0f:50:88:d5:33:a1:da:7c:ce:c4:a9:e2:35:9a:
d4:65:91:3b:1e:a3:34:34:eb:93:cb:e5:75:15:6c:
8f:3e:d8:67:44:9c:bb:d0:de:cc:f3:c7:32:9c:b7:
b9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:00:34:3C:C9:46:63:C7:EF:29:3F:32:2F:F5:90:3C:8C:D9:85:ED
X509v3 Authority Key Identifier:
keyid:F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:99:02:31:c7:8f:e0:13:0d:14:27:cc:49:9e:ef:0e:e8:66:
9d:9b:de:2e:63:87:ca:04:fa:02:29:af:4d:98:e7:8c:70:cb:
ab:e8:c1:5c:89:42:09:ae:7f:0a:81:c7:8a:a0:7f:23:b1:33:
76:ba:6d:19:27:3d:27:f2:6d:ff:c1:48:95:b3:c6:68:5c:29:
66:86:b9:98:aa:47:32:62:94:20:85:4f:8c:40:0e:ba:62:41:
60:49:83:60:2d:a3:ac:8e:b3:6d:a5:fe:4b:3e:06:dc:c3:1c:
6a:13:fe:f1:3f:d9:64:c4:41:b0:90:69:26:14:32:54:52:43:
62:76:a6:6b:3f:60:93:3d:a0:58:01:7a:d6:3b:d1:33:7b:e9:
ea:b0:83:a8:cb:0a:68:a9:6d:91:64:27:1e:24:31:a0:32:9e:
99:7a:8c:cf:02:16:eb:69:1f:7d:11:cc:47:cd:e0:a4:18:26:
28:dd:09:74:97:f3:aa:1e:2d:41:d8:94:25:10:46:0b:ff:3e:
43:0c:71:90:a8:18:9b:e3:02:85:0c:33:fb:74:4a:76:0e:4a:
b6:b6:78:3e:cb:35:76:c0:8a:ed:41:dd:db:19:5b:31:ee:1c:
14:dd:2e:c0:2c:e0:c7:a0:d5:8f:7f:cf:08:ff:73:17:b6:db:
29:d5:86:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:15:05 2026 by rpki-client