Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
File: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft (raw, json)
Hash identifier: Tv30I87cF0u4s3k+vPoLIw7g63bpmGrBHHFZGx7VPIk=
Subject key identifier: 7C:E1:00:47:15:55:32:09:96:70:05:7A:FF:22:79:41:DE:4B:AB:22
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Certificate issuer: /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial: 019D9A3EE9908417CFC755E1750AA5CA57CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
Manifest number: 0DDF
Signing time: Fri 17 Apr 2026 07:01:47 +0000
Manifest this update: Fri 17 Apr 2026 07:01:47 +0000
Manifest next update: Sat 18 Apr 2026 07:01:47 +0000
Files and hashes: 1: 5FdT73JkLCgHgzugWWXpOCrhVgc.roa (hash: oluoiDxtzFoApZrsUB2VZK/Twzibw5WYce0WItyA/mY=)
2: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl (hash: XVuQD0bSElRPFp6Bm/H/6CUWkaxGiFdUXsS4lEepDMs=)
3: gFVBldPsPJ9_Z3436EbOexrFKyQ.roa (hash: XpNUD5CKdNtgQ6f8YKYlS0lGIc67007/Bg5jHv80Qgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e9:90:84:17:cf:c7:55:e1:75:0a:a5:ca:57:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Validity
Not Before: Apr 17 07:01:47 2026 GMT
Not After : Apr 18 07:01:47 2026 GMT
Subject: CN=7ce10047155532099670057aff227941de4bab22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:de:6b:9a:41:c1:10:a6:54:ec:d6:2b:9e:
0e:5a:5d:6e:60:fa:02:43:5a:9d:6f:51:aa:e6:43:
f7:fc:75:82:22:33:27:90:d9:90:31:e8:67:fc:ab:
df:f9:17:e4:ed:3f:24:bb:30:94:5f:7d:ba:2f:3c:
4c:90:d0:20:31:2b:a7:f8:f3:09:c9:ea:84:91:22:
07:b6:e9:bf:9f:23:a8:11:b3:98:b8:05:f3:94:14:
d9:82:34:b5:30:47:7f:cb:67:84:d9:cc:46:54:16:
14:fa:00:6e:62:fa:3c:31:94:ff:7d:09:21:6e:11:
aa:b6:0d:e2:6e:9b:91:d1:67:e8:61:a2:e2:35:c4:
67:32:b9:64:43:3d:fc:e6:3b:55:06:24:66:74:09:
4c:6a:89:0e:98:49:5b:b5:9a:db:37:a4:eb:f1:e8:
6e:64:0f:2b:e1:4f:8f:fb:8e:50:20:a4:44:5d:99:
ea:b5:73:29:74:36:ac:73:03:af:f5:15:ac:5d:c6:
c6:0a:ff:73:af:a8:1f:47:dc:38:4e:52:a4:8e:0c:
9a:19:e1:71:05:a0:b9:a8:fa:0a:f3:db:90:81:a1:
1a:6b:c5:9b:10:2e:fa:aa:5b:42:58:a3:07:79:b7:
6b:aa:06:cd:bc:b6:f0:82:a1:a7:4b:ca:c3:cc:9b:
68:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E1:00:47:15:55:32:09:96:70:05:7A:FF:22:79:41:DE:4B:AB:22
X509v3 Authority Key Identifier:
keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:07:0a:f5:9f:fc:6b:f8:b3:62:00:fd:c0:5f:87:57:1d:b3:
8b:51:97:90:82:be:9b:d5:06:82:72:58:de:99:17:9d:db:1a:
33:12:6b:e2:2d:b4:92:0b:40:f5:fa:2d:4e:59:28:fc:66:38:
35:ec:02:77:40:d3:a1:c8:af:e5:bd:32:ca:ef:62:6a:1c:7d:
8f:ab:8e:b0:d0:99:15:ce:df:c2:a4:0a:13:22:a0:09:5f:21:
b3:32:29:48:a3:e5:d2:ca:2f:9e:a8:6e:92:d4:e7:75:8e:f4:
dc:e8:32:e8:8a:35:e2:d2:8e:05:7f:18:7e:85:0d:f6:f4:e2:
bb:52:f0:97:ba:52:e4:35:bb:1b:53:f0:0a:6c:e4:c0:19:ff:
0e:a3:0b:38:f6:56:05:79:86:b5:30:48:85:8f:fa:34:72:e4:
22:a7:6b:1a:d1:5e:42:2e:ab:fa:1a:06:5d:f2:28:70:74:10:
b7:89:60:2b:a3:11:26:70:e0:bf:0a:39:73:69:86:77:87:e4:
5e:1a:97:a2:dd:04:7e:c0:70:f3:07:61:ea:39:28:3d:7c:f2:
9d:dc:1d:94:18:7a:14:f0:11:9a:f7:3c:f9:e3:07:41:85:18:
e4:c7:75:6d:83:8f:47:d9:46:b7:3f:50:f0:89:bc:2f:e3:8c:
8e:cf:4e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:04 2026 by rpki-client