Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
File: 9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft (raw, json)
Hash identifier: I9kpE1FQ8jbyNLazh1mBpsgWb3Fd2+jZ3jD8ZLn1B7Y=
Subject key identifier: 38:B2:C2:48:3D:8D:F4:6D:D6:9F:B2:E9:0C:75:1A:D5:9E:69:8D:29
Authority key identifier: F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
Certificate issuer: /CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Certificate serial: 019D9C2C9AB4C78889DAD6A978F6E8A3B621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
Manifest number: 15D7
Signing time: Fri 17 Apr 2026 16:01:01 +0000
Manifest this update: Fri 17 Apr 2026 16:01:01 +0000
Manifest next update: Sat 18 Apr 2026 16:01:01 +0000
Files and hashes: 1: 48esUEjzOBICw-DAm0mO74jcC50.roa (hash: gMR9bADhJEei6lcf6w7gc94Lp3W0Rts74YHyQSE5Nn4=)
2: 9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl (hash: oQv2G7mMZBrx4D2c3uf2lZwZa8Gwwh03MsF8Vp1qASM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:9a:b4:c7:88:89:da:d6:a9:78:f6:e8:a3:b6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Validity
Not Before: Apr 17 16:01:01 2026 GMT
Not After : Apr 18 16:01:01 2026 GMT
Subject: CN=38b2c2483d8df46dd69fb2e90c751ad59e698d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:ad:1b:d0:c0:ae:82:8c:4e:50:82:2e:49:
a6:40:df:3f:a9:5c:20:d9:10:90:58:92:52:e2:c6:
f2:3e:5e:11:0d:8b:ed:6e:7e:69:e2:65:75:05:37:
41:19:77:13:d8:53:e4:08:ba:f2:2f:d1:7a:8e:14:
97:e4:0b:c0:f9:f8:6c:da:a9:8e:a7:5c:c8:d2:cb:
bc:67:7f:24:95:0a:48:c7:fe:a2:43:4e:e8:f7:c1:
ee:45:f4:df:7d:7d:59:3e:eb:6f:33:90:1f:0d:da:
11:41:cf:80:eb:ab:63:b3:e6:d7:15:e0:72:82:7e:
c0:ec:cd:b9:99:1e:e6:e3:64:16:34:9d:b9:54:24:
cd:6c:97:d8:ce:32:70:80:f6:4d:aa:a4:1a:75:72:
e5:fd:de:9c:c5:79:c6:fa:c1:43:24:e2:7f:d1:73:
75:65:71:5d:98:64:d1:02:7d:55:cd:a4:44:95:33:
d2:72:37:06:7c:af:ae:a4:ed:74:d0:4d:77:20:9c:
94:8f:f5:3e:79:9c:b2:2c:07:5a:09:70:ab:e1:e1:
e8:20:7c:c7:cc:ee:c6:61:f4:40:34:82:04:9b:83:
4d:d7:72:ab:75:30:5f:dc:0c:6c:e7:0c:b3:82:c2:
ec:16:e8:54:60:92:05:4a:20:e8:03:de:d6:cc:dc:
e4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B2:C2:48:3D:8D:F4:6D:D6:9F:B2:E9:0C:75:1A:D5:9E:69:8D:29
X509v3 Authority Key Identifier:
keyid:F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:96:a1:24:55:64:d4:81:bf:45:e1:2d:7d:a9:07:d6:e5:ae:
f1:a9:84:49:bb:23:77:af:b5:ac:1a:9b:2d:ac:4b:8b:1b:9e:
bb:18:2f:c2:33:c2:40:86:cb:f7:68:4a:7e:c7:50:a5:4d:27:
ac:03:f7:05:3f:cf:2f:5d:a6:ca:e1:65:da:2c:fa:9b:27:84:
1c:ea:cd:21:8a:f7:6b:c5:f8:a5:95:e1:24:e3:3d:ea:21:ca:
50:5b:f8:d8:6b:ba:d5:c7:66:01:01:11:8c:21:cb:53:d7:2d:
24:c1:a8:af:05:f1:69:de:a6:8b:5b:d0:5f:35:61:59:55:ee:
c7:6d:19:ee:4f:a0:cd:54:81:0a:6b:a0:3b:5e:b1:e1:e3:73:
a6:b7:6d:3f:77:b2:d3:e4:ed:cd:f2:9d:25:e7:82:2e:06:9b:
98:61:f3:d9:d0:fe:c9:3c:50:a3:39:fd:40:e0:1a:86:2b:09:
69:dd:17:ab:f0:5d:7b:57:9b:fe:73:4f:12:47:22:0b:0b:6e:
ec:23:57:db:af:2f:a2:b6:0e:85:40:4c:9b:7c:8b:5c:3e:f6:
26:9e:cb:ca:1b:dc:cd:bc:28:e9:c5:9a:87:f9:0c:78:2e:c7:
b2:c7:98:94:75:09:23:90:ae:5a:1c:d7:ab:5d:92:60:6d:4a:
ce:2c:64:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:13 2026 by rpki-client