Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
File: 9q7W1c5BV5fBKF9-9v0EPGRm594.mft (raw, json)
Hash identifier: +rBEpaQTKY5Ezr395u1DzqLW4z3NZrLW/0KjKCek8Tk=
Subject key identifier: 22:85:6A:07:21:5C:2E:BD:1B:F8:A9:3E:C2:2C:2B:82:87:C9:E0:9D
Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
Certificate issuer: /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Certificate serial: 019D99621315AAD827FD05F2A7CB42F328C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
Manifest number: 0DB6
Signing time: Fri 17 Apr 2026 03:00:34 +0000
Manifest this update: Fri 17 Apr 2026 03:00:34 +0000
Manifest next update: Sat 18 Apr 2026 03:00:34 +0000
Files and hashes: 1: 9q7W1c5BV5fBKF9-9v0EPGRm594.crl (hash: 1kwsrvTW2qONQHZUMPBcvvHQv6AWDGIWZb7NP+tIwqo=)
2: h1BmnlXgB6ac2TWYQTKQ2ChwBMo.roa (hash: yzd9rByRC5Jsp/Gy055ZEn4rSEyip4EOwsA55gh4BjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:13:15:aa:d8:27:fd:05:f2:a7:cb:42:f3:28:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Validity
Not Before: Apr 17 03:00:34 2026 GMT
Not After : Apr 18 03:00:34 2026 GMT
Subject: CN=22856a07215c2ebd1bf8a93ec22c2b8287c9e09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:c3:c6:48:7b:1b:13:2b:fd:bd:27:8c:56:
15:87:af:7e:66:06:31:16:cb:f9:7a:46:13:e7:37:
34:02:eb:f4:4a:ee:c0:1f:73:f7:e4:ca:1c:67:97:
43:48:b2:0d:74:bd:54:ca:15:fc:44:19:29:51:15:
ac:80:4c:2f:81:67:1f:85:89:74:d8:a9:ed:28:1c:
0e:3b:f5:0e:24:e7:a5:7c:d9:b9:a2:21:2b:07:9f:
82:91:e4:d6:b5:d9:1d:d1:4f:4c:97:5a:ad:d1:47:
92:29:17:72:fd:9e:6e:b3:2f:be:a0:79:02:64:0a:
a6:97:c5:fc:6d:c6:b8:fa:1d:2b:3c:b2:94:e5:a0:
36:5b:f0:25:56:e1:06:48:f1:67:ea:d7:f8:b7:81:
b8:13:1c:c2:66:15:07:f0:31:59:c5:64:4f:72:e7:
c6:40:35:c0:2e:e4:3f:28:ec:73:02:72:de:44:62:
0b:b9:7e:c7:0c:1d:e9:5b:fd:94:e4:07:b7:6f:65:
bc:2b:f4:6a:5f:9c:c4:0d:9b:e0:1b:96:69:a6:a4:
2f:13:12:5d:bc:03:eb:2c:61:bf:00:11:14:62:d2:
62:68:7d:50:98:a8:c9:79:d4:13:0d:09:7d:82:bf:
cd:b4:a1:19:79:14:ef:52:68:5e:38:64:7f:c5:2d:
b9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:85:6A:07:21:5C:2E:BD:1B:F8:A9:3E:C2:2C:2B:82:87:C9:E0:9D
X509v3 Authority Key Identifier:
keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:97:5d:1c:d1:f0:9a:86:66:38:c3:12:e2:ec:c6:5d:29:6e:
01:c9:43:8e:e1:af:10:be:ce:88:f6:31:94:59:cd:02:e9:6a:
b7:93:fb:8a:35:a7:86:cf:b3:93:b8:6e:90:74:07:85:d8:28:
00:e6:01:36:e3:35:59:a9:b4:32:7b:e2:8a:f3:74:bd:f8:a9:
b5:ea:43:0c:3a:ea:50:63:78:6d:2c:70:e8:54:8d:c0:44:15:
65:e6:e6:f8:e3:92:29:b5:db:06:fd:6a:e5:43:e6:81:47:90:
c1:26:1e:70:25:8e:8b:5c:94:db:d4:0c:35:f2:f0:e9:3f:f1:
3a:a3:23:bf:da:6e:8c:25:36:79:65:c6:19:cb:24:f2:b8:4c:
cc:ad:99:89:fc:2b:7c:2f:d0:ba:81:60:63:36:0f:38:6a:c0:
ea:98:57:31:18:95:80:86:6f:e8:b6:d6:24:a8:4c:0c:09:db:
39:54:76:33:ab:b6:04:58:cb:d2:99:ab:d6:a4:c7:c0:c4:22:
7b:70:d1:08:a5:55:0f:dc:f4:55:8e:64:11:17:3a:2f:7f:44:
02:0e:4e:73:c6:ea:5f:5d:8f:69:da:b6:ae:84:76:cb:79:55:
5e:2c:11:96:6e:b9:ba:10:78:b0:0c:0b:c3:c3:c8:b2:32:ed:
fd:18:d9:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYhMVqtgn/QXyp8tC8yjHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YWVkNmQ1Y2U0MTU3OTdjMTI4NWY3ZWY2ZmQwNDNjNjQ2
NmU3ZGUwHhcNMjYwNDE3MDMwMDM0WhcNMjYwNDE4MDMwMDM0WjAzMTEwLwYDVQQD
EygyMjg1NmEwNzIxNWMyZWJkMWJmOGE5M2VjMjJjMmI4Mjg3YzllMDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfLDxkh7GxMr/b0njFYVh69+ZgYx
Fsv5ekYT5zc0Auv0Su7AH3P35MocZ5dDSLINdL1UyhX8RBkpURWsgEwvgWcfhYl0
2KntKBwOO/UOJOelfNm5oiErB5+CkeTWtdkd0U9Ml1qt0UeSKRdy/Z5usy++oHkC
ZAqml8X8bca4+h0rPLKU5aA2W/AlVuEGSPFn6tf4t4G4ExzCZhUH8DFZxWRPcufG
QDXALuQ/KOxzAnLeRGILuX7HDB3pW/2U5Ae3b2W8K/RqX5zEDZvgG5ZppqQvExJd
vAPrLGG/ABEUYtJiaH1QmKjJedQTDQl9gr/NtKEZeRTvUmheOGR/xS250wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKFagchXC69G/ipPsIsK4KHyeCdMB8GA1UdIwQY
MBaAFPau1tXOQVeXwShffvb9BDxkZufeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83ZmE5ZWQtYjA4Ny00MGNkLWEwMTYt
ZDk1N2I4YzU0Yzk0LzEvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83ZmE5ZWQtYjA4Ny00MGNkLWEwMTYtZDk1N2I4YzU0Yzk0
LzEvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJddHNHw
moZmOMMS4uzGXSluAclDjuGvEL7OiPYxlFnNAulqt5P7ijWnhs+zk7hukHQHhdgo
AOYBNuM1Wam0MnviivN0vfiptepDDDrqUGN4bSxw6FSNwEQVZebm+OOSKbXbBv1q
5UPmgUeQwSYecCWOi1yU29QMNfLw6T/xOqMjv9pujCU2eWXGGcsk8rhMzK2Zifwr
fC/QuoFgYzYPOGrA6phXMRiVgIZv6LbWJKhMDAnbOVR2M6u2BFjL0pmr1qTHwMQi
e3DRCKVVD9z0VY5kERc6L39EAg5Oc8bqX12Padq2roR2y3lVXiwRlm65uhB4sAwL
w8PIsjLt/RjZTA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:36 2026 by rpki-client