Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
File: 9VW6bis9tVIdvHBipYwW3aG58i0.mft (raw, json)
Hash identifier: IUatTgoaHJnC/oP0rJf1dg2VX1IWvgCagDK2eRLStAU=
Subject key identifier: 29:6E:83:31:31:AC:0A:72:D8:20:96:77:86:D2:E1:7B:D9:FB:C0:3C
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 019E314E70FE1242A9DCE5AE808988B0306C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
Manifest number: 06D1
Signing time: Sat 16 May 2026 15:01:24 +0000
Manifest this update: Sat 16 May 2026 15:01:24 +0000
Manifest next update: Sun 17 May 2026 15:01:24 +0000
Files and hashes: 1: 9VW6bis9tVIdvHBipYwW3aG58i0.crl (hash: quRtMNa8DzS36USUOceU09WFv9ee6VV4v/AeBL4AL1Y=)
2: cyWhzyh3zLHJFuzJ5qvmESBkuxg.roa (hash: nSoHpM2xTBolqQJtZsO8W8SsMxuMlo/mxOm1BoRL8ec=)
3: zlPMF36fK507KHhaEr_DLJ54RXA.roa (hash: kLxUmeXAHI9feHJRDQlAlUFvp1o7+yM0NCeSQpcomMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:70:fe:12:42:a9:dc:e5:ae:80:89:88:b0:30:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: May 16 15:01:24 2026 GMT
Not After : May 17 15:01:24 2026 GMT
Subject: CN=296e833131ac0a72d820967786d2e17bd9fbc03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:f9:9c:a6:7a:c7:bd:1b:d7:72:e2:05:e1:
92:04:f3:2f:99:16:cb:3a:db:cb:84:70:66:3c:9b:
37:db:24:91:5a:87:90:e3:5b:56:34:3f:73:83:14:
6a:ba:2d:b6:c2:89:e4:13:71:66:7a:b7:77:a9:36:
ee:58:4f:8c:8c:18:9a:b0:ac:a8:2d:32:76:52:b0:
87:76:16:1c:2e:0b:1c:6f:b4:df:d5:49:30:75:f4:
f1:b9:d4:68:c1:2d:81:0b:43:e8:0f:71:2b:b6:cf:
a2:17:38:66:48:0e:34:60:da:06:21:6f:9e:1d:cd:
bb:48:0f:db:8a:24:7a:6f:11:6f:9f:bd:df:c8:59:
52:89:2e:52:13:31:4a:f0:b8:53:33:20:a4:4c:1a:
b8:4f:3c:95:86:38:da:fc:c8:4f:3d:9b:10:59:78:
02:66:c2:9d:b7:b3:d2:9b:38:48:47:29:73:46:aa:
31:0f:c2:4d:c2:fd:13:be:05:1b:c8:e4:b8:ce:5a:
48:6a:42:8a:e4:84:31:5e:de:44:a2:04:59:37:e1:
c3:b3:a8:f6:c5:77:18:c6:7b:36:10:fe:a5:f5:94:
88:71:9f:c6:78:b8:a0:24:4e:b4:f2:90:0c:77:ee:
53:22:b1:a9:50:af:4f:c7:81:8f:75:a1:4c:d5:87:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6E:83:31:31:AC:0A:72:D8:20:96:77:86:D2:E1:7B:D9:FB:C0:3C
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5b:63:a7:a7:ba:4b:1f:e5:d6:cf:96:f6:ef:81:6a:42:44:
7a:24:2a:1e:59:41:83:27:bd:8d:3b:b5:f1:45:bd:f9:91:aa:
9b:37:a6:fd:42:de:55:e7:bb:6a:26:b3:e5:fd:37:80:bd:63:
91:aa:3b:07:92:56:9f:ae:3e:72:32:9a:6a:f7:38:82:d1:c7:
9b:f1:7a:46:90:80:f4:62:e3:48:8e:09:0c:3a:16:1d:8e:d7:
53:8b:85:52:dd:fa:61:6b:76:30:fe:89:a7:3d:d5:56:e1:fe:
c2:c4:af:ff:41:c0:80:7e:a0:d7:f2:b3:30:12:15:d1:fe:5d:
bc:79:c5:54:bf:1e:63:0e:aa:f4:4c:6c:d8:72:6f:f4:41:24:
18:c4:0f:5f:93:a8:31:6d:a8:b8:e4:bc:19:5f:8c:f8:b1:5d:
39:8b:9d:d4:40:8f:7c:8a:66:3d:b8:7f:a3:89:c2:d5:17:39:
c0:73:b6:f1:ef:36:ec:16:54:1d:b6:3e:94:ef:d7:47:ec:2b:
06:8b:7b:79:25:c2:b5:3a:ac:fc:01:89:1c:73:b6:78:92:b1:
47:1e:c4:e1:de:3d:f3:53:ea:12:aa:43:a4:0b:64:62:be:b4:
6c:13:a6:ad:14:89:ea:1a:45:52:09:a6:d6:4a:a2:53:94:01:
c2:b5:51:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:38 2026 by rpki-client