Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: w+FRGktjyo2AhtS3sp+0vWBfEj9F3sNztj1PDWH3OP0=
Subject key identifier: 8D:FF:9B:1D:BB:76:A0:D2:4C:61:E0:79:28:90:78:8D:E6:97:C2:FA
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 019D9A7540B1D82A44D44A34A28EC2C76824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 0C2B
Signing time: Fri 17 Apr 2026 08:01:08 +0000
Manifest this update: Fri 17 Apr 2026 08:01:08 +0000
Manifest next update: Sat 18 Apr 2026 08:01:08 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: l4ETeVsgu4BQegL/1sB6eH8sJ4JSnhLeXLAapRH9B1U=)
2: GKyDs47a7BqJFaT8Ozcx1DPKrA4.roa (hash: IeQFtuvzwY+Djd9V29XWo6xDkNMsoIv44LxRAtukIHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:40:b1:d8:2a:44:d4:4a:34:a2:8e:c2:c7:68:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Apr 17 08:01:08 2026 GMT
Not After : Apr 18 08:01:08 2026 GMT
Subject: CN=8dff9b1dbb76a0d24c61e0792890788de697c2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:5d:8c:f9:3b:f4:a4:d9:68:fb:10:cb:98:
44:86:3b:fb:76:93:79:7f:99:13:89:17:a9:ad:ce:
b8:cd:08:37:57:20:ca:a1:53:78:76:f7:c3:4f:a3:
f2:65:a9:b2:2b:a5:99:03:75:c1:29:cc:2e:04:e9:
5b:11:cc:63:af:5c:9c:93:d6:41:3a:89:7d:d5:54:
dd:be:a4:68:14:46:a0:ac:af:7f:f7:1e:9f:61:2b:
93:b8:29:32:76:a2:7c:f8:ff:4b:a1:88:e7:b4:5c:
c7:95:c8:e1:dd:86:22:51:a7:83:0e:e3:00:16:2c:
95:23:b1:0c:c6:5b:b7:10:21:52:fd:64:9f:d5:0d:
63:96:d1:53:f4:df:e5:03:ca:c4:05:93:08:d5:df:
20:a4:1a:4e:3d:9c:bd:99:5a:ff:66:04:1e:63:2a:
33:49:16:45:d8:fc:e0:a6:71:47:18:54:51:24:65:
01:a1:b4:cb:0a:11:e2:47:90:8c:08:a9:f0:b9:28:
c5:1a:07:e4:c9:11:81:5b:b1:96:47:27:86:c3:b2:
4c:c4:65:c5:23:7f:09:07:cd:8c:85:4b:93:f4:05:
f3:1a:ae:54:31:3c:00:15:22:9e:36:97:e1:d1:b2:
97:f7:a5:a6:42:ce:7d:b1:eb:1c:ad:06:db:a0:54:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FF:9B:1D:BB:76:A0:D2:4C:61:E0:79:28:90:78:8D:E6:97:C2:FA
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6f:78:e7:ff:4f:ba:d3:52:0b:bd:56:7f:a9:9b:d5:c6:61:
71:51:97:34:16:48:0f:69:d0:88:34:9e:d0:ce:30:a5:42:55:
83:82:da:a3:3d:a6:e3:fa:d1:f4:0e:9e:c7:f4:9a:50:ee:fc:
fa:75:7f:8a:73:0b:2c:66:71:5e:21:c7:34:47:20:21:25:2b:
c6:58:59:2b:7a:4f:51:ec:a8:2c:34:b9:6d:a3:a0:6a:fe:49:
d9:d3:6c:81:25:e9:93:c1:2b:ba:fc:7d:db:ee:ee:31:b8:21:
b5:a0:c2:71:63:9b:97:eb:3c:00:be:3d:f3:37:45:71:7d:7e:
dd:29:5e:d2:b0:5b:81:42:f0:96:7c:ad:36:bd:d6:22:4f:9b:
ec:0b:e1:97:99:db:59:eb:db:93:f3:98:7b:cc:5a:d1:f8:d9:
26:d2:d2:0d:b8:d1:27:44:0a:ee:12:5a:a9:85:2c:81:59:34:
b6:22:dc:3b:d6:5b:4f:c1:29:49:d4:7b:63:28:74:1d:2b:db:
92:3d:02:9b:e8:04:03:10:da:59:6a:73:60:aa:03:4f:69:ca:
a4:d5:6d:e5:a0:ad:8f:f4:4d:46:01:f9:fb:0a:0d:d6:c4:8c:
f8:58:9f:b7:2c:6a:e2:62:69:11:ae:3b:d1:e3:3b:ba:1c:04:
f4:05:62:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:40 2026 by rpki-client