Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
File: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft (raw, json)
Hash identifier: NbUmGNLrjGuHhL6MNonO8cpmx1wRXxesypv5u8euKsg=
Subject key identifier: 48:D0:D6:4E:E9:37:AC:C0:79:1D:C4:B3:13:8A:69:92:67:67:85:A0
Authority key identifier: F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
Certificate issuer: /CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Certificate serial: 019D9B50B7A1AECA03BB05F341D91713A6C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
Manifest number: 0DF7
Signing time: Fri 17 Apr 2026 12:00:51 +0000
Manifest this update: Fri 17 Apr 2026 12:00:51 +0000
Manifest next update: Sat 18 Apr 2026 12:00:51 +0000
Files and hashes: 1: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl (hash: EeUAGr21cq29BHArwuywOkmaKhYDK2vxhVwA3BRSK7I=)
2: Uklboo3tG2E8bmpaNpWg7iBT500.roa (hash: 3bdk4yfdkJQ/C4ZvETpkPR6Yh1F2fFWoUHJ2qwV5MwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:b7:a1:ae:ca:03:bb:05:f3:41:d9:17:13:a6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Validity
Not Before: Apr 17 12:00:51 2026 GMT
Not After : Apr 18 12:00:51 2026 GMT
Subject: CN=48d0d64ee937acc0791dc4b3138a6992676785a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:c6:da:fb:df:30:45:91:26:28:b1:75:2f:
90:fb:25:41:1e:f0:e9:54:58:09:fb:c9:a2:14:44:
fa:44:8f:55:19:2f:9d:cc:66:10:e9:1d:93:83:61:
81:39:2e:8f:21:c5:d4:ec:fc:70:4b:49:fe:d5:5c:
27:75:ca:f6:50:45:eb:fb:18:a9:a7:10:da:b8:56:
71:63:6a:9d:58:c6:91:ec:30:b3:77:bc:53:77:f4:
b8:d4:80:0d:0c:ac:23:02:07:13:ec:ce:12:a5:0c:
fc:0f:ee:fe:40:69:7c:34:85:eb:8f:53:e0:8d:ae:
2e:e5:30:35:5a:78:ab:ee:c0:be:fc:09:a2:96:88:
35:24:a8:5a:75:9c:eb:6d:db:b5:47:67:5c:ba:10:
e9:20:70:03:e3:fb:30:d5:a0:4a:ac:31:08:f0:e3:
77:3f:d7:0b:cd:0e:88:5a:e2:35:29:35:96:6a:0f:
b0:d5:bd:36:25:50:06:f3:e0:a2:98:ef:eb:e7:2a:
c1:7a:4b:5d:69:4e:b5:f4:34:d7:26:2f:4e:51:0e:
4a:f3:5a:84:26:c3:97:75:d8:8c:49:b6:f6:77:53:
46:ab:59:b3:e5:2d:b4:25:29:05:c9:b8:67:da:20:
7a:57:37:00:59:70:d8:ae:61:28:5c:31:44:cd:34:
d7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D0:D6:4E:E9:37:AC:C0:79:1D:C4:B3:13:8A:69:92:67:67:85:A0
X509v3 Authority Key Identifier:
keyid:F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a0:bd:6b:c4:15:7e:f4:e5:70:4d:c9:c9:c5:ff:2f:8d:a6:
be:7b:49:c3:3b:d8:42:3c:8b:11:9c:51:22:a9:58:a7:c8:4b:
