
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
File: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft (raw, json)
Hash identifier: oxZrIWzYwHKz8alrLyjfMeD2f0PvMi+pk5QxLZk9Mfw=
Subject key identifier: EC:D1:96:4B:9D:DC:9B:86:2C:08:B7:82:5D:DF:47:8D:6D:60:2B:04
Authority key identifier: F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
Certificate issuer: /CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
Certificate serial: 019D9A754BE78625D745C54E951FE857A42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 08:01:11 +0000
Manifest this update: Fri 17 Apr 2026 08:01:11 +0000
Manifest next update: Sat 18 Apr 2026 08:01:11 +0000
Files and hashes: 1: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl (hash: K2H66K6HYadNsxmONakOFGGNj1cX3VOmMMwilWiYL+k=)
2: UKATPR0b1kY7oFPVkZYEepDy3LY.roa (hash: CrwvVmRRQkszz0pHbbKO1FTUZbPyR5yvt9U+ujLmXCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:4b:e7:86:25:d7:45:c5:4e:95:1f:e8:57:a4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
Validity
Not Before: Apr 17 08:01:11 2026 GMT
Not After : Apr 18 08:01:11 2026 GMT
Subject: CN=ecd1964b9ddc9b862c08b7825ddf478d6d602b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:45:7c:b0:bf:b9:dc:08:9b:98:1e:fb:fe:
db:d1:59:cd:94:aa:5f:36:6b:1b:e6:33:ca:e5:f8:
37:ba:3b:39:b0:80:a1:5f:ee:e2:0c:bc:e1:ad:5c:
b7:e8:90:2a:1e:a0:20:e2:0f:02:c6:48:d2:7d:da:
40:a6:9f:59:55:be:ee:42:8b:c5:0f:db:51:1a:54:
ff:c0:8a:20:09:3c:79:9f:2f:5a:df:28:25:df:bf:
4f:f2:86:ba:f4:72:2e:d1:d1:99:7c:f2:a9:5f:cb:
13:cd:cd:6a:12:42:d6:5d:bf:99:bc:9e:1c:71:97:
d9:0c:f6:08:fb:58:c5:c0:72:cc:ea:5a:24:e6:55:
70:d5:3b:8c:53:f3:c9:46:cc:73:ef:e6:d2:2e:1e:
90:d7:eb:5e:6d:df:f6:29:1c:27:13:e1:be:14:b3:
ae:d4:72:dc:5a:42:2d:04:99:84:95:04:1e:ad:7b:
17:78:01:f8:f1:5b:92:21:e6:d9:8e:1e:44:28:61:
88:cf:81:34:96:32:71:7e:4d:83:1c:77:a6:bc:96:
02:36:35:c7:f2:42:56:67:9c:d3:4f:2f:31:69:11:
4b:5d:51:b9:bb:0b:43:34:19:af:85:be:84:25:66:
01:c3:03:8c:3c:5f:b4:f2:1a:9a:64:2f:c4:e7:3b:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D1:96:4B:9D:DC:9B:86:2C:08:B7:82:5D:DF:47:8D:6D:60:2B:04
X509v3 Authority Key Identifier:
keyid:F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8e:e2:7d:f8:39:bc:57:f2:ed:20:b1:b6:f1:fa:f8:1a:af:
da:55:5e:80:78:f4:cd:53:b3:c3:47:a8:ea:18:ce:b4:29:aa:
ee:28:ec:0c:94:6b:23:77:73:70:f3:3e:6a:bb:6b:16:9a:dc:
27:f5:02:8f:52:f2:63:b5:e0:60:4c:7e:98:0d:eb:8f:24:58:
bf:f0:f9:a3:ed:65:6b:13:d4:af:fc:11:b4:71:02:7a:15:9e:
c8:b4:8e:5a:29:ef:9f:54:34:74:cd:d2:c5:56:5a:b7:e7:5c:
cb:25:5e:a3:fb:6d:2e:31:77:8e:ad:fc:86:9e:a6:70:1e:3d:
7c:4c:4c:47:46:98:f9:34:80:11:a3:d7:b7:d3:d2:05:9a:0f:
33:90:2f:94:05:f7:7d:fa:91:e3:74:90:11:da:2b:41:3c:99:
d6:ce:e9:25:7e:61:8c:65:71:5b:40:c5:70:4d:9e:ed:26:66:
0c:c5:0a:ee:a9:f1:03:c2:24:bf:59:69:7d:e6:95:81:f9:dd:
85:82:9a:3d:1c:41:65:5e:48:b7:06:27:59:09:2c:f4:25:3d:
2b:2f:22:6d:d9:69:66:10:5f:c6:32:7c:62:7e:d4:9d:66:59:
e1:5d:7a:a3:5c:d0:39:cf:f9:f4:e2:fe:ce:9d:7b:58:ae:e4:
56:12:af:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:08:46 2026 by rpki-client