Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File: 9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier: wEbDq+ShXrR2wrWnDoi25wtJ7f1hsjhN+XgXUqO0XDs=
Subject key identifier: 30:10:EA:93:28:F6:29:99:25:04:A9:BC:6E:03:5F:3A:70:34:21:04
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer: /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial: 019D9D3FDB0764D9D9E8BCA48BB0454F11E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number: 17D9
Signing time: Fri 17 Apr 2026 21:01:40 +0000
Manifest this update: Fri 17 Apr 2026 21:01:40 +0000
Manifest next update: Sat 18 Apr 2026 21:01:40 +0000
Files and hashes: 1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: Nhj3ON5q660U926YO7GDqqGneOccIDPJ6MXD2Q2/GJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:db:07:64:d9:d9:e8:bc:a4:8b:b0:45:4f:11:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Validity
Not Before: Apr 17 21:01:40 2026 GMT
Not After : Apr 18 21:01:40 2026 GMT
Subject: CN=3010ea9328f629992504a9bc6e035f3a70342104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:64:9b:f6:bf:bc:15:69:0d:f4:63:26:ad:
de:de:9f:3f:e9:8c:d0:43:ca:ac:f0:ba:82:3a:c2:
8e:ec:76:16:76:b3:77:ea:96:67:c9:05:8d:b4:9e:
8c:4a:56:5a:92:74:54:d7:a4:73:fd:1e:98:50:ba:
6e:28:44:59:e8:f1:82:e5:1d:8c:c2:18:5e:9d:a4:
ed:1c:b5:3a:ab:c9:bb:44:dc:3a:23:0d:ee:5d:40:
e5:f7:a1:88:01:7b:2c:7d:ab:16:62:69:05:49:48:
fa:c5:50:d7:9a:d4:70:62:29:72:bb:d3:51:7c:69:
7c:b5:77:1e:f5:c4:c2:9c:31:d8:ad:da:f7:be:15:
c6:b5:9b:a3:35:ac:c4:3c:9c:ca:96:b4:38:c0:23:
fa:e6:9a:2e:59:56:aa:57:8a:fe:28:40:c8:84:45:
bb:95:10:81:9c:fc:46:7c:3c:eb:a8:0f:74:3e:cd:
51:6c:9e:b0:17:10:ee:93:03:35:0e:c6:67:81:e6:
96:d6:3f:e4:6f:59:e6:84:31:ca:e0:09:29:c3:cb:
33:df:a2:34:66:ea:31:c4:50:ec:35:ce:41:e3:6e:
d7:bc:79:9c:0a:67:7c:13:23:31:16:07:e9:68:82:
d4:43:f6:b1:7f:85:48:6c:8f:76:10:b0:11:07:d7:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:10:EA:93:28:F6:29:99:25:04:A9:BC:6E:03:5F:3A:70:34:21:04
X509v3 Authority Key Identifier:
keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5a:c8:23:0c:78:ea:4a:12:75:4d:24:62:00:06:5e:5b:56:
09:72:0b:66:1d:1b:68:53:d6:34:0a:9a:de:50:2c:18:23:fd:
17:dd:f1:4d:14:19:66:69:df:c5:30:57:61:01:d4:cd:cc:7f:
85:79:64:7a:e8:38:a8:0a:98:d4:82:63:66:27:2a:f0:74:47:
b9:87:a5:ba:61:6c:b0:27:aa:a2:ee:a6:10:55:d8:8e:17:c3:
69:e5:bf:01:57:92:1b:43:e9:e7:41:f5:81:ed:23:fb:4f:3f:
32:b7:68:d7:34:a6:5e:7e:5d:68:1e:c5:a0:c6:4a:79:a5:a0:
26:29:60:b1:e9:7b:42:7b:42:93:43:05:fa:6b:58:4a:8e:2f:
16:4f:f4:93:c5:41:d8:b6:4f:9a:8d:57:68:79:92:80:2a:db:
1b:c9:ea:d5:6d:be:2f:ed:b6:bf:e6:f6:4e:ae:bf:b5:fe:8e:
d9:77:ca:81:1a:3b:16:9a:58:80:c0:de:e8:d8:07:bc:ec:10:
e9:17:6c:61:f6:5f:48:f9:63:46:97:31:89:b6:9b:7b:68:aa:
39:e0:93:a5:a7:d2:7d:be:7a:50:6e:30:9f:be:82:c8:9a:dd:
6f:c5:5b:ea:d7:07:8b:51:6a:41:c8:fb:7f:e2:5f:38:dd:3b:
f9:20:f7:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dP9sHZNnZ6Lyki7BFTxHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjVjODhjNWVkOTRhZjFjOTlkNTAxYmEwMjk1ZjQwNDM3
MjUxYzQwHhcNMjYwNDE3MjEwMTQwWhcNMjYwNDE4MjEwMTQwWjAzMTEwLwYDVQQD
EygzMDEwZWE5MzI4ZjYyOTk5MjUwNGE5YmM2ZTAzNWYzYTcwMzQyMTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3pkm/a/vBVpDfRjJq3e3p8/6YzQ
Q8qs8LqCOsKO7HYWdrN36pZnyQWNtJ6MSlZaknRU16Rz/R6YULpuKERZ6PGC5R2M
whhenaTtHLU6q8m7RNw6Iw3uXUDl96GIAXssfasWYmkFSUj6xVDXmtRwYilyu9NR
fGl8tXce9cTCnDHYrdr3vhXGtZujNazEPJzKlrQ4wCP65pouWVaqV4r+KEDIhEW7
lRCBnPxGfDzrqA90Ps1RbJ6wFxDukwM1DsZngeaW1j/kb1nmhDHK4Akpw8sz36I0
ZuoxxFDsNc5B427XvHmcCmd8EyMxFgfpaILUQ/axf4VIbI92ELARB9dMSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAQ6pMo9imZJQSpvG4DXzpwNCEEMB8GA1UdIwQY
MBaAFPS1yIxe2UrxyZ1QG6ApX0BDclHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxYSWpGN1pTdkhKblZBYm9DbGZRRU55VWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS85N2ZmMDktZjRkZC00ZWM4LTk1NDIt
YzU3YWRhZDFiZmEzLzEvOUxYSWpGN1pTdkhKblZBYm9DbGZRRU55VWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS85N2ZmMDktZjRkZC00ZWM4LTk1NDItYzU3YWRhZDFiZmEz
LzEvOUxYSWpGN1pTdkhKblZBYm9DbGZRRU55VWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1rIIwx4
6koSdU0kYgAGXltWCXILZh0baFPWNAqa3lAsGCP9F93xTRQZZmnfxTBXYQHUzcx/
hXlkeug4qAqY1IJjZicq8HRHuYelumFssCeqou6mEFXYjhfDaeW/AVeSG0Pp50H1
ge0j+08/Mrdo1zSmXn5daB7FoMZKeaWgJilgsel7QntCk0MF+mtYSo4vFk/0k8VB
2LZPmo1XaHmSgCrbG8nq1W2+L+22v+b2Tq6/tf6O2XfKgRo7FppYgMDe6NgHvOwQ
6RdsYfZfSPljRpcxibabe2iqOeCTpafSfb56UG4wn76CyJrdb8Vb6tcHi1FqQcj7
f+JfON07+SD3Kg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:44:52 2026 by rpki-client