Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
File: P9WU69efjdhbR5LpUzvkaBaohgY.mft (raw, json)
Hash identifier: sNLitE5IrjeywBcrIFKrHjZGhlV9e1azhS5hThAanSI=
Subject key identifier: 7D:76:0D:DA:DA:83:19:5D:EA:A1:76:C7:FB:F8:7D:03:A9:32:0D:C5
Authority key identifier: 3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06
Certificate issuer: /CN=3fd594ebd79f8dd85b4792e9533be46816a88606
Certificate serial: 019D9A3EE33662F96CB21F84011FE162505D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
Manifest number: 1440
Signing time: Fri 17 Apr 2026 07:01:45 +0000
Manifest this update: Fri 17 Apr 2026 07:01:45 +0000
Manifest next update: Sat 18 Apr 2026 07:01:45 +0000
Files and hashes: 1: P9WU69efjdhbR5LpUzvkaBaohgY.crl (hash: FGehBHVivDPB54uN4EZslvuH7Pz6MOt9qAOQ3h30D/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e3:36:62:f9:6c:b2:1f:84:01:1f:e1:62:50:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd594ebd79f8dd85b4792e9533be46816a88606
Validity
Not Before: Apr 17 07:01:45 2026 GMT
Not After : Apr 18 07:01:45 2026 GMT
Subject: CN=7d760ddada83195deaa176c7fbf87d03a9320dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:71:b9:b5:9d:93:86:ef:f7:ce:fb:40:23:
3e:f7:f5:fe:4a:9f:2e:96:5a:09:c9:c5:10:a8:a5:
d6:4e:3e:98:11:64:d8:78:dc:db:3d:fc:17:87:74:
3a:f3:1e:d6:74:1f:c3:8e:e0:18:57:8d:5b:b8:9f:
f4:4b:1f:69:0f:bf:d2:9b:43:dd:56:70:47:cc:a9:
5a:33:b6:d3:af:1e:47:bc:a3:c3:8a:b1:be:da:10:
15:e3:65:da:80:c0:24:76:ed:e5:bb:73:44:3c:30:
8d:15:05:e6:97:a2:7f:23:31:8f:02:2a:d6:12:93:
41:3c:15:bf:ab:ca:1f:c6:8d:1c:90:e7:c3:b1:b6:
f2:25:d4:90:96:35:eb:82:fa:66:5e:60:10:65:5c:
d7:0b:dc:44:f3:94:60:d7:77:90:91:a2:6f:84:90:
db:5e:a9:7c:3c:d5:50:6b:c6:78:aa:df:70:3d:bc:
ec:de:75:c6:29:da:ee:53:77:4a:2b:6f:9b:dd:83:
8b:e2:c1:8d:6d:ce:7a:a7:ec:cf:55:da:86:bd:8c:
a3:4b:22:60:4e:d0:07:3e:0b:53:54:07:f6:b8:d6:
53:b6:8a:8e:2b:72:28:5c:6f:dd:29:2c:f1:98:66:
0e:38:39:77:11:cf:11:2d:09:a1:97:3d:54:f5:25:
84:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:76:0D:DA:DA:83:19:5D:EA:A1:76:C7:FB:F8:7D:03:A9:32:0D:C5
X509v3 Authority Key Identifier:
keyid:3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d4:30:61:7d:c0:c1:e9:da:b6:2a:23:7a:9e:30:47:39:82:
cc:80:2f:5e:d8:8c:47:8b:ed:fd:b1:65:93:fa:79:5f:2d:c2:
6e:60:0f:5e:19:b5:07:88:b4:e7:26:56:83:09:67:a2:20:f8:
21:60:40:4f:c7:12:f1:9e:d1:84:68:51:e7:d5:1d:c1:63:f3:
91:82:65:3b:95:60:a1:d7:d2:fc:48:41:5f:ba:2a:87:fe:18:
f2:28:13:fc:46:aa:5f:8e:ec:32:33:d6:9b:81:91:2b:a3:52:
de:c8:d0:a9:a4:a4:69:7f:09:2b:a9:16:8c:c3:59:47:d7:74:
e3:79:2f:2b:6a:1d:0b:cb:16:a4:fc:6c:ea:eb:6c:c1:e5:43:
b5:a2:13:81:17:5d:d6:8d:da:1c:d6:ec:14:c0:3b:ff:01:8e:
43:a7:bb:d3:9a:52:a7:98:a1:e9:2c:0a:f1:86:21:e1:e4:1e:
02:ae:dd:f2:e2:49:d5:44:ea:3b:93:11:a3:44:3b:0c:9e:e2:
c1:00:44:e1:07:0b:0b:92:3f:1b:4a:be:ce:16:81:ce:f6:fe:
ba:47:77:96:91:29:37:92:58:20:c3:53:b0:61:ff:dc:cd:3c:
36:31:b8:0c:36:90:ec:04:d9:23:b5:b4:9d:9b:56:f1:d5:b3:
f6:0b:6d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:42 2026 by rpki-client