Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
File: 9E8rYv2EXJFI4OImQldIw8bpdTk.mft (raw, json)
Hash identifier: 5qCLgL+v0LanxBRTK3MY7gzLlbworAPh0Ktk7XHrcvw=
Subject key identifier: 95:0E:B9:34:CA:B6:09:F6:B5:DE:97:9C:37:00:2C:B6:56:8A:31:7F
Authority key identifier: F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
Certificate issuer: /CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Certificate serial: 019E30A9139F30769C2C40B2DE16956069E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
Manifest number: 0891
Signing time: Sat 16 May 2026 12:00:47 +0000
Manifest this update: Sat 16 May 2026 12:00:47 +0000
Manifest next update: Sun 17 May 2026 12:00:47 +0000
Files and hashes: 1: 9E8rYv2EXJFI4OImQldIw8bpdTk.crl (hash: 0nDglnFjsEdsWOR3CSmvT8OxLfrds0WY7y4EE8DKN0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:13:9f:30:76:9c:2c:40:b2:de:16:95:60:69:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Validity
Not Before: May 16 12:00:47 2026 GMT
Not After : May 17 12:00:47 2026 GMT
Subject: CN=950eb934cab609f6b5de979c37002cb6568a317f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:ef:6c:a8:00:33:be:0d:ee:67:75:cb:da:
73:0b:79:18:24:3f:05:af:ce:04:30:ad:f6:bb:cf:
5f:da:06:4f:86:74:f4:48:58:9a:f4:46:33:26:1b:
59:40:36:e3:2c:69:7b:3c:64:3c:d9:df:a2:3d:f3:
1e:0c:96:03:af:63:06:49:df:e5:26:65:1c:34:56:
ac:99:4b:22:c7:8f:7e:86:e5:0b:66:fa:26:2e:f8:
9a:2c:a9:b6:32:ab:12:61:9e:67:d4:30:4d:a3:af:
39:bb:98:78:df:e9:3f:6f:39:ed:6b:9b:73:38:95:
7a:e3:c1:2e:df:0d:cb:17:28:94:98:6e:51:bd:16:
3b:26:76:9a:44:f8:34:7a:8c:76:8d:42:f1:a1:e9:
9b:f5:e9:d9:39:a0:d9:ec:5e:8f:01:38:b7:44:76:
9d:e4:ec:02:bb:e8:d0:82:23:e1:31:6b:6a:a8:1f:
88:d5:cb:b5:ab:aa:35:42:8d:46:5f:cc:f8:b5:87:
91:0f:fe:a5:72:c1:60:db:d4:3f:74:f1:2e:e0:a2:
d4:0f:d2:2d:ca:55:0a:16:39:b4:6f:06:33:e3:25:
26:85:bf:2f:82:55:1a:b0:61:ba:4e:c4:07:e9:b0:
f4:92:8b:14:e0:9a:cc:71:5e:ab:60:d4:58:80:dd:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0E:B9:34:CA:B6:09:F6:B5:DE:97:9C:37:00:2C:B6:56:8A:31:7F
X509v3 Authority Key Identifier:
keyid:F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:96:cc:59:08:45:09:38:ab:f8:09:0d:16:30:44:e2:48:36:
ff:34:72:7f:b7:4d:3b:5a:6d:de:61:b7:a1:14:1f:35:db:c0:
4c:2e:24:67:39:e9:28:47:b2:ce:6b:7b:00:49:e5:95:e3:8d:
f1:b7:e8:d1:45:40:42:4d:59:99:a1:63:b5:f4:f3:a8:5c:e0:
e2:8a:5f:b5:d9:bb:98:db:27:2d:fc:33:71:2b:60:bc:e9:bc:
25:b8:3e:f9:7a:55:c3:da:52:1d:72:7c:0b:ab:6f:92:3d:8f:
b1:4d:e4:e3:a4:c1:38:c1:bf:d5:08:e6:2b:37:9f:a8:37:1a:
43:32:96:90:08:16:6d:e2:c8:f3:4a:37:f1:af:f8:6c:c8:3f:
74:02:67:87:c1:6f:b9:61:62:d5:56:26:68:98:5e:f5:28:e9:
45:8f:ec:9c:9e:fe:fb:e7:aa:b5:3f:21:66:b4:d2:c0:f3:32:
60:96:dc:70:2f:de:04:35:5d:05:fd:d0:e2:12:19:cf:99:de:
6b:05:26:4a:b6:31:c5:be:f3:2e:1e:e8:6e:a3:7a:bf:94:b3:
12:1f:7d:65:d2:bf:07:99:74:ea:8b:28:c7:74:8d:2f:43:76:
30:c0:92:bb:f3:68:e1:46:76:e6:81:0c:12:d9:d4:c7:75:63:
f5:15:6f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:35 2026 by rpki-client