
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
File: 309yD7vOaxVdc1fb5xJspWwevnU.mft (raw, json)
Hash identifier: h8Ypq9AspF5W6XxwjlTkE/dQE8CtIfPwire8F/YJPLk=
Subject key identifier: 9A:D4:DC:53:75:5B:42:E7:5B:92:FD:57:69:F5:35:FD:1F:0B:59:AB
Authority key identifier: DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75
Certificate issuer: /CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75
Certificate serial: 019E31F28A07339A77E6F8642ABBE3A515B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
Manifest number: 04B9
Signing time: Sat 16 May 2026 18:00:39 +0000
Manifest this update: Sat 16 May 2026 18:00:39 +0000
Manifest next update: Sun 17 May 2026 18:00:39 +0000
Files and hashes: 1: 309yD7vOaxVdc1fb5xJspWwevnU.crl (hash: 79Mj9WC20w8256HNzdiS8PR6yvZLCpjMeHcllcxYNKo=)
2: ZiAi_TdUfMkb3j8gN1a3XiArDYg.roa (hash: p3ud5x+KgWlnChdbJ3zLdy64GsE5PLnEtLECSRQZh38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f2:8a:07:33:9a:77:e6:f8:64:2a:bb:e3:a5:15:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75
Validity
Not Before: May 16 18:00:39 2026 GMT
Not After : May 17 18:00:39 2026 GMT
Subject: CN=9ad4dc53755b42e75b92fd5769f535fd1f0b59ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:14:82:52:ad:91:3c:72:c0:e8:d7:d6:14:
70:2e:ad:23:eb:44:7f:f4:fb:cb:ff:27:e4:d2:d7:
da:ff:26:c6:e6:77:64:19:d6:64:67:c6:b2:b4:89:
ab:46:14:da:93:25:70:47:a0:04:29:9b:f2:eb:9d:
42:60:4a:51:4d:58:1b:68:b8:5b:13:5f:b3:ec:ca:
ca:a8:4c:24:2d:3a:fd:74:a5:6c:0c:a1:78:92:d1:
f4:40:cd:dc:40:a1:30:28:81:f0:b2:73:8f:f3:a6:
b4:2e:0c:e0:88:ec:5f:36:c9:4a:11:1e:53:ff:39:
be:d5:8f:8c:5b:02:0b:49:25:c5:4b:21:47:a3:0a:
e7:70:44:e4:fb:e4:e5:a8:75:97:9f:0a:e4:13:9e:
b6:0c:e3:d7:64:80:95:f5:26:92:ef:6b:60:4e:1e:
41:51:f0:75:e5:54:b0:6d:e9:75:c7:fc:1c:b4:e1:
9d:49:1a:0e:df:72:df:51:83:61:d9:fe:14:ad:db:
88:fa:00:fc:1c:2b:86:e5:71:fa:83:81:f1:bd:fa:
5f:00:80:2f:0f:d5:8c:27:41:34:e6:4e:be:ab:23:
8f:f0:ed:1a:4c:0e:dd:49:c1:65:31:56:69:45:eb:
ba:f9:a5:bd:d6:6b:45:5f:4f:b0:32:ce:63:90:7e:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D4:DC:53:75:5B:42:E7:5B:92:FD:57:69:F5:35:FD:1F:0B:59:AB
X509v3 Authority Key Identifier:
keyid:DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0d:0a:3e:cc:b6:d6:5b:0e:47:9a:c2:12:ef:14:95:0c:2a:
b4:c9:1e:0d:d9:e4:d3:dd:e7:1a:d7:41:cf:00:63:a0:25:ce:
8a:26:70:c9:dd:8f:36:27:1a:35:ad:ff:b2:57:9c:10:18:58:
69:65:16:15:0f:85:a2:59:39:f5:22:bd:21:58:99:ed:51:9f:
85:0d:e5:43:dd:62:b4:9c:44:c5:b2:22:f1:81:3d:ee:b0:72:
34:b9:dd:69:96:a7:bb:6c:e4:a2:39:ad:be:9a:c1:16:ca:56:
40:43:6d:64:af:65:7d:16:61:bb:b8:8f:60:0f:8d:e9:04:91:
fb:c1:e1:86:56:44:38:77:55:01:04:ea:9f:06:b9:4b:97:b6:
39:68:84:a0:eb:b8:a6:95:b3:31:08:fb:fb:8a:68:e6:81:46:
7c:f8:31:45:75:b1:da:0d:89:50:f1:d1:7d:79:56:6c:39:25:
18:06:90:dc:1e:f2:8e:bd:99:ff:a1:2e:d4:47:d1:d3:76:84:
4f:ad:b8:a2:19:7a:84:a3:74:0a:0d:c6:4a:a2:7f:ba:32:76:
42:96:bf:c9:7f:ea:b3:6f:73:40:8a:ab:89:d8:0c:2d:7d:90:
45:58:cf:67:46:5f:8d:4f:c4:ae:2a:0c:66:ea:ba:0a:fd:7b:
43:66:b4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 02:07:24 2026 by rpki-client