Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
File: 1-c9m7XQoo55j8NJzYDf0McQao08.mft (raw, json)
Hash identifier: V0DZhWFhettMveWzoY/5CRQk+Sgt9tm8vAih8fGOSi0=
Subject key identifier: 5B:A5:BF:11:56:42:30:12:ED:D6:49:1D:2A:4F:A5:95:E1:5D:5D:51
Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Certificate serial: 019E314E072E8C8BCC83DC4A6CE9FC2677B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 15:00:57 +0000
Manifest this update: Sat 16 May 2026 15:00:57 +0000
Manifest next update: Sun 17 May 2026 15:00:57 +0000
Files and hashes: 1: 1-c9m7XQoo55j8NJzYDf0McQao08.crl (hash: UdsgK0PHxcSIFZLUcWFl+VgXxi98PTq4ff04hBImbc0=)
2: 9Oi-skDqT11YOFGA1xXs-LnJ9RY.roa (hash: rHObD1OASYFGq7YdeSfBqKYMqx4XVn3mmaRGeO1liZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:07:2e:8c:8b:cc:83:dc:4a:6c:e9:fc:26:77:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Validity
Not Before: May 16 15:00:57 2026 GMT
Not After : May 17 15:00:57 2026 GMT
Subject: CN=5ba5bf1156423012edd6491d2a4fa595e15d5d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:1c:22:69:00:a5:06:fa:6c:8b:c5:83:2d:
33:08:64:a5:16:62:2c:5d:eb:c8:c6:36:b4:a3:dd:
5a:25:d7:9b:39:26:aa:c5:a5:fe:17:48:24:a6:a0:
55:a6:d3:52:d1:d8:8c:da:f0:4e:bf:51:72:c5:e2:
c1:e7:55:21:b4:55:d8:d3:e2:20:24:9d:43:5b:d9:
25:30:69:ea:35:80:3f:3d:12:bb:3f:1b:a7:a3:c4:
f1:11:f1:c8:3a:f9:16:2c:24:20:22:26:23:93:f2:
d5:de:48:01:28:4a:e2:c0:3c:85:f5:71:6e:a8:f4:
5c:1e:b2:a1:7d:f3:13:6f:29:67:84:87:85:c2:ca:
75:a2:40:af:c1:b0:a6:72:66:4f:9b:4f:90:bd:f2:
a7:74:12:ed:ac:24:c9:35:48:ca:98:fd:8b:5b:d5:
29:71:f5:c1:eb:72:75:08:7a:94:86:c6:8c:65:7d:
93:47:11:cc:d8:98:00:0e:aa:be:e6:f8:80:5c:00:
4e:9e:63:07:58:0c:8d:7b:0b:19:16:82:7c:1b:35:
1d:4d:80:a1:96:76:8c:58:22:d9:28:df:1e:e4:9a:
13:1d:da:fc:51:16:99:cc:79:51:f9:f6:bc:20:ba:
db:de:a4:c3:98:cf:35:c8:0f:d3:f7:80:30:cd:f0:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A5:BF:11:56:42:30:12:ED:D6:49:1D:2A:4F:A5:95:E1:5D:5D:51
X509v3 Authority Key Identifier:
keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5e:6f:68:27:ea:f9:bd:2a:c2:d0:2e:57:6a:ee:33:e9:77:
de:00:4d:2a:cc:6e:1e:04:0a:56:68:3b:8c:fc:c9:8e:7c:e7:
66:6e:b6:2e:3d:99:4c:04:c2:5c:2b:19:cc:72:9b:5d:09:90:
8c:18:c6:48:4f:cc:34:2f:0a:4c:d9:6e:64:fb:14:2e:89:71:
9a:4a:ee:0f:6a:ec:98:17:2d:d3:85:3b:81:ba:e1:9a:84:63:
03:ae:d0:1c:d2:cb:72:8a:ef:2d:1d:37:1a:b8:ca:be:99:a5:
b3:eb:29:ad:c7:7a:be:41:69:e2:79:3c:74:54:41:fb:60:0e:
93:da:ce:24:2e:f8:2a:71:bf:0b:aa:03:be:69:21:63:60:ff:
73:e7:63:38:79:23:8e:77:bb:12:9e:18:02:33:63:8c:29:a8:
56:6e:93:46:5f:9d:e8:56:3c:1e:f8:0e:bf:48:15:60:42:5a:
bd:30:7d:18:b2:60:0f:00:56:49:47:4b:e0:e2:42:72:06:17:
08:9f:1d:09:00:3e:1d:58:c4:dd:82:60:2b:66:c0:5c:2f:db:
dc:fb:ec:62:d4:22:bd:ad:6b:56:0e:75:ff:11:a0:f8:c9:b2:
1d:e7:ca:d9:c7:c9:50:9b:21:9c:8b:7c:3f:32:0e:05:a8:b1:
9f:26:04:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:14:04 2026 by rpki-client