Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier: DjE31T2vRxHjgt39JGUNEIcQN2RrRPXf+9QJsnUw74Q=
Subject key identifier: 42:AD:F1:84:B6:E9:DC:72:9E:53:92:5A:B1:04:71:A5:31:3B:CC:6F
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial: 019E54B5CE97CB5168FE3D48A1A90B0509EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number: 1921
Signing time: Sat 23 May 2026 12:01:01 +0000
Manifest this update: Sat 23 May 2026 12:01:01 +0000
Manifest next update: Sun 24 May 2026 12:01:01 +0000
Files and hashes: 1: SKpYBqwn6udQHU20Uf2pG2NVjSc.roa (hash: 0Drji27vy2Cr4dvgFBfhAgVdOvdDdCwXZsDdSfaarcA=)
2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: uSbXIgkNmaoGUTM3LkeIq64UNiU8AmAHxQNRBX33UDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:54:b5:ce:97:cb:51:68:fe:3d:48:a1:a9:0b:05:09:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Validity
Not Before: May 23 12:01:01 2026 GMT
Not After : May 24 12:01:01 2026 GMT
Subject: CN=42adf184b6e9dc729e53925ab10471a5313bcc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:c6:dd:f5:ce:8d:da:42:e6:ba:b2:0d:27:
2a:21:6c:0d:c6:88:9f:97:8b:51:ba:b9:a9:b2:cc:
87:ab:76:73:4b:dd:9a:d5:93:eb:f4:04:17:ab:ea:
8b:81:3f:33:f0:01:34:1b:68:87:0b:60:97:45:c9:
fa:98:3e:33:90:ee:80:8e:6e:72:b3:76:e9:8a:e4:
4f:b6:c7:43:81:b3:03:90:0d:0e:f2:51:bc:c6:1d:
1f:a5:8b:d6:51:ed:54:0e:92:e1:07:a9:9f:bf:e7:
fc:2a:07:a6:4f:af:6b:59:de:c4:ad:05:82:4a:a5:
e5:dc:ef:4d:64:59:f3:de:f2:09:e9:ab:62:4c:97:
5b:2a:a9:f3:89:df:d4:34:22:80:cb:9e:52:ea:0c:
78:cf:56:7a:8d:31:fe:f2:a1:1a:66:37:0c:bb:5f:
a8:47:39:dc:a7:f9:6c:f4:d2:73:f7:40:c7:21:93:
57:8b:a7:51:17:f3:9b:9d:d6:cf:ac:e2:7f:e5:09:
c4:04:1b:bf:25:e3:ab:3e:4c:ea:7b:23:17:09:ec:
2a:17:81:d6:b7:fb:ae:f8:e3:6b:4c:0d:f4:fb:7e:
e6:d6:2e:97:fd:f0:45:1a:25:1d:73:43:79:8f:89:
01:0a:ce:a6:8c:64:a3:ff:cc:cd:59:53:d0:20:f1:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AD:F1:84:B6:E9:DC:72:9E:53:92:5A:B1:04:71:A5:31:3B:CC:6F
X509v3 Authority Key Identifier:
keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f3:56:68:09:de:b1:20:5e:b9:fd:32:eb:6e:a2:eb:5a:b0:
79:5f:82:80:3c:d6:7b:2a:a5:15:71:72:27:d4:2d:21:12:89:
9a:d3:cf:77:bc:51:f2:30:5b:ff:2e:f4:55:4e:c2:67:ca:25:
fa:96:8b:ec:5a:e6:1b:19:a8:b9:26:88:1e:6f:b7:d1:54:ac:
43:ba:b1:81:82:d5:87:3b:77:d4:34:dd:95:9d:d7:3a:55:8f:
b0:52:0c:5b:a9:f2:e5:ac:f9:91:f5:15:62:f7:fd:0a:c0:75:
a0:87:a6:72:00:4b:58:41:5b:49:12:be:39:81:05:15:b1:3c:
d7:ba:7b:d9:65:c6:19:75:fd:c1:81:87:e5:00:eb:fb:96:e7:
94:f1:1d:6b:43:9a:97:d7:1f:36:b2:b4:ec:f1:3d:64:72:82:
bf:8b:a6:0d:ce:f3:3a:72:f6:a4:43:e4:a4:61:54:13:6c:bc:
dc:48:53:36:4f:68:d0:cc:4a:08:d8:2b:b5:e0:25:14:07:db:
71:2e:5c:0c:13:d6:c9:64:d5:1f:06:29:b9:2d:40:f0:5b:c1:
56:fd:84:ff:29:8a:4d:33:3f:5e:c6:0d:b5:a6:b1:3e:fc:28:
13:46:39:dd:d3:64:60:aa:1b:b5:58:15:15:ca:db:98:fe:6d:
9d:63:d0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 18:32:28 2026 by rpki-client