Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json)
Hash identifier: TR2Kvkptcq446+JLkwaiszbRrOldLE3XnKb3RQ7ligM=
Subject key identifier: 9F:D0:B5:DD:5B:45:C1:F7:38:D6:F4:78:E9:5B:CA:D9:42:79:32:17
Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Certificate serial: 019E31BBC2FB798FE6AB4938D8C72558FB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 17:00:49 +0000
Manifest this update: Sat 16 May 2026 17:00:49 +0000
Manifest next update: Sun 17 May 2026 17:00:49 +0000
Files and hashes: 1: MiEsRtqbk8f9Jyv8IyxMZOx2e2E.roa (hash: 0+M0KN/0qMyXVee1yKyBcwMkTGKxSKcvVUW4ZAOcFIQ=)
2: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: thCRjDsmNdQiNQWNCBij5Bc1VXhvvBis94WvRHH7ibA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bb:c2:fb:79:8f:e6:ab:49:38:d8:c7:25:58:fb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Validity
Not Before: May 16 17:00:49 2026 GMT
Not After : May 17 17:00:49 2026 GMT
Subject: CN=9fd0b5dd5b45c1f738d6f478e95bcad942793217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:2d:79:93:7c:2d:7b:d2:f6:43:0e:e5:b4:
58:1d:da:b3:87:a6:6f:a2:20:e5:b1:44:0e:26:47:
2b:40:8d:77:86:ef:38:8d:e5:d3:b4:38:6a:72:a3:
e0:1f:2a:bb:82:21:05:5c:18:0a:c3:a8:0c:29:ee:
d3:5f:75:c4:2a:22:b7:a4:76:2e:b6:cd:a0:9d:a3:
79:de:38:a3:b5:dd:ec:4d:6d:67:aa:ca:69:d0:e7:
db:2e:2e:f4:82:f6:0b:40:1d:8b:95:c8:c5:c4:20:
1c:da:2c:cf:5a:6a:33:ef:a1:fd:b8:ef:8b:c8:fc:
97:a6:8c:f6:10:88:e1:13:38:6b:2e:83:43:5e:93:
78:37:8b:89:aa:f4:e7:d6:e9:58:01:82:a5:32:62:
ba:7f:eb:37:71:eb:0d:dd:96:0d:f9:c6:a6:99:5b:
83:87:83:36:b1:36:3a:3f:e2:d1:17:25:05:1e:a7:
ca:f0:c2:7f:85:51:08:b2:99:dc:14:2e:96:20:58:
03:cf:16:8f:76:6e:0a:9c:cb:dc:48:bf:f4:9d:88:
b2:84:c4:9b:72:ba:48:b5:d0:ca:72:af:40:e8:1d:
fd:9a:b0:87:c2:5e:70:18:21:27:d5:df:9b:bb:4e:
d9:d1:0a:86:0b:04:28:60:53:ce:19:9c:54:69:f9:
38:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D0:B5:DD:5B:45:C1:F7:38:D6:F4:78:E9:5B:CA:D9:42:79:32:17
X509v3 Authority Key Identifier:
keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8a:e1:69:f4:18:0e:37:7a:21:18:b5:ae:64:bd:bc:ad:ea:
c7:ac:9b:32:7a:79:51:06:35:da:56:f9:46:88:32:fc:0c:ec:
48:62:c2:4f:94:74:c0:08:71:b5:45:74:bd:ca:59:7a:30:61:
7c:7c:92:86:0e:33:e2:ad:50:21:76:ad:0b:60:4f:d5:da:37:
4b:16:e9:1a:b7:fc:ae:4b:bf:c0:7e:4d:7c:19:40:d7:8b:d5:
6e:ed:47:13:0c:b6:13:99:b8:5c:fb:d2:92:5c:54:90:8e:95:
0e:d8:2a:4a:5f:5b:2b:ae:1b:6d:ee:19:fe:69:db:18:4e:bb:
d1:31:01:1b:04:0f:09:56:c6:b4:62:a4:2d:33:b7:13:13:46:
5e:fe:d6:23:15:86:54:1c:17:b4:07:37:e0:04:7b:fd:13:84:
f3:0c:c9:22:1d:0b:24:11:eb:5d:53:2b:33:28:eb:fd:bc:9d:
5d:80:da:1e:6d:df:e0:76:42:4e:e2:de:74:7b:07:a3:ed:f2:
54:ef:55:02:e4:d3:46:47:60:d2:a5:c8:90:36:76:98:fa:21:
19:7d:a8:4d:53:1b:10:b2:ae:1c:a2:7e:0a:24:4e:b0:30:d4:
fb:05:49:3a:ec:e6:bf:b6:41:7f:7e:c2:7e:e1:b9:3f:05:d4:
85:e3:47:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:52 2026 by rpki-client