Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
File: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft (raw, json)
Hash identifier: DKDPgDta9Z0hCfSkRislyVimvQ7tzxQo6DUYuOAE7Ws=
Subject key identifier: 6B:A6:C5:5D:8E:7F:31:5F:F4:C1:81:3E:A6:8A:A2:8E:59:F5:23:E1
Authority key identifier: F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
Certificate issuer: /CN=f539a07ef47f805cca07c10ae187c93968808c47
Certificate serial: 019D9A74997490C84E1CED71F25E01E364F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
Manifest number: 0698
Signing time: Fri 17 Apr 2026 08:00:25 +0000
Manifest this update: Fri 17 Apr 2026 08:00:25 +0000
Manifest next update: Sat 18 Apr 2026 08:00:25 +0000
Files and hashes: 1: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl (hash: nhQAxQES4XnMWHiUj/zff+PSNAUVhIEiKgXQAwMTbZs=)
2: e6cQAttr2HmbOlTBbjKV_2JWo0Y.roa (hash: m4yGQd55Wkn8/VNQHSMkT2U4sSayeuVDo4mzhAL262I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:99:74:90:c8:4e:1c:ed:71:f2:5e:01:e3:64:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f539a07ef47f805cca07c10ae187c93968808c47
Validity
Not Before: Apr 17 08:00:25 2026 GMT
Not After : Apr 18 08:00:25 2026 GMT
Subject: CN=6ba6c55d8e7f315ff4c1813ea68aa28e59f523e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:26:9a:0d:80:fd:20:dd:83:4a:0f:de:30:
f5:6e:3b:dd:6c:df:f8:4f:d0:de:da:09:c4:8a:85:
b5:09:c8:a1:a8:c0:0e:93:9a:00:9d:34:16:f9:f0:
df:d4:51:0c:58:08:ac:54:3b:8a:f5:05:2c:a6:37:
11:2c:c3:41:42:a8:04:bd:f5:c4:50:c9:6b:81:e8:
2f:7e:82:17:10:af:81:67:08:70:80:b2:d1:55:46:
75:f1:07:be:81:be:0d:62:60:9a:6f:3c:cd:b2:06:
e1:ff:8e:6c:aa:bb:e8:3b:f5:d2:ab:da:f3:0d:24:
7e:89:5e:1f:95:46:74:4e:93:78:26:d5:df:ac:88:
da:14:b7:b0:af:55:cc:a4:a7:4c:b2:7b:db:b9:04:
31:5e:91:1c:59:34:5e:38:fe:89:dc:aa:fa:50:a6:
9f:ec:f0:b1:c4:23:98:e4:18:9a:de:a4:58:db:a9:
55:aa:ae:ca:3c:74:0e:33:62:b0:84:22:5b:12:fc:
5a:c7:2b:3e:b7:0c:49:3b:1b:2f:4c:a1:4a:30:ee:
46:48:e1:12:ca:df:05:80:74:1b:a1:ff:0f:b3:e5:
55:d0:e7:ab:62:7b:38:01:7c:8e:bc:79:7f:84:91:
ed:9a:17:8d:7e:1a:d6:16:67:8a:eb:d2:71:c9:55:
ed:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A6:C5:5D:8E:7F:31:5F:F4:C1:81:3E:A6:8A:A2:8E:59:F5:23:E1
X509v3 Authority Key Identifier:
keyid:F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:51:6c:5a:4f:57:2f:53:61:82:cd:db:7f:31:1a:f1:ea:35:
1d:ee:1c:1e:f0:f3:65:5d:bd:6a:aa:b3:8c:c6:d8:68:02:7e:
61:57:38:a0:fe:c2:dc:93:56:4b:e9:75:cb:7b:45:20:9e:6e:
5f:15:d7:53:6a:07:66:42:0d:42:53:3d:39:cf:be:5e:53:74:
5b:c5:ec:89:ce:1e:9b:fe:00:04:73:bb:20:a1:d9:85:21:15:
23:13:6d:6a:f2:3d:53:38:dc:11:b9:84:2f:af:58:33:03:2e:
4f:75:42:85:74:fb:5e:6c:a6:af:c9:08:51:3e:e8:80:75:78:
70:6b:5e:4c:af:85:87:3d:7f:07:52:fd:97:af:31:c7:30:5c:
01:46:e3:44:45:a6:38:b5:df:0c:fd:0e:bf:17:68:cd:4f:b0:
7f:40:10:fb:28:b0:a7:8f:cc:f9:c2:e1:8d:18:d7:93:7b:b9:
a5:12:70:52:92:41:ae:14:fd:97:d0:46:76:6f:9e:c3:be:e9:
c1:f8:2f:c4:14:8e:b7:f1:7d:41:34:96:5f:bc:9f:b2:13:59:
ac:3a:68:19:03:6a:b2:9b:9a:1b:1a:21:40:f8:df:70:b7:15:
34:1d:ec:a3:95:7c:32:4c:bb:9e:d0:77:af:c2:b2:c9:31:18:
a6:0c:2d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:51:47 2026 by rpki-client