Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
File: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft (raw, json)
Hash identifier: 2Btagmk6Ut8Y/E5BqMgRnq0fmfchZYuIP+VYWoEQQ3c=
Subject key identifier: B2:1E:C8:A3:84:28:13:DE:F0:DF:0D:C1:F0:DD:A6:BE:CE:AC:6B:FB
Authority key identifier: 0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
Certificate issuer: /CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Certificate serial: 019D9C638A89B2E3AE7EFF698712C953EE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
Manifest number: 02D3
Signing time: Fri 17 Apr 2026 17:01:02 +0000
Manifest this update: Fri 17 Apr 2026 17:01:02 +0000
Manifest next update: Sat 18 Apr 2026 17:01:02 +0000
Files and hashes: 1: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl (hash: Ip3MhprmybXTHe4andgjS1xEYyTogUk8Y5G4w3H3Sdo=)
2: w2RkZIyXNqzrvFHvVSZFRm-pJFQ.roa (hash: 1g4lPlIgbxd4u2cE0VtdggkYIEEI5tatrW6BetCUOgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:8a:89:b2:e3:ae:7e:ff:69:87:12:c9:53:ee:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Validity
Not Before: Apr 17 17:01:02 2026 GMT
Not After : Apr 18 17:01:02 2026 GMT
Subject: CN=b21ec8a3842813def0df0dc1f0dda6beceac6bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:bc:75:08:57:ce:09:7d:85:ba:ab:7a:ba:
58:93:75:a5:45:15:01:99:b2:69:a5:28:ef:7f:a7:
40:5c:e0:6e:f3:74:15:8a:19:8a:25:ca:03:ba:fd:
0a:5c:ce:93:4f:81:95:c5:5b:94:08:9c:78:7f:ac:
f9:aa:f5:07:a4:39:a5:b1:8d:f1:d9:b4:42:f0:12:
a1:d2:47:b0:49:71:5d:78:a7:ad:ae:3d:80:90:30:
37:38:da:4c:bf:20:6b:ca:71:b1:d2:31:7a:51:78:
ea:a4:9f:ec:ea:6d:3f:34:0a:65:87:a0:45:e8:8c:
dc:63:87:8c:7e:63:cb:94:9a:20:ff:cf:58:a5:21:
9f:3e:26:85:54:38:03:36:9d:97:3e:70:3c:38:6c:
77:37:fc:b6:34:e6:e4:67:69:24:95:04:c0:73:df:
a0:51:81:91:3e:4f:18:0b:85:dd:fa:5c:4f:64:5c:
b6:4f:e2:63:14:40:83:8d:66:2e:e9:5f:72:41:c7:
cd:8e:52:c2:6b:ff:9b:11:13:3a:e3:9f:0a:43:de:
09:d3:73:09:d5:2a:d5:0f:1a:0a:04:6a:13:eb:49:
77:5c:46:77:90:1f:0c:84:99:c9:2e:f6:71:42:b4:
0c:bd:7b:98:7f:e1:20:a8:09:99:1d:1a:5a:56:96:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1E:C8:A3:84:28:13:DE:F0:DF:0D:C1:F0:DD:A6:BE:CE:AC:6B:FB
X509v3 Authority Key Identifier:
keyid:0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:15:fb:9b:49:5f:ca:61:44:eb:49:de:1c:06:e2:8a:83:79:
c5:ef:09:eb:f7:7a:ab:56:93:18:74:fc:eb:d5:9b:42:71:9f:
ad:5f:d2:80:ca:21:29:71:3b:69:3b:46:55:f5:79:16:a5:99:
a9:39:90:8e:a3:cd:1a:cb:93:15:e4:e7:2b:29:98:5c:1a:c7:
d7:4a:0b:ba:af:85:00:7b:01:ad:9d:e6:ae:08:31:76:29:91:
3f:d4:39:b7:54:c4:59:43:62:ec:98:a1:f2:50:8a:22:48:0b:
87:f4:39:b9:53:8c:65:a9:7e:b5:a0:60:50:7d:09:c6:39:4a:
40:ca:60:d7:33:e9:b3:64:06:9c:51:7c:e8:1f:f6:97:a9:d6:
d2:f2:fc:80:9d:d5:c7:fc:c6:88:90:fa:21:0b:66:f0:55:76:
43:5d:44:9c:a5:1c:33:85:b2:10:49:52:82:52:6d:76:9b:94:
d0:48:0b:61:9b:06:d3:89:aa:03:16:85:c2:28:4c:df:11:29:
61:71:dd:54:73:2d:25:5e:47:4e:1b:9e:6e:d9:52:c7:1f:cc:
66:43:96:7d:75:c7:68:69:e6:45:75:e6:9f:c4:5c:aa:98:2c:
52:9d:c9:79:63:54:4a:a2:35:91:fe:44:48:98:64:0b:87:cc:
15:83:a6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:48:10 2026 by rpki-client