Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
File: _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json)
Hash identifier: S4wzr/cpF0X5O03/WAQLdcVmFFgTOs8U5/9vhLy3KJ4=
Subject key identifier: B9:2A:4D:32:72:4C:9A:A3:4E:3F:04:18:48:37:17:96:CB:64:9C:97
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial: 019DEECA2D01D9E00B08342096D8359AB1FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
Manifest number: 09B5
Signing time: Sun 03 May 2026 17:02:00 +0000
Manifest this update: Sun 03 May 2026 17:02:00 +0000
Manifest next update: Mon 04 May 2026 17:02:00 +0000
Files and hashes: 1: ALLGVKP-5SXjVEpjuKZaujJ3frw.roa (hash: 2IbnRTYsIxpxMkgjyLztl2mAatRyrBZ2hVeLGo8g2qQ=)
2: ATMfOPn_iklWkDGZaU6nBEYrMIs.roa (hash: MkgqGmH4i1AY83gSH/fJ/hLhxo7uHROhQ+deiJMJQps=)
3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: 5FiX+qvketfIvm2A9Oe/eN4OgQpanWOMEWEZOmKPB3I=)
4: gd0apcrdYEI4bPnkTNGJSM4gRa4.roa (hash: p+dDYEXfjkS2FAsmztfw4NEl9rJExwTKxbBp/O3yJJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 17:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ee:ca:2d:01:d9:e0:0b:08:34:20:96:d8:35:9a:b1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Validity
Not Before: May 3 17:02:00 2026 GMT
Not After : May 4 17:02:00 2026 GMT
Subject: CN=b92a4d32724c9aa34e3f041848371796cb649c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:a8:50:fe:e8:ba:57:ef:d8:13:86:45:49:
2f:6f:13:fa:11:7e:82:c5:9b:23:b5:e4:53:44:c7:
af:e7:d0:ae:89:15:38:b7:31:ef:cc:06:a3:29:86:
d2:91:89:3a:36:ec:14:01:60:08:34:33:b7:d2:0d:
5b:3c:09:88:93:8b:44:88:97:cf:1d:db:5a:a0:7f:
95:e9:70:28:69:b7:96:7f:55:ae:18:fe:ac:79:0b:
7f:c7:29:4b:e7:5e:0d:2c:9e:00:ae:e7:98:7b:e7:
13:93:96:3e:0e:8c:32:a4:14:8d:8a:4a:37:de:98:
0a:51:e4:09:5c:03:f2:23:50:7a:29:78:7c:7e:df:
67:8d:40:35:76:ee:d0:4a:66:e4:d2:b0:d5:7f:b7:
c8:b1:f5:e0:72:c3:f9:8d:3c:92:88:af:9f:59:b4:
c3:64:41:b6:87:84:59:d2:f0:c7:9b:03:1a:b9:1e:
99:69:84:18:16:4f:7d:bb:66:24:ba:83:2b:20:04:
27:a9:f0:af:72:91:3c:e0:2f:bb:15:40:cd:1e:58:
7e:80:25:e7:c9:5e:01:f3:e2:03:48:32:97:0d:7d:
ce:83:9c:49:f1:e5:94:cf:fb:a1:f5:0c:0d:46:6d:
8e:8d:3a:58:d8:ba:af:13:24:91:c1:38:48:c4:95:
42:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2A:4D:32:72:4C:9A:A3:4E:3F:04:18:48:37:17:96:CB:64:9C:97
X509v3 Authority Key Identifier:
keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:88:7d:bb:95:fd:b8:b5:13:ae:e2:04:1a:e0:74:e6:b1:ad:
1f:90:55:1c:07:c2:97:48:4e:de:1a:ef:21:e5:1a:c2:fe:23:
07:73:30:47:61:c1:70:2c:21:eb:de:22:0e:1e:60:1c:cd:61:
28:f3:04:8a:e6:7f:de:51:ca:06:de:9c:98:53:30:d4:c7:fb:
97:3f:32:ac:86:fa:1e:0e:02:21:2c:67:ce:6b:a6:a9:f8:01:
ac:62:d2:fc:7a:7c:ec:e5:97:5a:ae:20:df:e5:7d:14:1f:83:
84:78:e7:57:e9:db:eb:de:e9:99:f1:77:3a:3e:e1:07:88:ac:
ad:d1:ea:c4:d4:91:9e:b0:9d:7f:4d:aa:62:97:61:f0:5e:79:
31:a7:21:ea:85:01:4a:30:fc:88:76:a9:96:20:bc:c8:d8:39:
dd:53:79:2a:2b:3c:0e:17:c5:88:a6:44:18:3d:15:39:2a:99:
bc:a9:7e:8f:fc:ec:dc:e3:5a:ef:21:29:bc:25:15:78:31:c5:
b5:14:de:65:a6:f5:30:9c:10:c9:61:2d:3b:76:5c:1b:e4:a7:
ac:25:bd:2c:88:cb:e3:d4:14:06:b8:a0:9a:a3:05:04:9b:0e:
3b:14:22:d8:5b:82:13:16:f8:ad:fa:9c:ac:63:51:f7:d2:d7:
17:f7:ac:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 02:19:03 2026 by rpki-client