Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
File: 9RKnWcZemEm7fFMtXrtESZpRW_8.mft (raw, json)
Hash identifier: wTF1C+xKFpPscdE8Fp6FTSLOFiPbslJCCQUw/BpyAq8=
Subject key identifier: 86:38:1C:59:09:D0:E6:D2:7F:95:B0:C8:B4:33:D8:BE:75:21:28:5D
Authority key identifier: F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF
Certificate issuer: /CN=f512a759c65e9849bb7c532d5ebb44499a515bff
Certificate serial: 019D98F50C6AFB355225A63794AA6F6BC6B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
Manifest number: 088F
Signing time: Fri 17 Apr 2026 01:01:29 +0000
Manifest this update: Fri 17 Apr 2026 01:01:29 +0000
Manifest next update: Sat 18 Apr 2026 01:01:29 +0000
Files and hashes: 1: 9RKnWcZemEm7fFMtXrtESZpRW_8.crl (hash: R53OTGePXInFEnARY7IC7KyD6uRG1Gl1/Qzkh1dKHoM=)
2: FsiQXTQNPgnlk7n5k6ny75SvAeI.roa (hash: u0ugT8qOwrczaf2dJSuiLbaGjKBSdb+eJY/Q3htlxMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:0c:6a:fb:35:52:25:a6:37:94:aa:6f:6b:c6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f512a759c65e9849bb7c532d5ebb44499a515bff
Validity
Not Before: Apr 17 01:01:29 2026 GMT
Not After : Apr 18 01:01:29 2026 GMT
Subject: CN=86381c5909d0e6d27f95b0c8b433d8be7521285d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:11:48:e7:bd:2b:a0:bd:47:eb:ff:38:5b:
ec:f0:c8:3c:42:c8:e4:a2:22:7e:ce:b6:82:45:e5:
59:fa:c6:33:4a:27:fc:5e:47:73:df:97:35:ee:60:
41:19:fd:34:ce:83:2d:d7:09:69:f0:86:bb:1b:ff:
f9:e8:ad:7c:75:18:bf:96:78:bf:87:6f:80:6e:1d:
6e:97:a0:63:4c:04:7f:f6:0f:0a:80:1c:fc:f6:12:
a1:7c:25:f0:b3:3d:2b:a7:0c:45:db:9a:ed:49:33:
d1:3f:31:c3:77:06:ec:ff:53:e1:08:21:9b:7e:62:
b4:92:c9:15:b7:b2:ab:a0:8f:24:79:64:74:5c:88:
11:1f:d7:ad:5b:d3:00:3a:5d:74:e0:6c:ef:00:2c:
d4:72:0d:b2:91:8c:8a:7e:22:01:00:69:56:59:4d:
e3:b3:70:23:83:6a:ff:8d:5a:af:11:4c:f4:42:74:
90:b2:8a:5f:a3:4d:b9:81:fe:e5:18:12:c9:67:01:
1e:fa:50:0c:bd:66:ff:b2:7e:40:e0:72:5b:f5:48:
27:29:f1:a8:17:2d:6a:b8:92:16:16:60:1d:8c:07:
8f:bf:24:80:f1:31:39:ce:83:9f:65:d0:0d:31:38:
86:ab:3a:c3:63:c7:c7:8d:a2:4c:74:bd:f8:72:12:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:38:1C:59:09:D0:E6:D2:7F:95:B0:C8:B4:33:D8:BE:75:21:28:5D
X509v3 Authority Key Identifier:
keyid:F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7b:df:0e:e1:7d:22:63:48:b1:b1:be:27:57:3f:d2:90:2b:
c4:0b:c0:f0:8f:ff:e4:3d:33:56:35:32:97:34:f9:77:21:1a:
02:c9:5c:be:93:c3:0a:3f:f5:a8:77:5d:49:f2:40:e9:95:e4:
20:80:ad:dc:0c:5f:66:fc:6a:6b:59:c9:f7:ff:8a:9d:6d:59:
bc:5a:da:1d:18:5f:1c:94:94:fe:fb:1b:51:c5:17:7e:ef:80:
dd:28:79:64:66:f3:54:75:8c:c5:a0:18:67:cc:54:1b:44:29:
d4:cf:a7:29:b9:42:c8:54:71:d5:52:0f:55:02:20:35:ee:1d:
54:52:dc:7e:c4:e8:24:9f:78:45:1b:0a:c2:74:e7:7d:d8:0e:
3d:d5:b4:2d:d5:73:32:fb:65:61:ff:f2:17:ac:47:da:94:72:
2b:d5:41:57:91:9a:c6:55:2d:a8:90:59:1b:4d:e3:0f:6b:fb:
57:eb:c7:58:ab:e6:75:06:25:d6:72:02:07:e5:70:03:1e:d0:
4c:89:bb:0d:4c:60:da:b0:08:d2:e3:17:f2:b3:9a:51:3e:71:
27:56:88:ef:a6:9f:08:eb:9d:cd:70:52:c4:62:d6:18:b3:03:
92:66:53:03:ba:d2:46:b2:d7:cc:3e:64:7f:04:20:c8:28:44:
67:f1:61:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:53:23 2026 by rpki-client