Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
File: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft (raw, json)
Hash identifier: zMR3TkPihyW6ZQ6c/qQnzNfJHjv9mwgrY6biCJx3c4E=
Subject key identifier: DA:62:8D:CA:68:EC:34:FF:13:A7:C3:D9:36:37:11:41:37:AF:31:7F
Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140
Certificate serial: 019D9C2CA38B01E2C4B895D27E1B23557A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
Manifest number: 0531
Signing time: Fri 17 Apr 2026 16:01:04 +0000
Manifest this update: Fri 17 Apr 2026 16:01:04 +0000
Manifest next update: Sat 18 Apr 2026 16:01:04 +0000
Files and hashes: 1: 682zs4Hcg3A9tAlB0aIHnZEDnoM.roa (hash: C08P14YIy9ohegdz9OY/EiQStApMK1bKQ9gOr6T/J5E=)
2: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl (hash: Xp6cB90aHlQX+GNNptBuL/Ke2K9j1fB4XW5kn/+Al2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:a3:8b:01:e2:c4:b8:95:d2:7e:1b:23:55:7a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140
Validity
Not Before: Apr 17 16:01:04 2026 GMT
Not After : Apr 18 16:01:04 2026 GMT
Subject: CN=da628dca68ec34ff13a7c3d93637114137af317f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:22:c4:ec:00:92:4f:8c:8b:e2:e8:59:3f:2c:
c9:29:7e:30:ea:fa:d0:3b:ad:b1:52:0b:cb:e9:03:
32:ee:7c:d4:f5:85:9d:74:15:d6:cc:3b:74:43:50:
f8:bc:ac:4e:1c:74:4d:70:ea:c8:ad:4d:cd:4b:f7:
c2:3c:aa:f7:0e:8f:cd:50:25:bb:9a:0f:68:09:8a:
2f:97:c8:fc:4f:eb:6d:8d:db:65:4c:5e:1f:0c:60:
69:6d:19:58:5c:d4:f2:57:2e:cc:b0:dd:99:fc:6f:
69:94:05:b5:5f:ea:b9:11:0c:df:07:99:b9:b6:37:
7e:94:5d:c9:59:13:0c:2f:09:59:a7:8a:8e:fd:ce:
e1:76:b4:d6:9c:b3:a9:1f:0a:a2:e9:81:73:70:b4:
a8:52:8a:4d:47:88:16:98:2a:5c:68:07:a6:18:be:
50:5f:d9:33:11:37:53:2b:b0:bc:81:45:4c:de:39:
6f:1d:1b:26:76:de:d8:10:18:41:cf:bc:77:81:6a:
bd:e0:0c:91:c0:0b:e9:99:5b:e5:69:f3:53:d8:fa:
19:7a:c4:f2:95:4d:24:c8:9c:52:47:ef:d0:ce:77:
b1:54:8d:8a:24:7e:ad:5a:f8:70:71:71:98:39:91:
67:c6:22:72:af:1c:76:ef:38:10:43:69:d4:4a:e9:
89:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:62:8D:CA:68:EC:34:FF:13:A7:C3:D9:36:37:11:41:37:AF:31:7F
X509v3 Authority Key Identifier:
keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:56:f4:57:e0:8e:c6:e2:89:f1:9c:f4:9e:b5:59:83:51:a0:
cd:39:2f:e3:ed:54:24:cb:49:1c:fb:54:2a:1b:90:12:67:e7:
b5:d0:b4:48:8b:53:94:0d:1a:a6:7c:26:bf:00:06:0b:22:cb:
ab:de:13:93:92:57:1b:8c:b7:10:e0:8a:4c:13:55:52:38:a6:
65:56:13:88:c4:15:ae:49:07:3a:45:ed:3b:73:2b:9e:8f:82:
8d:35:b5:2d:1d:04:4c:51:dd:e8:b0:83:62:2f:82:d2:7b:2f:
b7:f0:1d:b8:61:d5:39:cc:22:5d:b5:6e:ed:bf:f7:32:c3:3c:
d9:af:15:0d:a5:88:8e:64:e8:ad:27:2d:74:24:8c:cb:43:9a:
2a:3b:08:f6:05:9d:44:52:97:99:a5:ac:87:69:bb:0a:80:75:
68:35:77:e4:e7:0d:97:b8:98:84:05:6e:ff:fb:8d:b3:16:3c:
81:51:9e:a9:98:7c:c4:74:17:d5:de:0f:e7:16:e9:cc:b8:62:
27:fd:e3:2d:58:1c:31:fb:9a:31:81:44:18:c5:f9:6d:ab:ea:
d4:f2:79:1c:e4:99:66:e3:fa:6b:f9:6a:f6:5d:0f:be:fd:9e:
fe:a5:8f:eb:da:ac:26:3f:a7:bb:de:da:a2:b5:d0:89:5b:c5:
22:3a:88:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:08:12 2026 by rpki-client