Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: euPX3QH0X58/8Pw84eRpnxGn240/sAoc9XUna/1dBUg=
Subject key identifier: 32:F8:73:C8:90:7C:31:BE:85:57:C7:42:84:06:19:05:8A:E4:4E:93
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 019D9C9A1D0B20D6B65382E0BFEDA26F577A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 092A
Signing time: Fri 17 Apr 2026 18:00:38 +0000
Manifest this update: Fri 17 Apr 2026 18:00:38 +0000
Manifest next update: Sat 18 Apr 2026 18:00:38 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: W111gQLqavZD7H8jNS15nCGeiCfsuQmikFFblwvB2LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:1d:0b:20:d6:b6:53:82:e0:bf:ed:a2:6f:57:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Apr 17 18:00:38 2026 GMT
Not After : Apr 18 18:00:38 2026 GMT
Subject: CN=32f873c8907c31be8557c742840619058ae44e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:e7:0c:98:66:44:37:32:8e:b3:65:44:24:
ac:88:c3:92:3d:eb:55:77:4d:7e:8f:dd:49:ec:e8:
39:37:16:0c:01:07:e8:0b:6b:5f:1e:1b:ab:20:cd:
37:ca:73:0b:fb:23:02:76:cf:6a:93:47:a0:46:74:
e6:26:3c:75:a6:d9:6e:54:2b:b3:8d:3b:3d:a5:ed:
fd:ad:8e:e2:57:f6:d1:32:a4:02:87:3b:31:80:ee:
a6:1e:0c:88:5f:a7:54:d3:2d:f8:c7:d0:4f:bd:9a:
0c:8e:45:59:58:4c:4e:63:36:e9:2e:b4:bd:96:45:
ac:c9:d1:cd:82:44:4c:3a:67:14:63:36:3b:a8:76:
66:fd:31:2b:ad:f7:3c:55:0c:d1:b3:55:bb:44:86:
8d:e5:ed:3e:a4:39:a9:1a:70:44:99:2e:90:4b:4b:
a0:66:56:5c:1e:95:0e:71:97:a6:d6:09:37:d3:4b:
ef:68:bb:6f:33:d2:09:d7:32:0b:d4:e6:37:c7:6b:
bd:86:a4:53:6e:c7:10:4d:fa:be:1a:0d:23:8c:b7:
64:0d:b8:dd:ca:bb:87:27:94:f8:bd:9e:6f:1b:87:
a7:3c:36:da:fb:fc:ac:66:ac:f1:1c:34:ab:f0:9b:
bc:dc:c7:3c:a4:bd:b3:a5:12:d8:6b:20:da:80:6a:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F8:73:C8:90:7C:31:BE:85:57:C7:42:84:06:19:05:8A:E4:4E:93
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e0:de:8a:37:1c:5d:4f:50:cc:71:79:0d:08:76:8b:b7:00:
e7:dd:4c:9c:e5:66:9f:42:73:28:85:eb:c4:4c:57:bd:e7:b0:
2d:5e:ae:75:80:4a:c6:12:bb:c9:a3:e2:b6:ec:4b:73:87:4d:
ce:c5:83:f1:0c:98:d7:55:66:41:72:b1:b2:01:2b:59:4d:9d:
28:76:f8:2c:6b:45:a4:07:53:d8:77:c3:df:49:26:53:a3:54:
c0:c2:1b:6f:a0:1e:32:8d:fb:d9:ee:9f:76:ba:40:a6:dd:95:
f4:91:48:4e:9a:19:99:f4:08:0e:cf:72:75:1c:96:1f:d3:d9:
60:10:fe:52:64:ae:2d:46:02:40:97:e6:c3:e9:e4:5a:8c:d1:
91:79:b1:83:04:d3:23:31:e0:97:0a:c9:b3:66:d2:0a:49:b3:
9b:a0:3c:3d:d3:50:e8:ad:f1:c3:c4:38:93:4e:85:97:90:83:
d8:fb:b6:ed:aa:c1:cc:69:30:82:d6:1f:e9:b8:dc:fd:3a:0a:
c6:b6:11:a7:9b:42:26:46:12:f3:7d:c6:33:19:ad:5c:4e:7d:
d3:54:bd:7b:13:67:23:b7:bd:0b:ae:d1:3f:06:eb:3d:65:5b:
8f:83:32:e1:95:48:1d:61:ea:4a:2c:5e:81:c3:b3:a9:77:58:
7b:74:e2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:34:51 2026 by rpki-client