Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: 3WD1lu7PLBCGYXsvSdUxKZf4CYJoowJqhb7tfMwQmbU=
Subject key identifier: 91:DE:E6:B3:EF:5A:C7:62:B5:13:E2:11:C4:62:1B:D2:C5:F2:CD:67
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 019E2A3967A4D2BB36014F2DEE25E32E9FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 101A
Signing time: Fri 15 May 2026 06:01:05 +0000
Manifest this update: Fri 15 May 2026 06:01:05 +0000
Manifest next update: Sat 16 May 2026 06:01:05 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: towi/pBvMxRZ5PyHH+/nySRx/ltbGji3w57xPEhv8iQ=)
2: GdXLtakb-VVZb4sIMxasJO3C9e0.roa (hash: lYew3AcxBQCaUjqVtA2l1sMtRC1UlXtpZ4kuSqJbBQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:39:67:a4:d2:bb:36:01:4f:2d:ee:25:e3:2e:9f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: May 15 06:01:05 2026 GMT
Not After : May 16 06:01:05 2026 GMT
Subject: CN=91dee6b3ef5ac762b513e211c4621bd2c5f2cd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:80:3d:5f:3e:e1:40:57:a2:41:ba:f2:05:2e:
94:8f:7a:2e:27:07:98:62:74:3b:8f:a9:cd:c9:5d:
02:75:e3:09:8c:c4:9c:82:3c:62:1b:7f:35:ab:2c:
ac:d0:a9:3e:f8:79:79:ef:a0:cb:15:e4:71:e8:4e:
46:31:28:a5:67:0f:d0:31:22:34:58:3f:a5:14:6f:
c8:11:25:65:d2:af:91:b3:60:ce:ab:fe:2c:0d:43:
a8:b4:0a:16:95:6b:1c:e5:78:75:74:89:55:62:12:
ba:c2:47:ba:56:a9:f0:70:95:ca:76:36:82:f2:41:
6b:6c:16:a8:cd:e0:a7:5a:f1:24:a4:ca:49:d9:b9:
75:77:0f:b3:9f:d7:27:ac:c5:c5:b7:86:42:1b:0c:
5f:98:99:7d:6e:00:bb:a8:de:e1:d2:24:e4:c4:c2:
d7:d5:85:ef:13:0d:bd:67:b3:05:df:3f:32:16:ac:
56:b1:b8:7a:c1:4a:07:23:17:00:99:e3:ba:d1:76:
e1:6a:da:ca:16:40:c7:53:41:28:91:49:e1:4a:72:
24:d5:cf:db:f8:b4:03:97:17:20:8f:4c:47:2a:12:
24:17:30:c6:df:0d:c5:81:06:e4:34:d5:97:5f:a9:
47:f0:97:eb:0d:64:82:40:3c:a0:e1:99:ae:a2:59:
1f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DE:E6:B3:EF:5A:C7:62:B5:13:E2:11:C4:62:1B:D2:C5:F2:CD:67
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ad:d6:ad:36:29:28:09:db:a3:b4:65:45:27:d2:bc:11:eb:
d8:01:80:a6:de:21:10:c3:a9:5e:ad:b2:83:d4:33:87:2e:61:
26:d8:b6:b6:7c:ee:c9:a9:3f:7e:b0:2a:b9:6e:50:8e:f1:cb:
b3:02:df:99:af:72:1f:c3:9f:a0:61:a9:b6:9e:5f:7d:cb:63:
78:8b:3f:93:02:61:26:9a:e4:53:65:e8:e0:7d:7c:d5:c3:fe:
36:9b:22:bb:ff:5f:64:37:66:f8:ab:a6:67:6e:6a:61:f2:79:
e0:4e:1b:7c:47:64:7b:63:77:3e:81:c3:01:e7:b7:00:88:b7:
6f:2d:04:91:1a:78:5a:cf:92:d0:32:66:f7:8d:10:3d:b0:32:
83:07:df:66:b6:30:40:08:4b:6f:be:58:d4:4b:1e:92:83:72:
84:af:19:f0:d2:2e:5a:d7:4e:37:e4:f8:d1:b2:39:3f:15:57:
52:f7:b0:49:da:d1:65:65:39:54:7e:bd:00:2a:d1:f0:d9:ea:
7e:f0:ce:07:25:3c:c3:7c:23:2b:db:3f:70:bd:77:93:39:60:
20:79:22:ab:4b:87:c6:02:d9:e0:47:c7:d5:6b:1b:a5:bd:b9:
99:11:48:80:f0:6d:fb:4e:41:d5:70:bb:74:64:d9:01:23:99:
6a:dd:92:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:37:25 2026 by rpki-client