Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: rQU9uSSpCJ3nwwZDS+aewrt7KEAbN6g0jHgwAAlboiA=
Subject key identifier: A2:96:68:C1:07:D6:0A:12:B9:47:4B:5F:74:24:1F:4C:08:C0:18:D4
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 019D97AA794DCB069AB016C74929B47CB3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 18DA
Signing time: Thu 16 Apr 2026 19:00:24 +0000
Manifest this update: Thu 16 Apr 2026 19:00:24 +0000
Manifest next update: Fri 17 Apr 2026 19:00:24 +0000
Files and hashes: 1: 1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa (hash: YWmW+qHhsLN+csw32WYbNSaULT6cEK/L9LG3DcTcfQU=)
2: 2J_enL0mq_HbBFj1p_d_qyIXNks.roa (hash: VBLGjSkxg5gn4s0UWv4znpc4mtgeavbmnZnDA3LFAO4=)
3: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: 1dR7JR8bzELDq5hNyWXrB+H53mxqjqUZ7SNs5o/05x8=)
4: ccMww59mDMVNflZi8lXAUqrYmZg.roa (hash: 18ezwr9Nu+qt8aBJCOh1ezF1Utw1YHeqhJCFEOUAeyw=)
5: hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa (hash: XVLkwzCBrdtM+FxDVfDBn6TZaFDwiuTAGFHK/fSzOJ8=)
6: hhmzN128wuDiRBwUCjO9oZf28Hc.roa (hash: qKwy9aO/5eDeYbjJqOLC4283+7+rAN2JwgIHL3S+j7c=)
7: wRiMz6n-wmWUoLFkxFSSP8HrU5E.roa (hash: gQ8uNZeHK/kIii6trEwXDL6+4QDEEh4ElPmKWLgPx14=)
8: wpCDaZ8CmRmp29ikyeMppBLQrkw.roa (hash: Mky9v4umrVvEcx+IGCTXn8o9SgJSH+g15pwUCUI4mwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:79:4d:cb:06:9a:b0:16:c7:49:29:b4:7c:b3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Apr 16 19:00:24 2026 GMT
Not After : Apr 17 19:00:24 2026 GMT
Subject: CN=a29668c107d60a12b9474b5f74241f4c08c018d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:88:bf:2a:11:e4:7d:20:02:fb:c5:21:46:
9b:b7:10:4c:0a:5a:ce:75:33:08:0d:dc:c4:3a:9c:
8a:6c:61:4a:93:37:e8:b0:16:53:d0:97:cb:47:dd:
48:68:35:df:87:6a:22:98:39:eb:af:b4:b1:e7:cc:
b4:d7:ce:a1:7b:35:84:a1:e4:50:88:e9:a1:b2:00:
9c:cc:b8:d5:57:1f:22:63:e4:33:10:a8:af:a7:db:
85:c3:58:b2:60:20:bd:eb:ca:e2:17:49:09:2b:94:
17:48:78:de:04:19:d9:48:1f:be:62:5b:36:38:4e:
3b:2e:8e:af:21:68:03:5a:f3:ce:fe:05:31:41:0c:
70:f5:88:5c:49:08:3d:d7:13:31:69:3a:ef:93:43:
b5:ef:b0:ac:76:b8:68:f8:f8:3a:f6:00:cb:d9:e1:
a9:19:45:9c:36:22:89:bf:c3:82:64:ae:e7:2d:ee:
bd:40:a6:6f:29:d5:97:76:32:84:b3:33:94:67:64:
f9:f4:2f:7f:6b:d1:da:79:a1:b0:4a:7d:b3:14:16:
de:98:68:1f:a8:67:69:b4:f7:d8:fe:84:81:a7:2f:
0b:17:62:33:32:64:e6:7a:d2:80:0d:3b:25:be:f3:
ee:2d:13:df:57:47:50:50:70:02:fa:d8:36:dd:1d:
19:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:96:68:C1:07:D6:0A:12:B9:47:4B:5F:74:24:1F:4C:08:C0:18:D4
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d4:b6:0e:88:f0:38:23:dd:f2:50:71:3d:89:d1:d1:6e:69:
b4:00:cc:14:fc:5e:ce:72:c3:86:52:6c:01:65:11:74:84:56:
a3:cc:b1:c4:27:d2:35:e3:85:9e:fb:67:98:05:8a:30:a0:98:
ad:cb:01:29:0c:49:3d:09:a6:e9:cc:d5:be:b4:5b:7b:73:7d:
0f:b7:71:00:87:2a:d3:6f:07:0e:7c:e0:f2:20:b6:e0:6d:57:
d3:e8:8b:45:70:77:04:1e:db:e2:54:99:ea:54:6e:ce:1c:19:
ab:f2:32:ba:54:f6:de:5d:53:77:45:1c:b9:fe:db:3d:e3:7c:
2c:c0:30:3e:05:44:e5:d0:03:70:87:de:f4:44:2d:99:3c:2f:
47:bd:a4:e6:15:92:90:aa:e5:d0:75:20:7d:92:43:f7:cf:3a:
4b:24:6c:c3:cc:2d:01:74:c6:3c:56:70:12:14:28:20:a1:44:
2c:20:95:e2:cd:0e:e6:9f:36:35:c5:07:c4:f0:42:58:c6:9f:
d6:b7:ad:76:2b:d9:1b:80:9d:01:24:d6:e0:0c:b3:4a:ff:24:
12:6d:4a:fb:ad:91:ad:ed:03:1e:61:6b:a7:96:20:38:79:e3:
86:91:a3:7d:ae:91:52:a4:ed:c1:96:54:ea:7e:09:e8:37:c6:
08:6f:94:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:04:03 2026 by rpki-client