Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier: abgzeV+okJ0F0cx+nanJMTIu/hkmhMOrFx8doSObw/o=
Subject key identifier: 38:8D:BD:EA:70:49:E2:C5:A5:7F:F7:B0:9B:D3:35:B0:8B:40:D2:85
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial: 019E3004809C33660233B5469788DC636484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number: 0887
Signing time: Sat 16 May 2026 09:01:01 +0000
Manifest this update: Sat 16 May 2026 09:01:01 +0000
Manifest next update: Sun 17 May 2026 09:01:01 +0000
Files and hashes: 1: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: BPu1hCVCEMxkG8stmrLVSMFmwyk6nFyD383tFVvmAcE=)
2: tKfj59q_uSVeOVXFF8rwGwcX1DE.roa (hash: M8dRarfAWOblSl0tPp78zm1/aNBzJLXYpivkbEtUqgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:80:9c:33:66:02:33:b5:46:97:88:dc:63:64:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
Validity
Not Before: May 16 09:01:01 2026 GMT
Not After : May 17 09:01:01 2026 GMT
Subject: CN=388dbdea7049e2c5a57ff7b09bd335b08b40d285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:70:df:32:58:a0:89:bb:df:74:c6:b9:ef:
ad:07:e2:88:40:32:ce:ba:48:f4:19:22:35:6f:08:
3d:8c:6e:e1:70:59:dc:c6:5a:42:1a:d2:67:6f:cd:
a7:57:e6:bf:4a:a1:b9:9e:dc:4b:57:57:f6:0a:1e:
12:49:db:b3:68:2a:3e:2b:91:58:fc:f2:c7:57:df:
14:b1:0a:ec:bc:d9:64:ec:06:27:ff:e4:44:6d:2b:
31:f8:eb:f3:c6:18:f9:57:10:9e:52:de:cc:43:72:
b0:37:9f:61:84:55:e2:5f:bd:09:03:6f:ce:44:25:
4e:73:31:97:5d:ae:0e:4b:e5:0a:22:12:a6:b3:13:
14:d3:03:6d:da:e2:ca:84:c9:ad:86:76:5c:b0:75:
e9:f0:a2:2e:b8:26:d3:70:da:c6:d9:81:63:ee:b2:
b8:cb:bc:7e:65:38:62:18:f8:6d:5c:9b:56:84:be:
26:df:58:4c:38:73:0d:f7:87:fb:35:12:6a:f5:e5:
c6:a2:78:57:53:e4:ed:cf:29:f8:0e:8e:d6:74:79:
8e:23:8f:6d:0d:24:a5:e9:d8:4e:c0:01:33:bf:02:
75:bc:09:0e:c0:5d:83:0b:65:75:27:d0:f6:27:8d:
d6:59:76:24:6d:be:ed:18:47:5f:37:fc:c1:e4:7d:
82:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8D:BD:EA:70:49:E2:C5:A5:7F:F7:B0:9B:D3:35:B0:8B:40:D2:85
X509v3 Authority Key Identifier:
keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:bd:34:fc:2c:2d:3d:6d:29:94:c9:b8:df:15:07:4d:17:77:
4c:28:ec:f9:d9:fe:cb:6b:a6:da:c9:57:e5:05:54:31:30:65:
42:27:77:5a:5a:12:b1:52:b1:63:57:07:d8:dd:e3:56:60:e3:
b0:0f:05:1f:bb:0a:88:65:68:f0:ec:44:f5:bf:1b:1b:4c:e9:
e2:23:cf:03:84:02:9d:f3:c9:8e:68:00:4e:d8:2e:2f:3e:ab:
3b:37:9b:02:9d:e5:28:c7:f0:c1:71:49:50:56:2b:0e:bd:fb:
f4:10:ac:bf:32:aa:61:c1:0a:35:35:a0:00:0e:1e:b5:56:fd:
f5:8f:5a:62:ed:ca:6d:bd:fe:c0:b3:f9:15:e5:3a:69:1c:0a:
52:78:b4:de:bf:a7:74:95:36:a8:b2:e5:96:a9:20:02:b9:af:
66:2b:df:5c:0b:67:39:48:54:65:17:7c:fa:db:9a:b4:96:96:
cb:d8:39:a0:a7:d5:e6:a9:0e:dc:ea:4c:a0:39:ec:56:50:5d:
76:93:37:40:31:23:55:48:85:bb:88:33:03:ad:67:70:48:bb:
d9:a7:2b:f7:0f:8d:4b:6b:a9:be:6b:3f:2b:b5:6e:62:4f:19:
65:13:d7:92:0e:05:eb:de:a2:fb:cb:ee:a3:fb:b4:46:a2:1a:
7d:d9:93:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:38 2026 by rpki-client