Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
File: 9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft (raw, json)
Hash identifier: qrrZI+1z66FY3zRQsBvMqAAHq9Lqe7IuB0PWI69Iv9Y=
Subject key identifier: C7:67:6C:ED:7F:97:7E:3C:B5:50:8E:7C:01:52:8D:DE:8E:9B:77:EE
Authority key identifier: F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
Certificate issuer: /CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Certificate serial: 019D99620C8A4D2F6509DCBEACF3D9E3E06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
Manifest number: 09F1
Signing time: Fri 17 Apr 2026 03:00:32 +0000
Manifest this update: Fri 17 Apr 2026 03:00:32 +0000
Manifest next update: Sat 18 Apr 2026 03:00:32 +0000
Files and hashes: 1: 9XSwptV-ZNILwy4i5DW_tgPkgSU.roa (hash: 1gOGH6Fm4nuBFJfCO9Q2Mvfqz47h/JLm40saj0YTiOk=)
2: 9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl (hash: camRqbFndktRVg+jsXA0xTMDJRu2vaT4rjx1bGvEqpo=)
3: W-UYkYcFpRXJXOLdeRe7OrV0cZ0.asa (hash: u3Eh32uzo3YgryhEMHYkmoOOlYuyFVQMTVeW1RRgVo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:0c:8a:4d:2f:65:09:dc:be:ac:f3:d9:e3:e0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Validity
Not Before: Apr 17 03:00:32 2026 GMT
Not After : Apr 18 03:00:32 2026 GMT
Subject: CN=c7676ced7f977e3cb5508e7c01528dde8e9b77ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:1f:f4:ce:5d:13:60:b9:f1:9d:78:c3:a5:
00:76:0e:cb:0d:96:9b:b3:21:28:f6:56:d3:42:09:
d2:90:b2:26:5c:78:89:1b:5a:2e:ef:1d:15:ce:68:
dd:18:6f:39:23:79:e4:dc:c4:94:04:81:78:41:ba:
17:5a:db:b6:e4:52:22:90:4e:b2:59:21:9d:10:b0:
e6:4f:ae:3d:34:0d:6e:19:98:e5:b9:bc:2d:35:71:
f9:86:44:0e:f8:ac:c7:71:20:6b:11:18:44:51:dd:
08:4d:41:d8:c8:f4:39:49:7b:48:cb:9f:f0:b2:3b:
a9:a0:3b:b9:ce:86:57:a4:39:c5:a9:a8:85:09:36:
4a:bc:d6:fd:70:21:cb:37:08:0c:f0:cc:d2:9e:8c:
82:b0:77:69:39:61:fe:55:e0:20:69:6e:fa:33:4e:
25:d8:50:16:a2:26:53:d3:ff:a2:66:03:47:3f:fe:
99:19:f7:b4:74:a7:37:54:c5:05:3c:06:a4:d2:cb:
dd:12:b1:13:4c:2c:91:20:b9:58:ea:a8:c7:3b:5a:
4a:a0:42:63:2f:f7:c5:ef:f0:9b:e0:23:27:03:f5:
a7:25:d7:d5:ae:59:41:dd:28:56:19:54:ab:98:b9:
7b:8a:ca:1d:27:aa:c9:f5:34:0a:4d:cf:44:0d:80:
ca:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:67:6C:ED:7F:97:7E:3C:B5:50:8E:7C:01:52:8D:DE:8E:9B:77:EE
X509v3 Authority Key Identifier:
keyid:F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:41:8a:54:c7:6b:bf:d1:75:84:b3:7c:fe:0e:a1:3e:aa:d8:
65:8a:50:ce:c3:39:07:8e:81:35:4f:01:fa:4c:65:3e:b7:c8:
41:c4:45:66:01:48:6f:50:67:84:3e:7e:ec:0e:35:2b:09:16:
a7:c3:0a:91:bc:88:c5:ff:09:3b:66:79:76:80:57:b0:a0:8e:
57:77:d2:20:10:d5:86:5d:b1:36:c9:ab:9f:db:8b:c1:99:90:
e3:a4:41:49:44:2c:ff:67:41:09:34:1b:0f:1f:01:01:a1:7d:
d2:d4:d7:a9:9c:d9:ea:72:48:34:bd:bc:c1:1c:6a:b8:99:b8:
1d:97:b8:33:87:a7:ac:a6:82:82:1b:42:c9:03:c3:e1:f1:90:
45:d3:c1:63:77:ec:2c:04:e0:40:59:dd:2e:44:6e:60:86:8d:
59:4c:72:f9:e7:ec:12:53:be:7c:06:ac:6c:21:09:21:17:cf:
53:43:80:43:9b:f5:0e:3a:7f:fb:e8:2b:b0:cf:37:16:38:cc:
e7:29:0f:ff:a2:52:92:52:63:cc:f5:91:ac:fa:08:f8:1c:cf:
91:dd:92:99:67:27:62:74:09:da:54:23:fe:6a:68:f1:99:74:
64:32:79:44:cb:73:18:4a:82:79:39:e3:0d:b0:23:27:c8:01:
b5:2e:98:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:57 2026 by rpki-client