Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File: 9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier: 3+YNAOAgdjaVhXa9wOwBO+O4Kuf8dH3GuENtohXBtDg=
Subject key identifier: E4:02:E8:A6:5A:96:25:C3:B7:C4:E6:AC:20:B8:1B:06:BA:94:C1:A4
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial: 019D9850B3E6C75CBC57C72438E71A6A0AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 22:01:58 +0000
Manifest this update: Thu 16 Apr 2026 22:01:58 +0000
Manifest next update: Fri 17 Apr 2026 22:01:58 +0000
Files and hashes: 1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: Ez423mQqTayxHza549KG1ZUxUkcVIptx0DH3puVdLno=)
2: C4r9_4LMNZyXrJrExvRTXCrazjo.roa (hash: I0l1JrLTqSKZ4rSbNS1J06hQR75J/+SJ8by7D4fg+Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:b3:e6:c7:5c:bc:57:c7:24:38:e7:1a:6a:0a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
Validity
Not Before: Apr 16 22:01:58 2026 GMT
Not After : Apr 17 22:01:58 2026 GMT
Subject: CN=e402e8a65a9625c3b7c4e6ac20b81b06ba94c1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:23:1f:4b:b4:72:6f:72:03:f0:35:04:60:
b7:a7:44:66:cc:67:e4:a4:29:6b:63:a2:17:7a:8d:
c0:44:35:3c:11:b1:3d:20:7b:ea:a3:7b:24:3a:cf:
bb:b4:e7:d7:fa:30:0c:67:7c:7d:59:f7:d2:84:5b:
ca:6c:7e:84:77:7a:1d:8b:10:22:f0:9b:97:0f:67:
f5:35:b9:b7:db:18:dd:4b:ce:d9:38:69:a1:ca:fe:
8f:7e:4a:40:b9:11:c7:c5:4b:54:2c:be:5d:00:5b:
89:30:8c:98:96:90:62:a3:38:69:c2:52:7b:1b:bd:
71:15:2d:2f:b9:10:24:ac:b8:75:f4:05:0f:ab:87:
40:8b:91:25:9d:04:25:a5:f1:9d:79:11:3e:48:ca:
82:d7:74:46:57:b1:92:f5:81:cf:c2:02:2e:f1:80:
74:02:2b:7f:77:5d:a4:eb:2f:f2:8b:9c:ee:5b:bb:
c9:cf:82:e9:2e:e3:0e:1a:5a:06:26:f8:d9:0f:9b:
5e:c8:5c:50:38:eb:d7:bd:92:ee:6e:5e:e2:6f:c1:
ab:fb:dc:b6:ec:12:f0:c3:aa:66:88:7a:36:c1:7d:
10:49:7e:30:a1:6f:2f:96:d1:42:fe:71:f0:24:18:
23:8d:55:4a:d3:16:13:9a:56:e3:73:a0:bf:a8:ab:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:02:E8:A6:5A:96:25:C3:B7:C4:E6:AC:20:B8:1B:06:BA:94:C1:A4
X509v3 Authority Key Identifier:
keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:52:e6:d8:27:d2:b0:2e:ab:40:12:ad:cb:98:1a:61:67:ae:
a0:fe:2c:99:d1:ac:28:d1:3c:7b:15:b2:fd:32:c3:f5:57:37:
8a:f7:db:c1:e9:78:d4:c9:41:10:0e:01:da:70:65:ae:00:f1:
9b:d0:fb:f0:4b:37:37:53:09:87:fc:7d:b9:bc:76:c2:c6:d9:
26:77:cd:72:75:74:04:d6:97:78:ed:3f:e6:23:74:eb:c2:66:
94:62:f8:14:58:3e:8b:67:94:9d:f5:d3:15:57:46:55:8f:dc:
01:0f:be:19:db:28:6d:11:f0:1d:50:b0:c8:27:4e:66:a6:e8:
7f:38:31:76:19:d5:bd:c7:bb:a5:f0:78:c4:9d:fb:04:05:ab:
e7:1c:60:7b:29:83:09:15:1e:49:de:2d:33:20:19:ba:c1:de:
f9:2e:a9:9b:54:6c:32:32:b3:82:df:93:54:cc:7a:dd:1d:0c:
5e:e0:5f:73:3b:c2:18:17:85:3c:90:1b:89:98:ab:9d:36:97:
98:5b:8b:45:2c:a7:c4:d7:d9:c7:56:cb:13:15:22:cc:0a:00:
70:d2:fb:e9:30:fd:e8:5a:ef:ef:54:d4:5e:01:2d:f5:23:6b:
ad:52:f8:7c:65:c4:a9:21:ad:2f:6f:14:74:df:da:56:b5:6b:
09:f2:df:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:04 2026 by rpki-client