Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
File: 9FT4T3gIX46gOklonL43LnSsFTw.mft (raw, json)
Hash identifier: Tj8wc/PnlPvJ6f5/6f1adudVJwL+EKycka7/w6GnSq4=
Subject key identifier: 03:A1:5C:63:5B:BA:D4:3F:00:C6:79:EC:80:F0:19:E4:8F:14:69:23
Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
Certificate issuer: /CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Certificate serial: 019DECDAE2B5A51E373BDC90D3F0BB05FD0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
Manifest number: 18EC
Signing time: Sun 03 May 2026 08:01:00 +0000
Manifest this update: Sun 03 May 2026 08:01:00 +0000
Manifest next update: Mon 04 May 2026 08:01:00 +0000
Files and hashes: 1: 9FT4T3gIX46gOklonL43LnSsFTw.crl (hash: nMEr+PQX+f1jtjcVaNldwxfMS1ClE1lwWlGyIVJS+nQ=)
2: Y6ybWhEjwuda51l0uiaZjIT-fg8.roa (hash: 8LGe+xcRdI8B6zAIoBChynO4rGVdoYzlhKSA0vPLuGw=)
3: aEVMMMA5f1UmRI8NYOUQQuTtgsQ.roa (hash: pdfghptkrLhCdjHFzkd4R/q6hTlSpA/AvR6T+/fF+rc=)
4: sbz6OVH06vkYwN8qjWyWv5JQ98I.roa (hash: mqPWKkpNLvEdA2xxPfKh+1E+EB8NghsX64s1n44EHeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:da:e2:b5:a5:1e:37:3b:dc:90:d3:f0:bb:05:fd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Validity
Not Before: May 3 08:01:00 2026 GMT
Not After : May 4 08:01:00 2026 GMT
Subject: CN=03a15c635bbad43f00c679ec80f019e48f146923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:f4:a3:f4:a5:20:2a:86:46:5b:38:d0:36:
d4:e3:1a:23:88:be:69:a1:43:4e:31:da:2a:9b:84:
17:69:c7:e3:d1:2b:1e:6a:b4:92:7f:7c:6a:36:0d:
c5:a9:f2:76:fa:4e:ab:e1:b3:23:b2:68:20:44:16:
69:d2:e7:d4:bf:12:88:72:19:2f:5f:c6:61:eb:a5:
18:57:13:f5:ed:ba:b1:cb:c2:32:6c:d5:e2:8e:80:
0f:5b:cd:dc:3a:2a:99:30:8a:6a:1e:b9:40:8e:67:
5d:11:ac:2a:31:29:82:20:f5:87:08:b4:d2:b3:9b:
a1:e8:5e:fb:f1:34:a9:5a:3f:31:b8:99:ad:00:f4:
17:5d:5b:08:a6:f6:fe:f7:61:74:a0:76:d0:e7:42:
2d:84:cb:d2:67:8f:a5:eb:94:72:45:d7:27:55:6e:
53:39:19:ec:ae:65:2f:3e:2f:3e:90:63:89:e5:a1:
fa:35:1b:f2:6b:d1:c1:3e:83:a0:a0:ac:b9:fb:e2:
0a:67:ae:20:48:b2:b2:62:17:93:ed:3f:cf:27:30:
e5:cf:c1:eb:f2:3d:47:03:6a:1e:31:ed:81:fe:69:
d0:61:2c:de:0b:25:44:eb:4c:d7:18:9d:e7:8c:50:
82:54:82:4e:1c:a8:b8:d6:54:32:60:c8:93:cc:43:
c4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A1:5C:63:5B:BA:D4:3F:00:C6:79:EC:80:F0:19:E4:8F:14:69:23
X509v3 Authority Key Identifier:
keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:66:18:ab:ba:b4:7f:5d:25:ac:35:45:64:74:5b:d0:fa:e0:
dd:79:e1:df:c2:31:4a:e5:75:69:05:1f:f6:72:a6:5b:cf:4a:
8f:a3:59:1b:b1:2d:0b:a3:16:08:da:00:8e:63:da:59:eb:27:
96:bf:a4:3d:35:2b:b9:84:73:63:fe:1a:ad:ed:4c:00:84:98:
4d:bc:ea:e3:32:6d:1a:c0:1a:ee:0e:39:99:69:32:62:8a:df:
be:aa:ba:56:7a:a6:d9:e1:58:5f:ac:9e:b9:7d:ec:32:32:60:
ff:0a:64:09:e0:9e:d1:a5:5c:ee:38:fe:a3:39:20:5d:fe:32:
e6:c6:3c:f8:4c:6b:b9:e4:fa:15:df:e8:32:9d:c0:01:cf:b5:
cf:58:3f:cb:86:70:e2:35:d0:47:21:43:a0:a0:59:00:bc:78:
3c:d8:29:e2:82:c9:1b:2b:07:f6:ce:f4:0b:10:1e:2c:18:ef:
4f:78:0a:fe:73:72:13:85:ed:79:5d:9a:7d:3f:ef:2e:b6:4b:
db:05:6d:46:ce:4a:a1:e2:62:4b:54:db:32:1b:89:e9:af:f6:
18:84:5a:13:c4:82:c0:2f:76:ad:e5:8d:eb:19:1c:20:80:39:
c2:94:73:bd:54:35:fe:22:a6:f9:a7:c4:01:1e:d2:53:e7:42:
a3:d7:67:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:14:17 2026 by rpki-client