Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
File: 9qD_yrRKardihf2LFfuprgRywAo.mft (raw, json)
Hash identifier: jRiAayzlQAtMBcbdKDQrXqaqAGxXeN4GDi47QJE0peA=
Subject key identifier: 5C:A7:24:C8:A6:C1:6D:38:41:22:81:C7:D6:D3:19:CC:28:66:3E:0A
Authority key identifier: F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
Certificate issuer: /CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Certificate serial: 019D9BF51205CCF48FFF13E7F2A06CD668D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 15:00:22 +0000
Manifest this update: Fri 17 Apr 2026 15:00:22 +0000
Manifest next update: Sat 18 Apr 2026 15:00:22 +0000
Files and hashes: 1: 86kV-CBVfnQcJyHUwtgj6mE9ynY.roa (hash: HD7vMFw1ZLvs7IG1Ix80v+8FBmp78WtI8pixF8GnWyU=)
2: 9qD_yrRKardihf2LFfuprgRywAo.crl (hash: 1Iz6pT40ZuKohM1IEeRbJIltwREkIUJf1YUDjVOF3F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:12:05:cc:f4:8f:ff:13:e7:f2:a0:6c:d6:68:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Validity
Not Before: Apr 17 15:00:22 2026 GMT
Not After : Apr 18 15:00:22 2026 GMT
Subject: CN=5ca724c8a6c16d38412281c7d6d319cc28663e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:9f:84:2e:f0:f2:4d:66:ef:eb:aa:d5:e9:
5b:35:9a:9b:91:08:06:f4:72:72:e0:8f:dc:d7:bc:
fe:08:ed:f5:1b:26:9a:b1:2f:80:a0:a8:91:cb:bc:
f8:7c:34:db:ed:98:26:12:ca:2b:2d:81:24:9c:65:
6b:58:20:a8:c2:0b:26:fd:dd:14:88:b8:10:40:5b:
7c:39:f1:0e:61:94:01:20:8a:bf:03:70:dc:b9:b2:
80:d5:4d:fa:bc:8d:19:e8:35:52:64:f7:61:e6:34:
7e:c4:cc:2f:e4:40:60:4e:6b:e5:34:64:c2:65:9a:
8b:ca:2f:3c:29:0d:cc:66:ff:12:bf:2d:dd:c5:a7:
3c:af:22:ee:42:93:8f:15:3c:80:7d:21:d6:3f:23:
87:9a:58:34:6b:e5:96:d4:07:00:6e:15:3b:8e:cd:
ce:35:63:ed:1f:30:1c:5f:0e:3d:1f:ed:fe:4e:75:
64:b9:d1:19:52:fd:c3:09:01:e7:37:45:70:02:ba:
d1:00:b7:d0:a2:02:31:f8:8f:11:2f:04:c2:c8:0e:
32:7b:ec:d3:d7:80:c4:cf:98:30:02:91:6e:98:df:
81:34:a7:7f:33:10:5f:b5:3b:02:17:93:3f:29:00:
bc:54:b8:2a:02:c2:e7:a0:a0:ba:48:a2:f5:50:52:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A7:24:C8:A6:C1:6D:38:41:22:81:C7:D6:D3:19:CC:28:66:3E:0A
X509v3 Authority Key Identifier:
keyid:F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:de:7a:11:fd:fb:52:94:7d:e0:43:b5:12:c8:2f:92:32:4b:
55:e6:63:fd:a3:3b:72:ef:cb:de:29:9c:ea:8b:39:42:60:75:
e5:ff:0a:30:f1:67:23:e8:18:bc:8b:09:76:cd:94:ee:aa:79:
