Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: jMhCqcvGcCQvkJwuB+F0YZGUL6IPWnYsyzDF9/zorzo=
Subject key identifier: 9C:02:C6:4C:65:99:4A:A2:5C:52:32:25:BF:27:24:3E:D9:3C:A9:E0
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019D9A86D51C00195D7DFBE5B4A5E2B66E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 1043
Signing time: Fri 17 Apr 2026 08:20:20 +0000
Manifest this update: Fri 17 Apr 2026 08:20:20 +0000
Manifest next update: Sat 18 Apr 2026 08:20:20 +0000
Files and hashes: 1: 1IM51gxl6lcTSTNGwwUMQCchheY.roa (hash: QWLXY2otuCAl5EoSJJbCr1wwQcyhlMxXhAKyZ91NG1s=)
2: Td6ePlmmjfj3QDaFtTuHW3D9dC0.roa (hash: 08i4lHbdORnvMw2omeJpM2jEVbltVT01xGE4VC+1/bo=)
3: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: gYa73sh5jbIzhRsonau4KTJJNBA7Cl+LxSOVnuOuuPQ=)
4: jcdUCN5v_fEw6tgouDGmsAi4uqQ.roa (hash: aK8/MYOjzg2j9dQklFTXiZMZEJgQejRF7dLncl3fyJg=)
5: lWHGG7_f5OqTv0LmU1Cq9xuDChI.roa (hash: vy8Lvl/OimTfUisZZ2J0ZdnOHx/P1IuOxxEKFhLRgLU=)
6: uvv9qPqkc14AyTkKhEshaclg-ro.roa (hash: oelEEgJXLeJc3nzjBLZO2ZEiqv1cxH4FuyLv/ZRpkA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:86:d5:1c:00:19:5d:7d:fb:e5:b4:a5:e2:b6:6e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Apr 17 08:20:20 2026 GMT
Not After : Apr 18 08:20:20 2026 GMT
Subject: CN=9c02c64c65994aa25c523225bf27243ed93ca9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:7a:f3:fc:49:ed:db:ba:3c:6e:f4:45:4a:
2f:4a:5f:36:09:af:84:e6:37:51:91:a2:3d:ef:cc:
b1:4c:ef:66:dd:1f:e1:19:f4:89:29:20:94:a2:2b:
bb:dc:a9:c9:8c:d0:d0:b1:5a:bc:ff:07:1f:e8:21:
f4:97:01:d7:72:27:39:d4:92:e3:d0:7a:47:a8:bf:
9b:48:b3:75:f5:20:fa:48:39:e9:03:e7:fd:0d:e9:
9b:52:06:87:3b:ca:6d:34:fd:11:c8:63:70:c7:89:
1b:6e:8d:55:08:85:fc:52:3d:8a:49:0a:2a:c5:83:
52:02:fa:86:63:83:40:60:6c:7b:10:ea:c7:9c:4e:
06:b2:15:4c:38:cf:52:87:1a:6b:03:f6:2d:1d:ae:
c5:e3:26:56:ee:c4:f6:04:8d:24:72:d1:4a:e4:cd:
28:eb:07:c4:f6:a4:0a:35:b2:ef:57:1c:1b:c6:4e:
4d:65:c0:b1:99:1d:2b:5e:4d:d7:45:d4:7e:47:33:
ae:5f:e2:25:08:13:76:ce:03:03:0a:f7:e6:73:e3:
2e:fa:b7:7a:7c:68:fb:18:5e:69:d5:4c:c9:a6:09:
68:cf:db:d5:1f:55:9e:b9:aa:94:31:36:b7:1a:a1:
49:74:3f:59:a6:2b:97:4b:4a:a6:5a:ac:7e:ec:6a:
5e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:02:C6:4C:65:99:4A:A2:5C:52:32:25:BF:27:24:3E:D9:3C:A9:E0
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:61:2f:18:e2:7d:91:57:5d:36:b2:f2:1d:23:bb:83:b8:8d:
8c:16:b0:c0:48:bd:31:aa:9f:59:38:64:d3:2c:44:26:91:7d:
f9:72:5c:0d:c9:bf:93:2c:ce:2f:44:80:b9:f4:e1:a6:d1:19:
d6:48:31:7c:d0:5b:6e:2e:98:ac:e5:7b:a7:bc:fa:1c:ca:9b:
ef:1a:76:c6:4b:eb:5a:3e:18:db:a2:6b:9d:8e:39:9f:0f:a2:
11:9b:50:e0:6b:89:cc:62:0d:c6:29:d1:58:46:26:8c:ab:ab:
09:07:2b:18:a0:2d:76:d4:96:97:4b:37:68:96:4f:d0:49:78:
62:1e:51:2c:5c:49:a2:3d:4f:da:d7:bb:85:23:9e:ea:74:7b:
27:92:7c:1e:f4:cc:08:19:a9:e0:74:d4:25:19:20:f5:50:96:
0e:60:a1:59:a7:65:97:ff:66:97:fb:c4:7c:23:56:7e:a0:9d:
a3:04:f0:f8:eb:8e:56:7a:24:ce:2c:00:f1:16:02:3f:13:f3:
82:dd:1e:04:3d:5a:d2:f5:5c:73:df:38:e4:4c:57:e6:bd:0b:
3c:9c:9c:b5:6e:dd:9b:a9:2c:d7:7a:15:2a:74:db:61:e1:da:
3c:ae:a7:1a:e2:d8:06:9c:d4:d5:45:81:26:fd:ec:7a:c1:7b:
e8:81:de:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:07 2026 by rpki-client