Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
File: 9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json)
Hash identifier: NW4XiQlJ76Rjzntx5BpDLp0ddTHJP5t6Z07KTt+0crc=
Subject key identifier: 0D:F4:96:5E:BE:52:8E:09:D4:3B:64:46:03:64:6F:1F:91:57:E5:81
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Certificate issuer: /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial: 019D996282E800CB35A340D0444E16A3EE61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
Manifest number: 1236
Signing time: Fri 17 Apr 2026 03:01:03 +0000
Manifest this update: Fri 17 Apr 2026 03:01:03 +0000
Manifest next update: Sat 18 Apr 2026 03:01:03 +0000
Files and hashes: 1: 1BAPBEHZ2kSoCDAM5eDbrIA1dgo.roa (hash: 1vCNqRI8XEb7PjtGyd1pWNMKL00lL0ojPCYN9P6eYI4=)
2: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: pnZeZe0nZUHBCBwZzfu1d5XuZUPC2cl5uia0FIrKO34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:82:e8:00:cb:35:a3:40:d0:44:4e:16:a3:ee:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Validity
Not Before: Apr 17 03:01:03 2026 GMT
Not After : Apr 18 03:01:03 2026 GMT
Subject: CN=0df4965ebe528e09d43b644603646f1f9157e581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:b7:6c:7f:7d:00:56:6f:46:f8:1a:d5:37:
e2:72:5d:79:9f:3d:19:03:ef:ba:4f:a9:cc:f7:2e:
2f:00:fe:25:1f:7f:22:c5:40:57:4b:fb:ac:02:90:
41:57:8a:f6:af:d4:ec:12:5a:6b:f9:96:92:1f:e2:
13:e0:81:77:fd:ee:10:b2:02:2b:78:8f:10:76:11:
f0:4e:03:f7:a0:19:2c:31:25:bf:c4:61:47:f4:e0:
b9:79:84:c6:93:a4:68:37:28:87:96:e5:f3:a2:64:
9d:26:a7:e3:82:0f:b1:89:12:8e:ed:99:56:72:f6:
f5:af:78:92:e8:85:b6:d0:f4:d5:e1:27:05:f5:e9:
fe:27:fc:98:aa:56:8f:50:1f:61:2d:13:70:13:74:
46:7f:54:f7:a6:df:52:37:e9:d0:43:1f:ad:69:d7:
9a:d8:2d:a0:58:d9:97:6e:d6:0c:c2:d1:c4:33:6a:
f6:8a:6b:fa:75:c6:4e:62:ab:eb:d7:02:0e:77:d2:
39:1e:ff:b8:22:2e:46:17:12:7a:4a:ca:b3:e7:19:
97:8d:74:4d:06:46:41:60:5d:a7:ff:1a:4e:e3:23:
37:fd:3d:b0:c4:ea:bd:cd:af:41:4f:24:5e:46:89:
c1:54:14:54:7e:ec:af:ae:74:c9:1c:ce:a5:b9:58:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F4:96:5E:BE:52:8E:09:D4:3B:64:46:03:64:6F:1F:91:57:E5:81
X509v3 Authority Key Identifier:
keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:43:27:d5:e4:39:d7:15:54:ca:a9:4b:fc:41:b5:5e:07:17:
a9:68:b1:f6:a9:4e:45:e7:30:a5:26:f1:b4:b0:9f:b6:65:77:
5f:98:7d:08:4d:b8:7e:e9:0c:00:2c:75:dd:49:bc:20:94:96:
97:8f:dc:9f:e3:fa:0d:58:17:cc:11:9b:10:bd:bc:3c:68:db:
6e:b7:15:74:ff:fe:a5:ac:b5:70:ba:14:f3:3c:d4:bd:25:21:
ee:c1:04:3c:8a:02:64:3d:9b:c6:06:4d:41:07:32:45:5f:bd:
ca:85:04:cb:34:68:dc:f4:2f:37:dc:69:2f:5d:86:17:57:82:
96:5b:70:a4:1c:2e:1e:2f:12:b3:b4:44:03:22:85:20:b2:1f:
84:2a:5a:82:0a:b9:3a:01:25:dd:84:a4:5b:4f:6b:cf:11:5f:
ee:04:ba:4a:0d:78:36:88:9e:0f:08:8c:9e:d8:3e:50:d2:07:
cb:2e:c7:98:1e:de:9a:b5:f8:f7:31:9c:d6:6d:a7:28:06:ac:
af:c2:c6:38:10:8e:85:36:af:95:90:7c:85:db:e0:69:ba:b2:
69:f8:77:c3:93:0c:3a:5b:b2:c7:29:28:80:39:83:66:ca:6c:
58:c2:93:97:6f:f7:e0:d2:77:21:94:8e:a3:ac:9f:c1:53:b2:
d3:73:60:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:24:42 2026 by rpki-client