Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
File: 9vojpSZFyW2w3bFNJPa08FWfvis.mft (raw, json)
Hash identifier: ZZET77ToomndzcEXWptElCW6oioOo/NbO92qy2l6lB0=
Subject key identifier: CA:F4:C8:EE:A7:2E:D4:B8:3B:FF:D0:2F:7B:76:7B:60:04:5E:B0:18
Authority key identifier: F6:FA:23:A5:26:45:C9:6D:B0:DD:B1:4D:24:F6:B4:F0:55:9F:BE:2B
Certificate issuer: /CN=f6fa23a52645c96db0ddb14d24f6b4f0559fbe2b
Certificate serial: 019E311776E9D934F89A416AFBEF03E727F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
Manifest number: 0110
Signing time: Sat 16 May 2026 14:01:21 +0000
Manifest this update: Sat 16 May 2026 14:01:21 +0000
Manifest next update: Sun 17 May 2026 14:01:21 +0000
Files and hashes: 1: 9vojpSZFyW2w3bFNJPa08FWfvis.crl (hash: 6xztYtzQeH6rys9d41j8RSuQ+elKGN8YLi8RpE9HAgU=)
2: Y05s2C2gAhXtNYGjGMDlYLY9J1o.roa (hash: iorVZeRHEyFOVeQ+otFT4qEcKzaY5W8TFT5LOqiFu0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:76:e9:d9:34:f8:9a:41:6a:fb:ef:03:e7:27:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6fa23a52645c96db0ddb14d24f6b4f0559fbe2b
Validity
Not Before: May 16 14:01:21 2026 GMT
Not After : May 17 14:01:21 2026 GMT
Subject: CN=caf4c8eea72ed4b83bffd02f7b767b60045eb018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:a5:d0:9b:05:7f:43:87:e2:56:42:8f:3d:
2c:dd:b0:ee:b3:91:81:f2:78:0b:f7:f8:d7:03:e1:
e0:20:08:de:3a:1c:bb:af:88:c7:26:64:dd:64:99:
a3:18:8f:c1:ea:70:48:0b:3f:71:21:da:6d:fc:41:
b0:c2:af:a7:98:26:3f:55:72:6e:7a:59:03:7a:54:
23:9e:19:fa:0f:93:16:90:06:79:5b:9f:1a:dd:20:
39:f8:eb:12:4d:b4:ac:2e:a3:2d:f1:1c:73:ba:6f:
56:db:ec:15:07:75:56:d6:d2:2e:d6:89:a7:11:c1:
0f:28:d9:1b:42:11:48:ed:8a:c0:a3:c6:4e:a9:fc:
61:0b:66:ff:8f:2f:45:77:33:85:1b:27:3d:f3:37:
b9:9c:69:89:f9:26:dd:55:2e:9e:85:e7:70:32:f9:
1c:e3:67:71:82:c0:b9:70:52:77:79:0d:5d:35:ef:
a9:f0:6b:2b:e8:a7:23:05:3d:6d:cf:03:73:eb:d8:
df:a3:61:cb:44:6b:22:3f:1d:b5:8c:3f:4b:76:52:
81:28:72:7c:96:6a:12:2d:bc:ab:7f:6a:c7:d9:bf:
ba:49:88:f6:4c:ce:72:e3:3b:65:ba:82:c3:29:79:
87:e0:37:71:bd:7e:22:36:d2:d7:d9:bd:9b:dd:2e:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F4:C8:EE:A7:2E:D4:B8:3B:FF:D0:2F:7B:76:7B:60:04:5E:B0:18
X509v3 Authority Key Identifier:
keyid:F6:FA:23:A5:26:45:C9:6D:B0:DD:B1:4D:24:F6:B4:F0:55:9F:BE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5f:9f:d3:99:52:c4:7f:1c:87:4a:4d:69:34:92:55:d4:21:
b5:bf:0b:bc:7e:d2:65:0a:df:fc:a9:5e:a2:3a:db:59:4d:8f:
33:94:01:b6:be:b4:69:a3:cb:72:7d:ba:d9:ee:69:c1:c1:cf:
37:dd:86:ab:50:3b:11:3a:5a:da:6a:13:de:e6:78:bd:8d:cd:
fe:65:44:7b:10:c6:9f:cb:b3:7f:6d:6e:df:c8:70:0f:fa:cf:
42:29:1a:71:f6:ee:46:43:c3:0d:e1:5f:db:d6:56:0d:3c:2b:
fe:1b:47:e8:dd:b6:1d:22:9e:58:6c:fe:36:fd:ab:4b:90:75:
45:9e:73:7e:ff:bd:1a:7b:8e:60:44:bf:46:3e:4b:ad:f4:82:
52:b2:eb:a1:bc:f7:8a:70:11:39:f8:ad:1a:76:63:54:64:bf:
69:e6:1f:be:d9:96:71:b8:2b:1e:89:26:82:6c:c7:89:0d:b5:
28:f5:ea:88:a3:cf:db:45:4f:3e:57:88:31:63:67:b7:c0:38:
5e:95:f2:98:08:7a:e4:69:e9:59:5a:ee:e1:14:5e:28:a8:37:
08:3c:79:7b:ba:0f:22:84:fc:dd:33:0c:c0:1f:28:1a:bc:04:
36:0c:53:c4:ef:43:ef:01:c9:1c:6b:35:aa:21:48:ba:3a:2c:
df:1b:8e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:44 2026 by rpki-client