Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
File: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft (raw, json)
Hash identifier: cJhHpuCbr3HZEjz/AcPQJleB023DUpIS7vc7HVduJYg=
Subject key identifier: 97:87:4C:FC:DD:6F:74:B6:5C:77:AB:49:09:51:70:05:11:43:43:7E
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial: 019D9AE2EEB06E7575BA3C1129B42466E96F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
Manifest number: 18DC
Signing time: Fri 17 Apr 2026 10:00:56 +0000
Manifest this update: Fri 17 Apr 2026 10:00:56 +0000
Manifest next update: Sat 18 Apr 2026 10:00:56 +0000
Files and hashes: 1: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl (hash: pBgVAzLi8d9EuMwK3a3XpQtHe6b/hzyl2p79jIBQ1qE=)
2: iSpxNzZ1D0jT4gC2x5Kl37tJ5RI.roa (hash: HDTPQGbISh5IcmH4kjYu97mki78Ro81q2Cj4w2U9m8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:ee:b0:6e:75:75:ba:3c:11:29:b4:24:66:e9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Validity
Not Before: Apr 17 10:00:56 2026 GMT
Not After : Apr 18 10:00:56 2026 GMT
Subject: CN=97874cfcdd6f74b65c77ab49095170051143437e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:fa:b7:25:b0:0f:1f:a7:42:33:9b:cf:7d:
f9:8a:74:19:5d:7d:dc:e7:71:07:81:66:92:01:5f:
ff:e5:5b:c8:1b:4d:4a:c7:be:c5:54:40:ff:98:70:
ec:3f:9f:33:3f:15:08:e6:f2:45:a8:f7:fe:30:68:
f5:12:78:91:a9:d4:ed:78:29:40:d7:87:3e:85:6b:
09:84:c3:67:0b:09:a2:e8:b9:e5:e0:2d:f7:ef:41:
8d:41:9e:61:bc:55:d4:78:99:d3:dd:84:db:b5:9f:
b3:92:c3:81:dc:cc:e9:99:c0:5a:67:be:bc:f5:d8:
56:57:ca:cf:b3:f8:77:8c:bd:61:fa:b4:ee:da:e1:
50:8e:8e:9c:ca:39:a1:21:c8:6c:8f:3c:e6:de:72:
44:e5:2c:63:22:84:eb:03:ab:70:79:54:95:21:01:
da:e6:d6:18:8e:74:39:ae:1a:e1:1e:f4:53:23:04:
a6:19:be:57:e9:5d:49:95:3c:94:27:2c:b6:6b:a9:
92:53:e7:77:ef:ed:9d:18:22:05:64:63:0a:b9:7b:
41:54:9b:1c:14:42:ea:e2:8b:00:4f:50:ea:31:c2:
45:70:27:4d:5c:99:dc:3e:fe:0e:6b:e2:60:16:c0:
f0:d9:dc:dd:9d:e3:19:9c:60:34:ac:0b:2a:ea:ff:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:87:4C:FC:DD:6F:74:B6:5C:77:AB:49:09:51:70:05:11:43:43:7E
X509v3 Authority Key Identifier:
keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:69:7a:e8:f4:c8:98:9b:73:6f:16:e5:bf:b5:6f:1e:fb:47:
cb:ac:72:81:1e:6b:33:d5:26:b0:96:3d:dc:da:c2:86:52:8c:
a0:eb:bd:41:68:fc:fc:f9:3a:11:36:3e:81:60:2e:98:ad:7c:
15:87:6e:ad:41:98:7e:88:48:2c:b3:ea:13:18:4c:75:37:ed:
ef:2a:b4:ed:9d:22:7a:0f:7d:92:99:79:0c:8e:16:3e:c6:f0:
0d:c4:46:56:e4:a4:f2:05:ba:30:ed:cf:88:6c:80:49:d0:2f:
4a:32:ba:4c:ef:63:68:dc:dd:35:f4:69:a3:87:74:51:55:d6:
82:21:a2:af:5d:e9:75:c6:83:c0:f0:1c:a8:0a:29:fa:f3:65:
3f:ce:d9:4e:17:5d:60:49:b5:14:1b:19:f0:b3:7a:3c:9a:55:
42:94:73:67:66:74:c9:28:12:f2:fa:4f:f0:c8:13:b9:a5:76:
aa:27:5f:3e:f3:65:b9:b9:e1:ee:78:30:34:ab:9b:94:24:29:
a9:fc:f3:c1:66:1e:92:6a:7f:e4:09:2a:b4:61:ac:45:1f:90:
ee:5c:22:3d:2c:2c:31:24:96:ec:c7:db:13:d6:0b:8c:8b:99:
63:3b:8a:4a:3b:3a:2e:ad:7b:e8:fc:c6:a1:22:a0:5e:2a:bb:
a5:9d:e1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:45 2026 by rpki-client