Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
File: mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft (raw, json)
Hash identifier: A41zmmAKp2xDVqCGXgVIYDu4ovUKqEzBkAdU9BVFBr4=
Subject key identifier: 14:C4:F6:E1:11:6C:BD:27:9A:F6:D8:4C:D8:03:B4:27:93:A3:2D:7A
Authority key identifier: 99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
Certificate issuer: /CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Certificate serial: 019D98F4D005C71A5B1CCB03C5A25A399AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
Manifest number: 0891
Signing time: Fri 17 Apr 2026 01:01:13 +0000
Manifest this update: Fri 17 Apr 2026 01:01:13 +0000
Manifest next update: Sat 18 Apr 2026 01:01:13 +0000
Files and hashes: 1: Xgkh2jqWshIrm_XP38KT2hJAFLI.roa (hash: HtXZbHm1lMY4MWtIUl2UqL3oGRY9eBOP4/14fbeHHSQ=)
2: mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl (hash: EK/Zxf0ojT8VSlH8b7bkXdNUsCM84JNC0R6R6fH6kys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:d0:05:c7:1a:5b:1c:cb:03:c5:a2:5a:39:9a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Validity
Not Before: Apr 17 01:01:13 2026 GMT
Not After : Apr 18 01:01:13 2026 GMT
Subject: CN=14c4f6e1116cbd279af6d84cd803b42793a32d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:b5:b7:91:98:42:76:0d:d2:5a:18:01:57:
39:e8:88:16:57:b9:81:3b:e7:56:3e:ee:f9:db:bb:
22:3e:39:f0:0b:f2:87:d2:8f:ea:95:fd:91:df:04:
fd:34:d7:3a:19:db:e9:ed:2a:ea:cd:56:75:0e:ee:
35:73:00:64:20:4c:97:74:53:89:87:0e:0c:fb:78:
b2:ab:2a:4c:d1:16:4a:d4:61:45:9e:7b:6b:b2:25:
14:a5:64:77:40:6b:84:d9:5d:77:76:57:00:72:49:
05:ca:ba:6d:8e:db:2e:73:86:88:5e:cb:b3:e2:a6:
a4:40:3d:b3:d0:27:78:6f:38:9b:8b:18:9d:c2:91:
94:3f:2e:88:35:fb:68:17:cc:8f:76:79:da:21:3e:
17:0c:04:e7:25:ae:c9:3c:44:00:a9:a8:ba:31:cd:
54:cb:a9:5a:1c:01:88:15:4a:21:f4:a5:b6:d6:8f:
89:87:48:4a:8d:8e:17:9c:4e:cd:19:cf:a5:6d:de:
cc:23:0a:8a:e0:98:7b:48:36:2c:85:99:1c:bf:cc:
93:4b:88:19:7c:50:ec:8c:79:6a:45:5b:21:17:b0:
8f:0a:20:5e:a2:27:a3:35:cb:8d:64:be:a9:91:58:
29:9f:c1:cf:a0:9e:31:e0:29:47:bf:d5:e4:4f:a6:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C4:F6:E1:11:6C:BD:27:9A:F6:D8:4C:D8:03:B4:27:93:A3:2D:7A
X509v3 Authority Key Identifier:
keyid:99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a0:46:1f:ac:63:a9:ac:73:22:08:2e:e6:c2:4b:b8:bc:e4:
a2:03:06:b8:84:5a:b8:a1:3f:de:db:65:f8:a0:e4:e2:f3:ec:
37:cd:46:07:1d:18:18:09:bc:04:b4:41:4b:86:18:a0:6e:3b:
8c:26:cd:c0:28:e4:b2:b0:7e:9d:91:b9:43:ad:df:19:9f:bd:
c9:c7:53:d2:19:59:41:5d:de:a6:24:b3:a7:32:97:4f:c7:7f:
fb:b0:9b:97:15:8e:56:97:01:6a:8c:59:7a:43:52:83:4d:60:
76:35:43:80:55:5c:71:53:5a:d0:24:8a:99:99:07:01:92:51:
3c:82:71:8f:fb:60:02:72:75:13:94:b6:27:1d:ae:ce:a6:3d:
69:cc:a6:e0:b4:3d:53:88:e0:cc:9b:69:f8:39:f4:b7:ea:d8:
d9:d4:c8:a5:2f:5d:8a:53:b6:4f:1f:99:bd:c9:67:23:9a:de:
df:f5:45:f4:da:02:04:eb:25:cc:c0:b8:c8:f3:e2:e2:b2:15:
1a:79:75:7e:bf:2d:2b:21:d2:9a:f4:21:c1:a6:7a:e4:3f:a3:
50:ca:57:b9:7b:2a:49:59:ce:83:a5:69:bc:90:35:5f:17:96:
b7:17:95:4e:de:ec:8e:df:49:92:0a:43:9c:fb:2c:b2:ba:e4:
9f:35:fd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:31 2026 by rpki-client