Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier: guqnhpJChZ2/CHsksNX9HIcgpETJhzkiDgqZmVkeDQ4=
Subject key identifier: 77:DC:F4:2A:81:09:C3:5F:F3:58:AB:44:7A:67:9C:01:F8:71:38:64
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial: 019D984F9300161DCD2FF48E154F9D7C5361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number: 18BC
Signing time: Thu 16 Apr 2026 22:00:44 +0000
Manifest this update: Thu 16 Apr 2026 22:00:44 +0000
Manifest next update: Fri 17 Apr 2026 22:00:44 +0000
Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: gE+7h4d+2o8jJJlZy/uRkBQlF3rz8zU6TnjBueR4Ko0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:93:00:16:1d:cd:2f:f4:8e:15:4f:9d:7c:53:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Validity
Not Before: Apr 16 22:00:44 2026 GMT
Not After : Apr 17 22:00:44 2026 GMT
Subject: CN=77dcf42a8109c35ff358ab447a679c01f8713864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:7f:d0:41:75:07:2b:42:ef:ae:bb:f1:fa:
b6:4a:d1:4f:a5:9a:fb:c2:a0:20:7d:48:e4:ee:0c:
ef:88:0a:14:2d:e1:e9:a4:59:ff:97:d6:e6:b2:c9:
a1:63:5b:f9:62:e9:51:20:d1:87:67:f9:c6:07:2c:
f0:71:58:ca:c9:2d:36:bc:a8:3b:a9:c9:6b:6a:dd:
eb:dd:e4:87:4c:f9:6a:9d:96:e8:3b:2f:99:06:99:
be:fd:8d:43:6c:e4:9a:53:35:d8:ff:42:59:30:f4:
d8:b2:ab:8a:64:b5:0b:d2:20:33:a9:75:05:fa:e6:
18:3a:67:20:53:de:2b:4f:43:0d:2e:2b:28:78:17:
50:38:26:e6:5a:16:42:b9:5f:ac:d2:4f:7a:af:d1:
4c:fb:ed:64:bc:eb:b1:28:94:a8:3e:c1:25:22:db:
2f:73:8d:1c:86:9b:7d:de:df:b3:18:46:3c:93:97:
a6:51:9f:7f:ae:db:a6:ca:8c:8a:fc:4d:9b:b7:58:
40:47:09:21:96:52:bf:ef:cb:39:20:bd:62:af:71:
e9:ae:1b:59:00:2e:8d:3c:bb:71:5b:ff:a0:ea:cf:
b4:53:59:b5:30:8f:1c:7d:5c:54:56:98:95:b0:1c:
69:16:27:c0:8c:ce:05:8f:de:3f:6b:13:f7:33:61:
72:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DC:F4:2A:81:09:C3:5F:F3:58:AB:44:7A:67:9C:01:F8:71:38:64
X509v3 Authority Key Identifier:
keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:96:ca:f4:a7:13:77:ff:9b:88:4e:37:52:26:ec:f0:80:42:
87:4d:4b:4f:55:df:9e:0a:62:84:3b:21:d4:80:89:41:52:8f:
6f:af:0a:fd:25:25:51:c2:e9:6d:ab:5f:97:85:a7:a8:c5:8e:
be:bb:8c:17:02:2c:92:f6:b2:f9:d5:06:e6:e0:e9:bd:82:69:
e0:5f:38:29:ff:25:a2:46:3a:8d:4e:3f:77:e5:3b:09:57:4c:
88:6e:55:8a:da:9f:bf:85:22:37:45:ea:21:3b:1b:69:00:6f:
7a:59:66:6f:72:04:f9:75:26:cd:11:fa:f5:2e:93:fd:ea:91:
ce:15:11:d7:b2:4d:0c:89:cb:85:ba:9d:49:ae:25:dd:30:40:
46:9a:a1:c7:63:c2:71:41:31:37:01:1d:e5:69:a1:5a:a2:c0:
10:ce:d6:81:b0:ff:da:dd:0d:a3:88:d5:8c:06:8f:ea:ba:e2:
93:b2:dc:82:37:cb:fd:7b:bd:19:a9:d9:b0:c4:4f:f1:4c:f6:
5b:ca:bd:df:81:b4:00:00:33:e8:72:87:48:fb:ec:82:13:32:
85:15:8b:df:6e:0e:61:3a:f2:42:c7:59:72:09:d8:c5:38:ac:
58:26:2b:84:da:e8:19:fb:72:4b:69:19:9f:40:c5:f4:1a:81:
2c:da:0d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:55 2026 by rpki-client