Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: +BuCu0xpKrrZJMBEl3hV33vO8UQd347tkO7PhR9aDA0=
Subject key identifier: 95:A9:8C:70:50:21:5D:ED:DF:E3:08:B9:61:B9:F6:5E:57:18:CE:EB
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 019E314DE4A47BEEF6634915C0B149D9C803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 0977
Signing time: Sat 16 May 2026 15:00:48 +0000
Manifest this update: Sat 16 May 2026 15:00:48 +0000
Manifest next update: Sun 17 May 2026 15:00:48 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: FjVF0/eM/xIa0v2M9lfkG/TbYiitZwuvuWHuECIWZ6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4d:e4:a4:7b:ee:f6:63:49:15:c0:b1:49:d9:c8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: May 16 15:00:48 2026 GMT
Not After : May 17 15:00:48 2026 GMT
Subject: CN=95a98c7050215deddfe308b961b9f65e5718ceeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d2:d3:f5:99:75:28:5a:e5:b7:e2:df:ba:2d:
62:95:c7:8a:08:27:69:a2:2f:78:21:16:de:ee:02:
16:5f:f3:73:54:ae:34:23:a5:fc:51:8a:ee:87:e8:
a4:b2:f4:42:7a:60:84:f4:34:eb:ca:1e:ff:ea:6e:
39:b9:c0:11:ea:9a:d9:b9:6d:68:df:2b:79:cd:5a:
46:de:eb:16:2e:87:8b:52:80:99:81:68:0d:d8:3a:
60:2e:a1:84:00:43:08:d3:2b:de:db:64:ba:31:97:
b7:7f:17:c1:7e:ce:aa:15:b9:6c:12:8d:95:93:8a:
7f:8c:97:53:02:c3:8b:0b:df:d6:ee:1a:55:1f:f0:
be:48:b2:21:ea:d7:3b:9a:77:c4:81:1b:b8:3f:b2:
ab:46:04:73:c7:58:92:4f:0f:49:63:e5:0f:ec:5a:
bd:8b:d8:3e:6c:2e:dc:01:35:a3:a6:b1:2a:85:94:
41:ab:56:79:72:9f:9b:5d:b7:9b:8a:42:3b:7b:f2:
55:7d:8f:a0:23:fb:cf:e2:02:20:07:79:c1:d2:b3:
10:0b:90:78:83:d8:f4:4c:74:1a:e0:9b:e7:f1:2d:
3b:38:77:a8:aa:ed:31:cd:37:ec:24:2b:a1:cc:fb:
c6:5c:2e:52:98:8b:70:33:2e:fb:5f:f2:cd:3b:19:
21:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A9:8C:70:50:21:5D:ED:DF:E3:08:B9:61:B9:F6:5E:57:18:CE:EB
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:40:62:b8:5a:88:d1:dc:f2:cb:2c:ab:01:c0:57:ac:e3:3c:
4c:60:7c:d8:44:dc:36:87:e2:55:70:88:87:74:a3:13:75:d6:
c7:fb:fe:e8:fa:8e:7c:96:fa:8f:93:1a:28:bb:7f:02:79:c3:
0a:0d:a5:f8:9f:bc:53:16:7e:79:b5:16:fe:e2:a3:74:ad:23:
b9:8d:90:73:b9:e4:5e:6f:de:38:28:af:f2:19:4a:8f:b4:da:
07:a0:9e:86:6f:9f:6c:dd:d3:dd:85:de:bd:55:da:e1:fd:fc:
6f:f5:01:73:a2:29:d5:95:b5:4c:56:24:d8:b5:e1:6e:f9:ce:
da:63:71:43:85:9c:f1:b4:72:8d:04:4a:21:9e:cc:22:20:a9:
16:f6:d8:15:40:d9:2a:e9:53:ee:ed:96:03:38:d6:88:1b:a5:
c2:d6:97:51:72:64:69:06:fd:b8:38:4c:63:54:21:35:44:5b:
a5:82:ec:06:93:ac:33:20:21:8f:a5:df:38:cb:26:ab:28:cc:
08:3b:5b:9a:e9:60:a9:9d:59:cc:b6:d3:4e:93:18:09:16:65:
9e:db:34:2e:b1:55:ad:85:a4:bb:87:31:1a:57:6b:91:21:d0:
2e:82:dc:dc:0c:36:3a:30:c9:10:21:18:2a:e3:e4:21:8f:44:
32:d8:00:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:38:15 2026 by rpki-client