81:75:5e:95:5f:53:8b:fd:e6:16:dc:67:e6:c4:72:56:12:ee:
27:73:26:4e:8e:22:46:00:30:c0:0e:34:8b:75:05:07:70:fd:
f0:2e:cc:78:6b:6d:e0:ba:70:2d:10:8e:24:a1:b4:ff:bc:49:
0a:66:d7:8a:44:59:f8:eb:2d:2b:7e:20:72:ea:55:03:4c:79:
bb:8a:f0:2e:4c:ae:d1:3b:71:22:5d:e2:1e:9d:de:e3:a8:4c:
c1:1a:c4:13:b8:d5:a5:d0:3c:88:0a:57:b2:67:75:00:be:1c:
8b:57:8f:15:cd:7a:de:50:0c:c0:90:02:61:2f:85:20:96:f4:
bd:5b:1c:c1:2a:15:01:d4:73:5b:4b:9c:8e:d8:b3:06:c3:0c:
bb:f1:cd:18:7a:ec:5d:5c:fa:03:78:1d:2c:32:88:f4:b8:b4:
96:a8:cb:d8:d2:eb:27:c7:a7:a6:db:9a:33:bb:f5:85:6a:e3:
10:43:c7:c7:c5:73:a8:38:da:4f:1a:37:91:31:52:32:97:de:
c7:2a:cb:73:16:33:82:10:8f:66:c4:87:8c:98:24:a2:ed:3a:
78:17:e0:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bULehrsoDuwXzQdkXE6bDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MmQwY2FkMGVhZWQxYTYxZjQ3OGZiMDkxOWM3YTQzMjI3
MjQ2OTUwHhcNMjYwNDE3MTIwMDUxWhcNMjYwNDE4MTIwMDUxWjAzMTEwLwYDVQQD
Eyg0OGQwZDY0ZWU5MzdhY2MwNzkxZGM0YjMxMzhhNjk5MjY3Njc4NWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAfG2vvfMEWRJiixdS+Q+yVBHvDp
VFgJ+8miFET6RI9VGS+dzGYQ6R2Tg2GBOS6PIcXU7PxwS0n+1Vwndcr2UEXr+xip
pxDauFZxY2qdWMaR7DCzd7xTd/S41IANDKwjAgcT7M4SpQz8D+7+QGl8NIXrj1Pg
ja4u5TA1Wnir7sC+/Amilog1JKhadZzrbdu1R2dcuhDpIHAD4/sw1aBKrDEI8ON3
P9cLzQ6IWuI1KTWWag+w1b02JVAG8+CimO/r5yrBektdaU619DTXJi9OUQ5K81qE
JsOXddiMSbb2d1NGq1mz5S20JSkFybhn2iB6VzcAWXDYrmEoXDFEzTTXCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjQ1k7pN6zAeR3EsxOKaZJnZ4WgMB8GA1UdIwQY
MBaAFPQtDK0OrtGmH0ePsJGcekMickaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUMwTXJRNnUwYVlmUjQtd2taeDZReUp5UnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kZmY0ZDAtMWQwYS00OTUxLThiMjct
N2Y3Mzk0YmU4Y2U0LzEvOUMwTXJRNnUwYVlmUjQtd2taeDZReUp5UnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kZmY0ZDAtMWQwYS00OTUxLThiMjctN2Y3Mzk0YmU4Y2U0
LzEvOUMwTXJRNnUwYVlmUjQtd2taeDZReUp5UnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqC9a8QV
fvTlcE3JycX/L42mvntJwzvYQjyLEZxRIqlYp8hLgXVelV9Ti/3mFtxn5sRyVhLu
J3MmTo4iRgAwwA40i3UFB3D98C7MeGtt4LpwLRCOJKG0/7xJCmbXikRZ+OstK34g
cupVA0x5u4rwLkyu0TtxIl3iHp3e46hMwRrEE7jVpdA8iApXsmd1AL4ci1ePFc16
3lAMwJACYS+FIJb0vVscwSoVAdRzW0ucjtizBsMMu/HNGHrsXVz6A3gdLDKI9Li0
lqjL2NLrJ8enptuaM7v1hWrjEEPHx8VzqDjaTxo3kTFSMpfexyrLcxYzghCPZsSH
jJgkou06eBfgVw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:22:41 2026 by rpki-client