Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier: 60E1GuwINS01kgK6WU/rZJYadOimOCeFgQc9F/+blE0=
Subject key identifier: BB:C2:E5:D8:2C:89:2A:C6:89:77:DE:55:65:45:9E:22:07:8B:19:42
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 019D9A06C433FF1CF7CF33F4119291F04A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number: 0B15
Signing time: Fri 17 Apr 2026 06:00:27 +0000
Manifest this update: Fri 17 Apr 2026 06:00:27 +0000
Manifest next update: Sat 18 Apr 2026 06:00:27 +0000
Files and hashes: 1: 5TCdgL2HtG2U6UqaKMQzmRQpVYg.roa (hash: iiy0cvTf0H0qnM221d0FdIuvs2I+5Ca1XYPiAhqx6SI=)
2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: KrhfBuBmQvoSS+WRkLQBh1A2NKyB6/KBCLuz0fcqFJ8=)
3: Xn2Z7IHqH0X53_Ab46jTcOu-vm0.roa (hash: jRPa3G5ri1yL/E0W7FEV48WgsM0Xg5oNizTu+wX+3Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:c4:33:ff:1c:f7:cf:33:f4:11:92:91:f0:4a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Apr 17 06:00:27 2026 GMT
Not After : Apr 18 06:00:27 2026 GMT
Subject: CN=bbc2e5d82c892ac68977de5565459e22078b1942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:70:69:c2:fd:97:5c:3e:df:e0:49:2b:ec:1d:
3a:05:ad:ee:35:b4:9a:93:bd:80:39:51:de:ac:ee:
b9:4e:38:42:0a:f7:94:0e:d9:ef:02:66:d3:76:50:
0b:be:ef:2e:cc:92:b3:d6:53:71:24:d1:c3:1c:e4:
72:c1:32:be:23:4b:d8:a3:9c:a7:36:32:df:18:5b:
72:94:ba:31:d7:4c:dd:ce:8d:6e:d9:c5:2e:f3:5d:
df:92:1c:82:5e:38:26:34:26:bc:1f:d6:ea:c0:c3:
22:d0:35:b2:dd:32:f4:5f:93:66:70:29:ef:26:d8:
44:7f:4c:63:a1:10:e5:93:ae:f4:cd:c9:4b:f8:ea:
83:39:1c:5d:14:fe:d5:db:cb:2d:39:91:79:6f:7e:
74:26:0a:09:ad:f8:a0:16:53:43:f7:81:76:58:3a:
7b:bb:c2:70:4a:42:53:99:a8:5b:81:2b:12:a3:14:
7f:c3:6f:71:3f:a2:4a:a5:a8:08:8b:1a:79:f5:9e:
5a:7a:23:ee:5e:61:cb:71:cb:05:67:32:cf:1a:d3:
13:a9:c4:0c:2d:bf:f3:3d:4f:5d:d7:31:21:f4:e5:
13:66:b5:90:00:64:76:a2:18:5c:41:2d:d9:6c:44:
2a:a8:06:e9:b7:f8:06:e4:fa:1c:5d:33:09:6f:50:
e8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C2:E5:D8:2C:89:2A:C6:89:77:DE:55:65:45:9E:22:07:8B:19:42
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c7:2d:2f:6d:5a:10:4d:12:97:99:35:38:7a:8c:98:9d:ea:
6f:84:44:20:44:3f:e0:44:65:a9:2f:ae:f4:f3:00:38:83:34:
e0:0b:79:01:20:4e:2a:61:42:3c:9c:62:1a:91:2e:99:c3:b0:
57:7a:7d:c0:e8:ee:81:e7:1b:cd:72:fe:bb:23:0f:d1:ba:08:
19:cf:06:74:bf:c9:ee:29:e1:a7:f4:f8:68:c0:30:e7:04:1e:
6d:71:75:7b:29:75:59:4e:b7:36:4d:65:10:4a:fd:17:a4:57:
80:e7:d3:86:fd:57:95:5c:4d:06:a5:08:cd:12:48:aa:14:5f:
a7:ad:c1:7c:e8:eb:01:95:72:ba:fc:dd:a5:9e:11:8c:38:01:
27:45:b5:e6:0b:e6:63:b8:2f:ce:37:25:c8:f3:5d:ae:9f:9a:
04:2c:80:bf:31:11:46:e9:47:65:cb:b9:e2:39:06:9e:72:b1:
c1:4f:22:6f:25:0f:45:11:c4:c2:bb:d0:b4:6c:31:a4:4a:3b:
59:b6:17:85:f5:e0:02:da:0c:0e:1f:af:e6:da:9e:6a:ab:98:
a3:13:36:ba:73:d6:04:ac:e7:d3:3c:9e:1b:25:39:1d:a2:b4:
c7:09:ed:8d:cf:11:c6:03:22:20:8a:a0:3e:1a:86:b3:e0:a8:
e9:d3:b0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:57:51 2026 by rpki-client