Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
File: _a9B0EvGh9D_mK19QHaEdRxGyj4.mft (raw, json)
Hash identifier: YQpINY4hPg2BZkqwV6ORPtu9Jlfiq5jcbq+5yaIr5j4=
Subject key identifier: 7D:EF:E7:D0:D9:A0:40:AF:BC:99:DB:46:AA:0B:C4:A5:27:39:F7:32
Authority key identifier: FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
Certificate issuer: /CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Certificate serial: 019D9A751A51C47487FEC734C519FB414994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
Manifest number: 0357
Signing time: Fri 17 Apr 2026 08:00:58 +0000
Manifest this update: Fri 17 Apr 2026 08:00:58 +0000
Manifest next update: Sat 18 Apr 2026 08:00:58 +0000
Files and hashes: 1: 6OMId8qLq9FNz-0vxg5RBukY9zs.roa (hash: xe2yi3J7qtfn/452oWa5yO6AXTtiMtVrNox5id3Mshk=)
2: MaydDWrUbLvw1QYZAkPLLUQxbi0.roa (hash: wvyXfigpqaIstAVGqzcAWkhhWQ5Hr2D2AHS65eJuN5U=)
3: _a9B0EvGh9D_mK19QHaEdRxGyj4.crl (hash: OAsuzOHvy/YMeF/yn/w7JeGaDlqJ8NOpvsEiDlun3ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:1a:51:c4:74:87:fe:c7:34:c5:19:fb:41:49:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Validity
Not Before: Apr 17 08:00:58 2026 GMT
Not After : Apr 18 08:00:58 2026 GMT
Subject: CN=7defe7d0d9a040afbc99db46aa0bc4a52739f732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:53:eb:6a:17:44:d7:73:96:a6:a0:56:5b:
87:c7:6f:85:c8:cb:3b:e1:58:4e:44:93:13:7b:8f:
73:38:98:8e:5e:da:96:65:d0:25:68:82:79:3f:e6:
ea:87:4c:4e:c7:44:18:ba:5f:d5:77:3a:a8:94:e3:
57:c5:e1:05:8e:2d:21:51:ff:ee:b1:aa:13:f8:20:
0e:1c:fa:2e:ad:40:32:eb:38:aa:bb:85:10:ab:28:
c3:4e:ff:88:94:ad:c7:0a:55:44:c8:b8:96:b0:9a:
d0:cc:7a:37:48:26:49:66:a2:53:21:1c:c5:01:f4:
cd:57:8b:15:de:a4:f8:09:9f:3c:e3:02:6c:9a:f8:
71:a6:77:4a:4e:75:17:5d:24:ea:0b:84:26:9e:71:
4c:62:f0:83:27:a7:57:4d:57:9e:c4:ee:e7:e8:df:
0e:aa:ee:83:6d:e7:05:6e:10:d6:11:88:99:7d:de:
6c:34:47:a9:2e:fd:06:b7:d0:e4:c4:fb:4b:76:e4:
83:bd:bc:5b:f6:c0:4e:d4:04:0a:23:0a:ff:51:c1:
b4:1b:d0:0b:82:88:ef:09:40:ab:68:0d:06:ed:2b:
0f:ac:f6:11:10:e5:1b:eb:94:ad:fb:5d:ae:5a:fe:
87:f5:45:ad:03:9e:25:7a:5c:f2:45:d9:82:b1:8f:
10:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EF:E7:D0:D9:A0:40:AF:BC:99:DB:46:AA:0B:C4:A5:27:39:F7:32
X509v3 Authority Key Identifier:
keyid:FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a5:b4:3d:38:9d:f6:01:db:40:eb:fa:38:d7:fb:39:ea:4a:
85:ff:d1:93:d5:21:63:89:96:e8:ab:38:5e:e9:3c:b2:54:7b:
73:20:d0:53:cb:b0:59:b0:eb:c6:37:aa:8d:d2:4c:f3:0c:37:
16:fc:4e:dd:2e:fc:2c:3a:56:8e:0c:1e:fa:7e:41:99:d6:e0:
14:bf:d3:f3:33:e7:4b:3d:a6:97:33:37:ad:8d:5e:9b:f2:86:
4f:6b:05:34:ed:ad:21:e4:f6:d0:ec:b4:d5:95:81:c0:83:68:
37:e4:33:c4:4b:d0:92:d8:41:34:33:e3:71:6b:a2:15:15:36:
91:18:47:b8:73:00:06:3d:29:e5:61:ec:d4:cc:17:f4:e2:2c:
22:21:3d:07:dd:73:cf:94:e3:d6:d9:32:ed:5c:e3:a3:0d:84:
00:ea:9b:c2:7f:94:89:8a:cf:38:dd:84:0d:6c:c4:c1:b4:8e:
65:3b:d4:b1:ce:b4:5b:9f:4d:97:70:09:3e:3a:c2:58:0e:79:
1c:5a:b9:8f:43:0b:b8:18:04:f4:b4:7b:de:06:37:73:03:b8:
28:75:6c:b7:1b:73:9a:62:d8:67:c7:dd:d6:18:19:fd:0d:1d:
9c:35:04:20:0f:0f:9b:10:c2:9f:44:64:f7:8b:3a:05:ec:96:
0e:84:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:26:39 2026 by rpki-client