
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File: 9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier: aduFkdIAQ9WBhQ6GkcaYGvXAWdyuTroYfOg1a+kQExk=
Subject key identifier: FA:3E:D3:B5:C5:E8:3D:2F:76:18:82:1F:C5:B0:60:C0:0D:71:40:28
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer: /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial: 019DEDB6CE2CD3FEEF2EF0299092DB9542A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number: 0887
Signing time: Sun 03 May 2026 12:01:13 +0000
Manifest this update: Sun 03 May 2026 12:01:13 +0000
Manifest next update: Mon 04 May 2026 12:01:13 +0000
Files and hashes: 1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: KkL+ZHAa2Mz6zBXgCgq5dTgRjM8vqlz+IgPRWfKeXI8=)
2: bOWNnQQVbM5f-UYg-QV5mDSs02I.roa (hash: ZHzPwAfR/0qTdqa3UIdlS72kIIMUcV3Y09FsBOM1tW0=)
3: c3mRC2zskUzL_6AdndC0KZP1S14.roa (hash: BCkPN8vUy3sfeplOO5KxZSim29zaECBgi+38mZOABLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:b6:ce:2c:d3:fe:ef:2e:f0:29:90:92:db:95:42:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f566016d878230128b58e279d661c195e6399588
Validity
Not Before: May 3 12:01:13 2026 GMT
Not After : May 4 12:01:13 2026 GMT
Subject: CN=fa3ed3b5c5e83d2f7618821fc5b060c00d714028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:15:b6:2c:d8:dc:22:95:de:77:26:00:c5:c9:
01:97:e8:62:c3:3e:82:bc:a6:57:47:60:b8:66:fb:
46:10:de:9d:2a:46:3b:ad:4a:c1:f3:48:c5:2d:43:
22:4d:62:25:78:53:97:e7:81:9c:84:f0:c9:ae:20:
34:a7:74:69:72:4f:d2:34:ce:ad:bd:fd:b6:1d:72:
ca:45:5e:ba:8f:45:38:bd:2c:00:2d:42:b4:73:52:
13:a9:16:17:92:23:3e:99:07:65:34:0a:b0:ad:cd:
f6:b8:2f:b6:d0:8c:a1:13:46:c1:8e:e2:35:83:4e:
81:40:9e:84:b0:9d:30:69:3c:23:bc:2f:30:f7:60:
f9:01:b5:6a:0c:44:34:dd:11:21:a3:d6:73:93:a7:
93:0a:e5:89:74:ef:5a:a5:39:57:46:18:78:25:a5:
db:1e:f6:20:f8:35:fb:17:e5:78:6a:a7:01:f9:f7:
d1:05:80:f5:59:a3:bc:39:7b:34:63:9e:2e:db:ce:
f0:90:d0:a7:74:30:71:b8:9c:a2:e1:2a:ef:7e:e0:
ab:91:e9:98:bc:83:a4:0c:aa:35:19:08:96:7b:32:
f9:70:c5:25:14:b6:e5:44:fe:95:f2:04:e3:ff:ed:
39:53:7a:c6:db:22:c2:7f:49:13:8d:cf:f2:d3:7b:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3E:D3:B5:C5:E8:3D:2F:76:18:82:1F:C5:B0:60:C0:0D:71:40:28
X509v3 Authority Key Identifier:
keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f0:d3:ab:be:02:72:72:cd:66:89:76:57:34:c1:3e:1f:14:
24:90:74:80:a3:c5:cb:73:5c:ce:af:46:69:b3:d8:5d:a5:9f:
2e:c0:65:e2:38:46:23:e5:c8:e9:89:fd:4f:09:ea:bc:2e:25:
8e:98:f1:bb:b9:0d:0d:d9:ce:4e:e7:5a:f9:d7:fa:29:26:88:
10:7c:8c:88:fa:54:ec:67:b1:1e:b1:ee:31:67:2d:92:b5:fd:
04:d4:ed:57:d0:15:19:c5:57:6d:3a:2b:b2:48:7c:52:95:59:
23:73:05:71:9b:d0:30:5b:4b:19:df:e6:8f:f3:c8:ff:60:55:
16:42:2d:8e:df:ab:34:02:1f:38:87:63:79:74:66:e7:20:18:
70:55:a4:66:40:28:c9:8d:62:ab:6e:88:27:32:1b:33:83:6c:
5c:69:8b:8e:bc:c1:f5:af:84:5f:68:7a:66:15:33:c2:28:3c:
b3:a4:66:a2:20:ba:b3:8e:06:cf:00:94:b8:0c:85:4c:29:a7:
6d:48:c6:e1:83:f3:0d:c5:46:bf:0a:be:12:99:16:e0:5d:82:
76:cf:92:52:e8:17:ab:e8:68:73:d6:ab:0b:8c:5e:d4:7e:31:
9f:32:e2:70:9e:1c:41:3d:3d:a7:09:9a:34:79:fe:5c:c8:bd:
2e:a7:74:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:09:01 2026 by rpki-client