Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
File: 9PpnFz_1YpCIuXCWGuG-dGldxmE.mft (raw, json)
Hash identifier: 2x8RFBnDa2QZw5CZ1LCAyMTmxS5FYtdQZQj+AF6jWAk=
Subject key identifier: 52:E8:8B:22:10:70:DD:32:91:76:BE:F3:AA:66:93:E5:F5:9F:D0:B6
Authority key identifier: F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
Certificate issuer: /CN=f4fa67173ff5629088b970961ae1be74695dc661
Certificate serial: 019E2F9672869D9647709FABD3BD509794E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
Manifest number: 190B
Signing time: Sat 16 May 2026 07:00:49 +0000
Manifest this update: Sat 16 May 2026 07:00:49 +0000
Manifest next update: Sun 17 May 2026 07:00:49 +0000
Files and hashes: 1: 9PpnFz_1YpCIuXCWGuG-dGldxmE.crl (hash: g13EfC4gWyhwXl5wiazt1E651rYia6OVnOH2UCjfnrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:72:86:9d:96:47:70:9f:ab:d3:bd:50:97:94:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa67173ff5629088b970961ae1be74695dc661
Validity
Not Before: May 16 07:00:49 2026 GMT
Not After : May 17 07:00:49 2026 GMT
Subject: CN=52e88b221070dd329176bef3aa6693e5f59fd0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:a7:16:6b:86:94:e3:8a:4c:00:1f:e9:34:
d4:1e:f8:ad:af:67:9e:0b:43:e9:78:e0:52:50:7b:
63:fc:63:6e:32:12:a5:56:2e:08:ff:65:72:db:16:
e1:11:20:50:49:16:2f:3b:06:8d:f9:ac:fd:67:1e:
56:fc:7b:20:09:48:91:7f:1b:ba:07:0f:b3:b2:b1:
dd:e1:98:d1:58:60:4f:6d:45:5b:f4:fc:af:c9:44:
cf:2a:e6:7f:13:41:70:0f:8e:0e:c5:30:5d:a6:1f:
f1:e9:1e:c1:d8:75:05:82:36:f5:f7:df:69:69:99:
af:13:c0:62:06:ee:76:14:47:f2:c4:ab:8f:34:68:
e0:25:60:9b:f0:0b:ee:68:4e:4c:46:41:78:a9:3a:
9a:78:24:23:85:3a:c2:7b:e3:b8:94:78:74:92:b3:
dc:11:b8:cb:61:fd:75:8a:47:fb:eb:02:ee:5a:a8:
b8:ad:93:5e:08:41:cd:5e:56:36:9d:b5:68:7a:ff:
b0:e4:45:ac:18:83:68:5e:38:25:e2:62:8b:16:16:
c4:75:e0:58:26:a3:1d:81:57:ee:9a:75:54:8d:13:
62:b7:22:e1:37:09:c6:7c:8d:89:42:e2:3b:d0:82:
2e:ec:fe:ed:ae:46:94:69:30:e9:98:f8:e4:70:93:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E8:8B:22:10:70:DD:32:91:76:BE:F3:AA:66:93:E5:F5:9F:D0:B6
X509v3 Authority Key Identifier:
keyid:F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cd:74:11:06:2a:64:4c:ed:e7:ee:fb:5d:df:9b:c6:2e:a7:
58:c3:e5:de:56:4e:5c:fc:22:2d:9a:ba:87:a0:bc:29:73:6b:
f4:a5:4f:23:e3:bf:c2:ad:55:73:4e:c7:35:6d:e1:17:0e:e4:
86:fd:5f:32:e9:c5:66:a1:b2:8b:06:e3:dd:8c:23:c5:df:21:
6c:67:b1:da:c8:36:6c:e9:87:ef:8f:57:42:70:67:c7:c0:5c:
bf:4e:39:5a:01:ff:ee:33:29:4e:dd:c3:e5:c9:13:12:ce:ee:
a5:ea:94:63:ca:ef:aa:8a:94:83:57:e8:51:06:ea:35:e2:e6:
d4:2e:74:2a:72:09:87:e4:b8:a0:4e:09:18:c5:8c:25:c2:8a:
80:cb:45:22:e5:de:16:fe:1e:c6:e0:f2:82:e3:ee:7a:99:ca:
c6:16:f0:5f:39:a7:b1:b5:e0:64:a8:db:01:84:f5:13:16:b2:
4f:c1:3c:13:2e:27:ab:3d:ae:81:db:7f:dd:ef:2d:8f:32:3a:
48:fa:07:0f:61:0b:04:dc:2e:f2:c2:55:a6:35:60:50:df:fa:
5e:99:2e:e3:77:06:ba:57:db:2d:8d:b6:c4:89:f0:ac:00:7b:
7a:89:2c:26:09:ba:c6:c9:00:94:f1:46:22:62:8d:e0:2a:cf:
36:81:24:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:20 2026 by rpki-client