Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier: EDidWQ0zuTKYveuC0fmoTug2Cae8ekNfUq575PChwbE=
Subject key identifier: C1:EF:DB:B9:66:8F:43:AC:1B:F1:D2:76:EC:A9:DE:1A:C9:11:EB:AA
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer: /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial: 019D9AE26605B0CF823EBB56EDCF4DB8F73C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number: 0CFB
Signing time: Fri 17 Apr 2026 10:00:21 +0000
Manifest this update: Fri 17 Apr 2026 10:00:21 +0000
Manifest next update: Sat 18 Apr 2026 10:00:21 +0000
Files and hashes: 1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: qWu2KEc5ohHLuurkC+nKqfLCY0c1AQ9wYe6HOnX33EU=)
2: d5odnptrjJaW4wbv5e-w-InznHA.roa (hash: HdS9hjcjd6FA7NCMLYoBnDJO3cACO6YPZ4nZtli4PVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:66:05:b0:cf:82:3e:bb:56:ed:cf:4d:b8:f7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
Validity
Not Before: Apr 17 10:00:21 2026 GMT
Not After : Apr 18 10:00:21 2026 GMT
Subject: CN=c1efdbb9668f43ac1bf1d276eca9de1ac911ebaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:ee:46:ed:35:50:7b:b0:95:47:b0:f2:58:
36:39:00:4a:46:33:79:c1:bb:6a:2d:e2:c8:0e:dd:
70:11:96:35:3e:7c:30:91:af:d4:23:92:63:3f:5d:
e9:ed:a1:d0:18:75:64:26:ff:e4:f8:8d:7f:c2:dd:
c8:fe:10:13:9b:9d:4a:38:67:35:73:30:30:65:f8:
01:17:88:5b:0a:1d:4a:18:e9:e2:0b:b0:90:54:15:
e5:57:2f:53:d1:72:d0:29:e0:fc:96:24:63:df:8d:
25:2e:74:ac:a0:b2:9f:bd:9b:88:0f:48:15:be:24:
4b:d7:5b:7d:95:ab:9d:c0:47:04:34:22:c2:9e:e9:
43:a6:f0:87:c5:02:96:27:ca:93:00:9c:f6:89:9f:
e6:88:ac:4b:85:04:8a:ea:bf:f0:61:3a:d9:ab:90:
04:1a:07:58:33:ff:39:2e:8b:77:4c:10:47:4a:a9:
69:9f:83:99:dd:f1:85:5c:de:fd:9a:2b:3a:b8:cd:
e9:5f:c3:d6:e9:2c:6f:99:53:4e:1f:27:b3:2e:c5:
73:c8:4a:fc:05:78:fc:44:cf:dd:70:33:30:a5:f3:
52:d0:90:10:17:e5:ca:9b:63:91:b1:ab:10:1a:a5:
b0:60:77:38:cb:d4:82:d3:ca:76:a5:04:07:c8:33:
11:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EF:DB:B9:66:8F:43:AC:1B:F1:D2:76:EC:A9:DE:1A:C9:11:EB:AA
X509v3 Authority Key Identifier:
keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:70:79:a4:40:66:9f:7c:2e:82:97:8c:b9:16:71:30:89:4c:
1f:f0:dd:25:c4:d6:4f:39:26:92:46:85:f7:e5:ef:2f:3c:8f:
1c:57:ac:75:0a:cf:98:91:a4:b3:b1:e2:31:7f:b6:50:02:47:
c5:65:a4:1c:33:4a:71:2f:0c:11:f7:35:68:d3:d6:96:22:30:
14:eb:1e:5d:b9:2a:21:41:d9:b8:0d:6c:a1:5b:b8:06:86:46:
cc:44:4e:b1:12:c5:56:d0:a6:a5:22:7f:a4:7a:c7:5a:85:c0:
95:b5:d1:b9:a1:00:7b:bf:5d:98:c0:65:87:71:1b:b6:a3:aa:
70:22:d6:75:17:76:74:c9:1a:8e:15:f7:d3:96:0e:9d:d1:df:
4e:c4:0e:0c:5d:bf:83:69:97:36:db:ea:5f:36:b0:d4:f9:a4:
3e:a2:0b:c7:95:d7:6a:9a:df:6b:13:7f:5a:c8:42:7b:c2:23:
77:b3:e5:0d:59:bf:b5:e8:87:d8:1a:06:a8:b3:7a:5a:26:24:
7b:b5:7e:22:be:4c:cc:18:f2:76:44:2d:0d:32:5b:3c:9c:51:
d8:54:77:6f:3f:a7:86:3a:44:64:1e:1e:bb:69:f1:e2:93:f3:
f5:ba:e0:1c:c4:b5:00:ad:16:a2:86:de:47:26:19:03:b0:92:
f0:25:ca:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:00:43 2026 by rpki-client