Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
File: 9ghG8hxWqFE9McFV3RmRl6P_x8A.mft (raw, json)
Hash identifier: qAaqOrVh+GBGaZXPsOdFsls5Fwy+iHW9bCQrvlqOJL0=
Subject key identifier: 9A:21:B8:CE:33:CC:FD:6E:64:C0:2C:51:F1:F0:24:A2:6D:ED:40:39
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 019D98BD30A6DA0C697508126AED4AE83DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
Manifest number: 18D4
Signing time: Fri 17 Apr 2026 00:00:28 +0000
Manifest this update: Fri 17 Apr 2026 00:00:28 +0000
Manifest next update: Sat 18 Apr 2026 00:00:28 +0000
Files and hashes: 1: 01ZkvNgWiFr2Xle1lgNBaYZj-X8.roa (hash: krV70iW09YOJwAzEmvYrpBPuNGdijVHEbPaa0HE/jsM=)
2: 9ghG8hxWqFE9McFV3RmRl6P_x8A.crl (hash: WcDkCjtyxQa18H4VZK+ckXhBWcjoAfOFIX4jDDRFxc0=)
3: EboQ4nMXI48WwaHSZ15OkVHDyAI.roa (hash: SI3+ap2GxZORyWEjQakTcPIlhvRATeVhJTKd2WR2ixc=)
4: OYpCQdK7lNSRzIdlHHMMZTxhha0.roa (hash: hLxZ48pmO0NghpmoI7b6iic2RgENYFKFAU8pL6U0sxU=)
5: W5i7jKztK_F-7p2FjKY5IXoTWnk.roa (hash: iWzQhvpIXmrZ9hLNW88m8Yge4x5Lx0tZrSAtIzszE3o=)
6: YWQCWSs8yZA8QY3t_PyQQKGtK3k.asa (hash: S3rytmqhbZUvqszHeJsXQK+zRV9JSgSBvpP4kCVStOY=)
7: d9HTRu6eOaOYuXd9b7iVCEDddPQ.asa (hash: /iCij5LL4WBtNjhwsh6zV4snLZdM7CyjGzuB4jg4Zsg=)
8: xNSFqM7-0qNODofNrUEn4XQu4ME.roa (hash: raRCbVzrGPXhNpKnAVtwuinosdft0bdaQidRsp21paQ=)
9: xffyY7RBwYFFWdto18bFCIkAi6M.roa (hash: /wOHBg089w6pbrnt+9vXF4Wu2NJ5CjjnhokCvpVnwN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:30:a6:da:0c:69:75:08:12:6a:ed:4a:e8:3d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Apr 17 00:00:28 2026 GMT
Not After : Apr 18 00:00:28 2026 GMT
Subject: CN=9a21b8ce33ccfd6e64c02c51f1f024a26ded4039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:06:13:89:5f:4e:1a:86:c7:c0:55:8f:25:
db:b6:8e:57:bc:88:b3:41:eb:3b:fe:e0:52:b6:97:
10:ff:5c:48:3b:cd:63:35:7f:77:68:1c:0e:da:2e:
4c:28:7c:1e:d4:95:4b:14:2e:4d:68:32:54:8f:bb:
c3:fb:f7:35:19:92:4f:57:c6:e5:50:0e:ee:b9:85:
06:eb:fd:b6:5b:67:ca:22:8e:39:24:cc:2b:12:68:
ac:32:9c:15:cd:eb:56:90:48:40:55:94:90:04:76:
1b:23:44:e5:5f:2a:e0:d2:82:78:ee:f5:8a:62:23:
72:2f:dc:4e:2f:a7:73:c8:74:e2:0d:cd:b7:7d:c0:
de:64:74:d3:2c:45:a3:0b:51:fb:2b:57:32:16:a0:
8f:e6:d0:46:17:1f:80:01:b1:5e:91:eb:57:7b:31:
e4:57:65:49:0d:ab:8e:5f:44:6d:75:a3:ce:e8:58:
72:b4:87:05:9a:f8:c1:dc:e8:03:79:9b:66:3d:5a:
57:71:2f:fb:7c:af:03:4e:bc:7f:f3:09:2c:bb:3f:
51:2a:82:3b:2f:e1:08:2b:8b:93:80:95:28:94:cc:
7c:ec:bd:50:37:9f:4b:93:66:bb:61:eb:7e:e9:c1:
1c:37:ce:c9:45:41:e8:57:a8:d2:38:4e:50:c5:44:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:21:B8:CE:33:CC:FD:6E:64:C0:2C:51:F1:F0:24:A2:6D:ED:40:39
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:81:b2:0f:2e:a5:f5:f0:e2:fe:84:e2:5f:6e:b5:ad:4d:7a:
0a:8e:50:5a:8c:e2:43:9f:4c:32:7e:d7:9e:4c:a1:fa:57:04:
2e:f1:c5:a9:df:5c:ab:ac:17:39:76:22:21:e1:f8:74:b7:10:
db:38:b9:5a:35:ce:90:c1:0d:42:fc:d4:45:5c:11:a3:19:9e:
3d:43:57:50:88:92:9d:0f:3a:ec:5e:d3:23:72:08:98:fc:5f:
23:9e:cf:c9:e9:e7:92:a4:98:95:5a:bd:22:9c:d9:af:53:50:
f0:65:3e:0d:81:b3:82:b6:3e:26:74:b7:09:a8:05:0e:5e:16:
7d:ee:1f:64:0d:d6:cc:4e:a4:21:dd:51:be:96:f3:c1:c1:3f:
7c:58:c2:c6:e9:49:0a:d6:04:9d:9d:f2:da:41:1e:b0:2f:28:
aa:53:9f:cb:33:eb:75:bc:cd:07:3a:fe:bf:e4:7a:55:c5:6e:
11:a8:cc:c2:62:32:62:c9:2a:95:99:36:38:20:6b:dd:87:94:
c8:af:44:99:30:1a:da:23:e2:15:ca:ae:e1:4c:89:10:62:7e:
99:8f:84:5e:06:bd:45:d0:2e:b0:02:b5:a7:e9:71:1b:66:4c:
fa:d4:9c:ec:39:01:2b:31:3c:d4:3a:e5:b4:84:89:26:c8:db:
ab:8d:7a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:12:19 2026 by rpki-client