2f:ea:72:e5:4f:6e:df:60:d1:4b:4d:14:2b:14:d8:59:6d:60:
c0:78:c5:46:13:21:6a:35:b1:7a:23:a5:4c:24:42:56:ce:6e:
96:fb:c3:de:5a:be:42:7c:ca:04:58:ca:08:df:8e:80:13:7c:
91:93:6e:6e:a4:96:de:33:de:cf:d4:8c:32:79:55:aa:b6:33:
e4:da:38:b9:69:78:cf:c1:56:0c:95:8c:a3:df:a4:34:87:16:
f2:ce:66:6b:45:e0:f4:6a:2d:c5:87:50:9e:eb:d4:fc:c3:a2:
1b:0f:ea:9b:2e:55:1a:ff:fc:36:44:54:47:44:03:ff:cf:ce:
9b:a6:a2:19:c4:9b:20:1c:40:e6:79:27:18:48:9d:35:16:b2:
9f:64:82:41:9c:96:4f:50:38:93:2b:55:45:8d:b5:b5:3d:4c:
62:2e:c9:8f:28:b7:ab:67:1a:9d:48:99:b8:35:54:d1:47:28:
99:32:09:81:48:7d:30:b9:ce:01:bd:9a:c9:ff:af:ea:42:75:
61:b9:88:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9RIFzPSP/xPn8qBs1mjYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YTBmZmNhYjQ0YTZhYjc2Mjg1ZmQ4YjE1ZmJhOWFlMDQ3
MmMwMGEwHhcNMjYwNDE3MTUwMDIyWhcNMjYwNDE4MTUwMDIyWjAzMTEwLwYDVQQD
Eyg1Y2E3MjRjOGE2YzE2ZDM4NDEyMjgxYzdkNmQzMTljYzI4NjYzZTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk6fhC7w8k1m7+uq1elbNZqbkQgG
9HJy4I/c17z+CO31GyaasS+AoKiRy7z4fDTb7ZgmEsorLYEknGVrWCCowgsm/d0U
iLgQQFt8OfEOYZQBIIq/A3DcubKA1U36vI0Z6DVSZPdh5jR+xMwv5EBgTmvlNGTC
ZZqLyi88KQ3MZv8Svy3dxac8ryLuQpOPFTyAfSHWPyOHmlg0a+WW1AcAbhU7js3O
NWPtHzAcXw49H+3+TnVkudEZUv3DCQHnN0VwArrRALfQogIx+I8RLwTCyA4ye+zT
14DEz5gwApFumN+BNKd/MxBftTsCF5M/KQC8VLgqAsLnoKC6SKL1UFLr8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFynJMimwW04QSKBx9bTGcwoZj4KMB8GA1UdIwQY
MBaAFPag/8q0Smq3YoX9ixX7qa4EcsAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXFEX3lyUkthcmRpaGYyTEZmdXByZ1J5d0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hNWUwNTgtZjQ3NS00N2NjLWI5ZWMt
YWU0NjA5NDM4OWJhLzEvOXFEX3lyUkthcmRpaGYyTEZmdXByZ1J5d0FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9hNWUwNTgtZjQ3NS00N2NjLWI5ZWMtYWU0NjA5NDM4OWJh
LzEvOXFEX3lyUkthcmRpaGYyTEZmdXByZ1J5d0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaN56Ef37
UpR94EO1EsgvkjJLVeZj/aM7cu/L3imc6os5QmB15f8KMPFnI+gYvIsJds2U7qp5
L+py5U9u32DRS00UKxTYWW1gwHjFRhMhajWxeiOlTCRCVs5ulvvD3lq+QnzKBFjK
CN+OgBN8kZNubqSW3jPez9SMMnlVqrYz5No4uWl4z8FWDJWMo9+kNIcW8s5ma0Xg
9GotxYdQnuvU/MOiGw/qmy5VGv/8NkRUR0QD/8/Om6aiGcSbIBxA5nknGEidNRay
n2SCQZyWT1A4kytVRY21tT1MYi7Jjyi3q2canUiZuDVU0UcomTIJgUh9MLnOAb2a
yf+v6kJ1YbmI2w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:56:47 2026 by rpki-client