Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: GhLp5ropUNQZLDz9i9tuRxSGaMeUa0A5K1TjesW43Uw=
Subject key identifier: 9C:5D:3E:77:BA:EC:C0:16:6B:6C:B5:00:B5:81:D3:90:E6:3C:34:76
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 019D98BDC523710651A52B8CBAFA2C283781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 0A3D
Signing time: Fri 17 Apr 2026 00:01:06 +0000
Manifest this update: Fri 17 Apr 2026 00:01:06 +0000
Manifest next update: Sat 18 Apr 2026 00:01:06 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: cAZWS3wvlRm0ih0VdCJFJGj5r/iVBjMOqVMxBwhxlm0=)
2: BcFq67gt-RKOvupOqp8wx9B2E4U.roa (hash: by17HKxYLGTRqXTNejn/CxcA/Hu0QDCXw3xviknWPjI=)
3: vlpxtqpjpQxPD5I7h8_GagReIJQ.roa (hash: TD2wCDrzMV1HjU3in4n/cQ4TcCR7y/LDU6bd62cCGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:c5:23:71:06:51:a5:2b:8c:ba:fa:2c:28:37:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Apr 17 00:01:06 2026 GMT
Not After : Apr 18 00:01:06 2026 GMT
Subject: CN=9c5d3e77baecc0166b6cb500b581d390e63c3476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:79:5e:ea:3d:3c:50:4f:26:ed:00:a9:c3:
a7:11:03:9f:77:de:e6:29:9f:d7:af:bf:7e:47:6b:
82:67:11:ae:49:24:12:06:a2:5c:e5:44:51:f3:a6:
7e:52:2f:a8:47:2f:af:21:f0:28:2a:27:39:bd:13:
cb:f3:1c:d8:b1:9a:c5:20:29:37:86:1b:34:f9:7b:
28:37:75:f6:bf:54:ac:b1:ca:3d:39:c4:48:d1:d4:
d8:1d:ec:9b:d5:4e:ea:30:bb:85:99:33:e7:45:78:
a0:1e:ea:e4:bc:21:f2:fa:ee:eb:a3:b6:bd:72:35:
f5:bc:bf:9a:52:14:4d:c7:06:62:8c:ba:f2:64:8a:
ba:53:0b:8e:11:d6:b2:0f:87:de:62:cf:24:9d:f4:
ab:63:9a:86:50:e6:6b:37:1f:38:f2:c6:82:21:95:
58:94:89:46:fc:be:78:7b:5a:55:aa:45:17:18:72:
fb:53:cb:be:83:d5:98:53:8a:dd:0d:db:9d:ee:98:
18:ec:26:8d:c7:c1:64:9c:26:62:7b:b3:54:df:d4:
4a:09:97:1f:18:6f:1d:ae:ca:aa:61:6e:0b:fe:a1:
ed:fe:f9:ea:bd:7c:d5:06:2a:e8:97:74:e4:7d:0d:
3e:fa:20:03:28:49:34:98:42:f1:44:ce:de:01:07:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5D:3E:77:BA:EC:C0:16:6B:6C:B5:00:B5:81:D3:90:E6:3C:34:76
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9c:5c:df:5c:b3:7d:0b:14:40:85:a7:41:ab:f6:3d:2f:33:
a8:2b:6a:61:31:5a:95:27:14:bd:9c:02:08:ff:56:02:43:f0:
c6:49:b0:91:86:83:67:a8:2f:f4:7c:c5:cd:c6:db:dc:0a:11:
f9:37:95:49:52:94:03:31:03:49:51:23:8a:ba:63:2d:69:33:
e9:f6:4b:29:6c:e0:55:89:6c:d9:47:72:75:19:81:c2:53:80:
cb:a6:ee:99:5d:4f:8b:07:0f:c1:36:e6:86:c2:a6:a9:4b:91:
5c:31:cc:a2:b4:1a:d7:2b:9c:4a:6e:67:46:7b:42:4b:2a:75:
a2:ae:09:a9:70:31:0d:1f:8f:ce:2d:25:2a:e5:ef:fc:57:71:
91:43:7c:f1:d0:96:42:38:16:3d:f4:f3:a0:1c:66:cd:e6:14:
e0:b8:74:43:a8:ab:cb:67:b3:98:a0:c8:92:87:ba:25:5d:0a:
65:2c:99:d0:e9:16:83:8e:a4:07:52:3e:0d:0c:4d:fa:c2:23:
6a:53:f8:c2:61:01:37:c5:5a:80:8c:69:8d:00:39:d9:b6:47:
c6:d8:01:85:da:40:01:d2:3c:7d:7a:b4:15:b6:d7:21:69:da:
7e:be:59:11:60:7f:48:fa:68:59:6e:5d:df:eb:f9:75:12:0c:
24:d9:46:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvcUjcQZRpSuMuvosKDeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjY3YTQwY2Y1ZTg1YzJkMmI2NTU4YjQwOTlhZjEyNWQx
MDUwZWUwHhcNMjYwNDE3MDAwMTA2WhcNMjYwNDE4MDAwMTA2WjAzMTEwLwYDVQQD
Eyg5YzVkM2U3N2JhZWNjMDE2NmI2Y2I1MDBiNTgxZDM5MGU2M2MzNDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrp5Xuo9PFBPJu0AqcOnEQOfd97m
KZ/Xr79+R2uCZxGuSSQSBqJc5URR86Z+Ui+oRy+vIfAoKic5vRPL8xzYsZrFICk3
hhs0+XsoN3X2v1Sssco9OcRI0dTYHeyb1U7qMLuFmTPnRXigHurkvCHy+u7ro7a9
cjX1vL+aUhRNxwZijLryZIq6UwuOEdayD4feYs8knfSrY5qGUOZrNx848saCIZVY
lIlG/L54e1pVqkUXGHL7U8u+g9WYU4rdDdud7pgY7CaNx8FknCZie7NU39RKCZcf
GG8drsqqYW4L/qHt/vnqvXzVBirol3TkfQ0++iADKEk0mELxRM7eAQc89wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxdPne67MAWa2y1ALWB05DmPDR2MB8GA1UdIwQY
MBaAFPT2ekDPXoXC0rZVi0CZrxJdEFDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83MDdiNGYtNmNkNi00ODhhLThkZWYt
M2E1YzcxZjg2ODIxLzEvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83MDdiNGYtNmNkNi00ODhhLThkZWYtM2E1YzcxZjg2ODIx
LzEvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJxc31yz
fQsUQIWnQav2PS8zqCtqYTFalScUvZwCCP9WAkPwxkmwkYaDZ6gv9HzFzcbb3AoR
+TeVSVKUAzEDSVEjirpjLWkz6fZLKWzgVYls2UdydRmBwlOAy6bumV1PiwcPwTbm
hsKmqUuRXDHMorQa1yucSm5nRntCSyp1oq4JqXAxDR+Pzi0lKuXv/FdxkUN88dCW
QjgWPfTzoBxmzeYU4Lh0Q6iry2ezmKDIkoe6JV0KZSyZ0OkWg46kB1I+DQxN+sIj
alP4wmEBN8VagIxpjQA52bZHxtgBhdpAAdI8fXq0FbbXIWnafr5ZEWB/SPpoWW5d
3+v5dRIMJNlGNQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:36:53 2026 by rpki-client