Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier: 4N6scMFqmHKOQWNRvr5taWkc59eGHr3dHUhnpgD6ntg=
Subject key identifier: A9:23:8D:29:3F:A9:5E:65:F3:E5:3F:54:B1:8C:ED:EB:E6:EF:41:C1
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 019DA2D348F3C97038BAA8F039DABDE2138D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number: 18F4
Signing time: Sat 18 Apr 2026 23:00:48 +0000
Manifest this update: Sat 18 Apr 2026 23:00:48 +0000
Manifest next update: Sun 19 Apr 2026 23:00:48 +0000
Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: ANzEbM5bJj20tsoJgfkTxIjjzwO7MO3kNniCxIrbOMU=)
2: FHwGNHrCl9ZDaI5iHSATgi0eQI4.roa (hash: Ry8wkccjRDgFgOO1ND+5XAwtEK69W7guaqIyY6Z98Uk=)
3: GgM8OW03SnTWQN6a4-JcJuboxRQ.roa (hash: PcNLLvc5YaEzAxnanxM9AExzd2bC6OppQmgQXDF3KdM=)
4: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (hash: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs=)
5: KnpLhbBEufmPsTr4rfzt358Z5NA.roa (hash: spWQWP4oc84BPT4Abbm0x2lE5bf02yTSVRuZE9yCBqk=)
6: O01AHTz126xddYBIHOgu7hjWpTQ.roa (hash: wUbmS1l2rNfhauG9wUd4dDdjVRn6lpjxrfwiwa8yNYQ=)
7: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (hash: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:48:f3:c9:70:38:ba:a8:f0:39:da:bd:e2:13:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Apr 18 23:00:48 2026 GMT
Not After : Apr 19 23:00:48 2026 GMT
Subject: CN=a9238d293fa95e65f3e53f54b18cedebe6ef41c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:84:14:a7:ac:32:11:51:3f:91:7f:47:4e:5f:
cb:8a:e4:8f:35:9f:d4:b1:c1:30:11:86:14:3d:89:
6b:16:5f:57:a6:9b:eb:6e:90:fb:15:94:5a:63:89:
3e:b0:db:6c:e6:c0:28:56:e9:db:e8:b3:e6:ae:eb:
ed:96:2d:db:16:10:96:75:9b:09:01:fe:0a:3c:96:
85:4e:57:97:e3:c5:d0:d9:2b:f4:45:4b:ed:36:9d:
24:88:3e:cb:56:6d:b6:cc:b1:3b:ed:06:dd:c1:80:
1c:f8:fe:33:01:75:c8:e6:09:1a:76:b6:f4:94:77:
f8:a8:1b:92:b5:8d:09:1f:6c:0e:8e:f1:0f:c9:4f:
1b:23:9a:ae:df:ab:c3:49:89:ec:dc:5c:1b:4e:26:
1d:ab:cf:91:df:5f:4f:83:26:4e:35:57:ff:4e:ac:
3e:06:a7:c5:f3:92:a4:1a:60:2a:dd:77:59:c3:8c:
ea:0b:21:1e:4e:1f:23:f5:a7:58:1e:4d:ad:f8:b0:
a9:a2:e3:a9:e8:97:46:dc:c9:93:0a:69:7f:7e:40:
72:01:a3:a9:08:74:4e:40:21:4f:78:fb:c2:bc:f5:
49:87:81:b4:1f:bc:d7:f7:f0:86:7c:f4:5a:d6:ca:
a8:da:14:44:e9:d0:92:db:df:2a:68:ba:08:e6:e5:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:23:8D:29:3F:A9:5E:65:F3:E5:3F:54:B1:8C:ED:EB:E6:EF:41:C1
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bd:e0:b9:b9:d0:e2:75:6f:2a:82:05:ea:88:d8:7b:6a:f4:
32:53:a8:90:0c:66:b1:c3:f2:73:0e:0b:f1:29:b7:4a:ad:80:
e7:08:9c:28:0d:9d:a0:4f:fe:c2:a4:44:cf:de:dc:36:65:05:
2e:72:ac:7a:50:76:d7:fe:e9:66:95:e2:68:f0:6c:bd:7d:43:
89:9e:6a:fa:cd:37:8f:53:8a:8f:2a:96:e1:de:c2:73:a1:df:
47:e2:d3:ad:c9:d6:dc:8a:59:f6:0a:d0:f4:8b:70:63:22:c7:
e7:c6:ca:9e:68:f8:86:c3:8c:5b:46:16:30:20:69:e6:59:65:
52:6e:3e:ad:33:37:e0:7d:b9:01:31:36:51:c7:d5:bb:6a:12:
d3:9d:c7:cb:50:d8:ad:e2:11:88:08:58:26:24:9e:49:1a:b4:
aa:88:7e:39:c6:2f:45:ad:57:57:1f:6f:c5:cd:d9:47:a8:56:
62:8b:6b:dd:bc:e9:3f:71:f0:c4:89:5e:3b:43:0a:02:b9:1a:
e6:66:92:f3:ab:eb:22:07:4d:16:98:6a:45:84:6b:72:7d:d4:
45:12:83:2f:96:ff:22:ce:bc:61:4c:ae:1b:d7:32:aa:90:aa:
16:c1:22:67:bb:59:11:1e:31:4e:3d:a5:ed:46:f2:28:a2:d5:
ab:f6:40:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:58:34 2026 by rpki-client