Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
File: 9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json)
Hash identifier: cmVmsqLTPfYuD5BWAP+gqHvpgbsHr6mVmRlQ+cNHSKQ=
Subject key identifier: 98:96:12:D4:DB:55:9B:EE:BD:F1:71:03:BB:75:A2:82:F3:65:23:A9
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 019E30724927A0965D96D0AE247717B6741F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 11:00:56 +0000
Manifest this update: Sat 16 May 2026 11:00:56 +0000
Manifest next update: Sun 17 May 2026 11:00:56 +0000
Files and hashes: 1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: crPRDqytbT99ipTCLg4ZyB42GeUh+UGm2+zxoajnhI4=)
2: mGKvGN6mzAi9Xi9OgEnQnIpovsQ.roa (hash: AZAga0gvOyoyk29F5YS9oe0dyqX933PqnZoBR7aFkQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:49:27:a0:96:5d:96:d0:ae:24:77:17:b6:74:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: May 16 11:00:56 2026 GMT
Not After : May 17 11:00:56 2026 GMT
Subject: CN=989612d4db559beebdf17103bb75a282f36523a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:f7:60:66:51:49:44:7e:b3:ae:46:d2:0a:
0f:e2:b3:db:e7:c7:a5:46:d2:3e:3c:88:7a:73:32:
51:f7:d4:9e:f8:59:79:d8:31:a6:80:93:43:08:e6:
91:e0:19:95:bf:db:ed:82:34:7e:7c:f5:2a:ae:d7:
07:48:d6:5a:de:a6:ec:41:e7:d2:2f:09:fd:79:5f:
10:e2:6a:dd:4c:64:07:46:0a:91:3f:50:e1:a4:64:
36:d6:43:c7:08:27:f4:11:04:ab:e1:44:24:d2:f1:
71:bb:af:06:01:69:74:c6:22:13:0e:71:4a:34:71:
dd:9a:9b:9c:36:9d:d0:2b:56:57:65:e9:20:b1:08:
8f:b5:1a:42:b2:a9:8c:68:87:37:9f:2b:35:61:40:
c5:db:c8:6e:eb:9f:2c:11:6d:c3:0b:43:5a:12:bf:
46:f3:3f:76:8d:a1:85:1c:32:c4:c1:84:13:6e:0e:
8b:a5:32:88:9a:f2:5f:4e:d7:11:dc:42:07:7e:33:
7b:8a:cc:75:2c:85:c7:15:05:11:9a:64:a6:93:0a:
2d:dc:3c:2b:18:eb:08:e3:64:31:e9:00:71:d9:61:
18:ef:a4:51:9b:4c:d6:7a:36:b3:d0:15:6b:02:d2:
3b:61:0a:f1:60:ff:6c:43:ad:89:29:e0:25:02:4a:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:96:12:D4:DB:55:9B:EE:BD:F1:71:03:BB:75:A2:82:F3:65:23:A9
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:42:8c:46:86:6a:bb:4c:ab:bc:f8:92:60:d4:12:69:b1:0f:
66:9f:8a:70:ee:79:4e:36:d4:71:1e:5d:23:d6:9c:41:de:bf:
7f:f1:7e:f2:b5:17:10:14:29:8d:00:b3:44:f9:b4:43:e7:19:
23:36:36:73:1c:b8:06:f0:51:bb:50:60:4c:f0:5d:c2:b1:0b:
68:f1:d9:7b:52:70:1f:4b:89:b7:66:7a:b2:08:a1:5c:98:f3:
38:80:62:3c:03:3c:30:8a:c2:16:bf:5c:18:ff:60:f1:2e:d8:
d8:6e:19:e3:c0:d6:35:a2:18:d6:14:0f:1a:bd:47:a0:b4:32:
56:cc:c6:ad:8d:35:d0:0b:da:db:47:cc:71:6a:6e:b3:68:d5:
ee:4c:7d:e4:d2:73:94:0f:f5:49:b5:d3:37:c7:88:a1:a4:77:
56:fe:a7:71:c4:f5:2d:2d:68:67:ad:e6:2a:e2:fb:4a:19:61:
65:c6:c0:f9:13:4e:a8:84:91:ce:8d:1b:a5:ba:7e:7d:6b:44:
4c:7b:74:c4:22:3d:a4:dc:37:a3:7e:88:50:2b:11:04:c5:3a:
90:63:9e:ac:5f:51:66:af:74:e2:5e:16:03:c8:76:c7:9e:68:
b6:cc:46:d3:d3:db:df:28:1e:6c:a4:82:4b:b6:f5:54:a6:b0:
5a:be:dc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:27:11 2026 by rpki-client