Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: Mcb++WVS/hE5YyrAM8LqCclt4SiEvaHdEymppShYlqk=
Subject key identifier: 46:A0:2D:5F:62:2A:67:73:3B:F0:A7:DC:FB:65:23:58:33:40:D0:7C
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 019EBF5B1112E1A7C49BF10DAA36B0472A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 05:01:16 +0000
Manifest this update: Sat 13 Jun 2026 05:01:16 +0000
Manifest next update: Sun 14 Jun 2026 05:01:16 +0000
Files and hashes: 1: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: SrL8FvBks8iI+Wrio7143yucU8Hcy9O3lDEi5v+WVb4=)
2: d2tSXbQmgx_5joDSWcoPnabG6ts.roa (hash: OeDG3n8yLp+p4vWMH9BV363xFOTnKrmVdLEjiUivNwQ=)
3: ni2pJYsgjdd_PvsJim4HSq8So90.roa (hash: oeFgA//XgCFg9vA4VhOc/9YfMueTyaFUxUNd6kbXTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:11:12:e1:a7:c4:9b:f1:0d:aa:36:b0:47:2a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Jun 13 05:01:16 2026 GMT
Not After : Jun 14 05:01:16 2026 GMT
Subject: CN=46a02d5f622a67733bf0a7dcfb6523583340d07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:39:42:67:08:c3:94:64:0d:47:61:5d:36:
64:88:8a:c9:db:7c:44:55:1e:ef:64:95:32:3b:05:
c2:26:d8:c0:74:88:e3:4a:2e:fe:ff:ad:7d:07:2d:
1b:35:22:bf:ec:59:ba:71:a7:5c:9e:1c:01:01:3a:
37:90:80:bd:c0:a5:b0:48:72:62:fc:a0:e2:8a:50:
6e:98:d9:dd:3f:dc:4c:52:fb:32:f1:c5:64:dc:cb:
65:68:e5:3a:04:10:59:37:da:36:60:1b:ef:7d:3d:
ef:c5:4e:9e:9d:aa:d7:7a:1d:6f:5f:70:da:51:77:
2d:b4:c0:65:25:09:b9:b9:86:1a:0a:d7:c6:20:04:
7b:70:cc:e9:c3:55:43:25:79:12:7c:e8:5f:07:c2:
88:d4:b5:e6:0d:c5:29:39:cd:42:c3:f0:98:e7:41:
b1:f3:e4:c0:83:38:8d:5e:c2:98:ca:c9:c4:e0:f7:
90:a9:a9:be:89:13:39:67:13:40:7c:67:93:22:55:
94:82:59:af:71:ef:73:2d:ee:39:d3:d9:b1:e5:bb:
72:61:7d:a0:f2:94:3e:fe:6f:d9:4a:fd:9b:2e:0e:
64:ca:c7:e5:07:8f:e1:f6:b0:a9:b5:be:be:59:80:
46:3c:33:0f:b2:fc:5c:c6:9a:77:65:7a:67:db:bf:
2a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A0:2D:5F:62:2A:67:73:3B:F0:A7:DC:FB:65:23:58:33:40:D0:7C
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:98:5c:3d:cf:86:2a:8b:64:3c:8c:b1:42:af:6d:70:9e:9e:
2a:35:e1:a7:24:32:0c:78:89:fc:28:4d:83:3f:20:cf:53:f6:
db:9a:47:48:ed:b6:f9:bb:a7:14:cd:5c:ad:94:94:aa:3e:f3:
3f:e0:b7:48:08:88:e1:5f:12:ae:c1:a3:37:11:fd:b5:c5:64:
7f:66:90:4b:2d:26:f6:21:96:00:7e:0a:21:88:07:0e:7d:be:
9f:de:94:2b:19:15:e0:f3:5e:68:b4:ee:c8:3a:8c:03:83:74:
aa:e4:7e:ef:29:fe:7e:47:91:59:15:fb:37:46:9c:55:6f:6a:
c3:20:d9:13:19:a8:65:3b:c5:a2:c9:d7:f8:53:34:66:55:c3:
b7:84:5a:df:f0:97:65:57:d0:25:b0:bf:4b:41:99:4d:69:37:
4c:e3:37:5b:9d:26:9f:80:c5:73:f1:82:30:ad:b4:4b:f2:ea:
d0:05:b2:d0:69:ae:ef:73:48:8a:dc:4a:d6:64:ec:e1:33:2d:
2c:cc:33:c9:73:63:ce:bc:e4:a2:57:6e:21:6c:25:a6:94:04:
74:28:d7:e8:93:74:7c:cb:75:40:65:17:c8:38:39:ce:66:22:
fc:75:fe:a8:e2:3b:8e:e4:92:2a:ac:eb:d4:20:4d:34:d1:bc:
92:13:93:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:31 2026 by rpki-client