Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: AwCFbxhZCwFr7AFIXHzjHeK70felcCKf2F5+pzHgtzg=
Subject key identifier: 1D:D6:DC:A5:80:D0:79:26:AC:98:1E:A7:8D:FC:BF:FE:AF:D1:C5:F4
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 019D9AE3A4FEA483F09B792A082C3D5A0F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 10:01:43 +0000
Manifest this update: Fri 17 Apr 2026 10:01:43 +0000
Manifest next update: Sat 18 Apr 2026 10:01:43 +0000
Files and hashes: 1: 4QMkscbS6Pf39LzeH_MVqzG_9Ak.roa (hash: m7wSLBG3yMM59qxFhuh+wuLPCbDahbo3ByN0pwy2TGw=)
2: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: ycmeDgt7Kcm5qtpSTGx/qE5fb5Go62bbsGuUtQQyaIw=)
3: d6fj2hsf73awFuJ9_OrVwzH3RUU.roa (hash: q5EEFAAUQDhZrlGyPfpObbd8Uk9pSouDXHiB9RSx/i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:a4:fe:a4:83:f0:9b:79:2a:08:2c:3d:5a:0f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Apr 17 10:01:43 2026 GMT
Not After : Apr 18 10:01:43 2026 GMT
Subject: CN=1dd6dca580d07926ac981ea78dfcbffeafd1c5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:2e:69:49:43:66:fa:99:9f:0e:0f:61:8a:
14:52:49:fd:d2:b5:94:c7:3b:fb:66:d4:41:16:57:
d1:c9:f1:d1:b0:8d:11:e1:f8:cb:53:ce:48:11:0e:
25:89:ce:6f:1d:13:0e:fe:36:89:b1:e1:21:72:08:
8e:dc:72:38:c2:be:0a:ac:67:00:0b:0b:f0:4d:d7:
90:96:19:29:d0:84:5d:cb:49:35:ef:f3:29:be:50:
fb:05:6d:04:4c:ef:d7:b5:ce:35:34:ab:8a:37:bc:
fa:90:fc:3c:f7:d2:e3:a0:21:59:8b:6e:5a:4e:04:
dc:5c:45:cc:6c:80:d2:74:69:98:c4:d7:7c:a4:1a:
f4:cc:aa:47:9a:9e:b6:41:37:d0:6d:f7:ba:3c:b1:
66:6d:29:24:ec:ae:88:c3:75:5c:35:31:70:86:45:
6c:4e:c1:9e:cd:b8:7a:a4:a0:fc:22:b9:63:04:92:
d5:44:eb:a7:76:92:15:b5:05:a0:b6:7a:bb:7c:da:
77:3e:c6:db:c2:e7:16:8d:29:12:0e:4c:fe:35:79:
f5:66:6e:98:72:31:ee:89:f1:2c:e0:75:7f:69:89:
99:b6:b9:8b:2c:98:7b:cb:d2:0c:bd:1d:26:89:2f:
af:7c:c4:70:75:83:fe:5e:01:bd:c6:94:9b:e7:65:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D6:DC:A5:80:D0:79:26:AC:98:1E:A7:8D:FC:BF:FE:AF:D1:C5:F4
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a6:55:5d:32:53:d6:b2:55:5d:09:3d:cc:5c:c2:cd:cd:4a:
fb:63:d7:94:87:f0:8b:52:4e:93:a0:28:fb:78:91:de:c9:7f:
99:ad:e2:cf:58:88:10:38:22:52:40:a6:4c:aa:18:a3:25:99:
4c:4d:86:4a:38:05:c6:a4:51:66:cd:29:d3:0f:b4:18:5b:f4:
ce:36:cf:a3:30:9a:86:81:21:0f:26:45:6b:9c:ac:16:15:ec:
fc:63:b0:4c:a5:d1:55:0a:31:f7:95:21:5a:2b:4d:64:62:b9:
54:74:f9:9c:ef:02:4d:94:97:4a:c5:d9:b1:73:0b:2e:1b:41:
95:4b:43:7a:72:78:df:ff:4c:01:05:fc:70:2f:72:e5:9c:48:
96:7f:54:bd:c4:c2:b9:f4:28:e8:38:b1:f7:f4:c9:54:de:5b:
7f:10:26:5a:91:2b:76:df:96:68:71:64:b7:c3:02:58:f0:a3:
38:4c:21:9b:52:fb:e5:4f:07:a5:a9:a2:03:2b:85:23:e1:a4:
ce:2d:9b:62:4a:93:bf:87:69:db:41:e0:ea:2e:02:68:94:18:
2d:54:31:bd:2c:e8:16:1f:16:7b:f5:59:a6:a3:bf:ff:aa:93:
e1:19:12:28:13:d7:db:5b:f4:bf:f0:77:ff:b3:3a:06:c5:a7:
ae:ef:8d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:17 2026 by rpki-client