Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
File: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft (raw, json)
Hash identifier: k4NcYrGtnluabpv5ozT25HpvH2q8OpXsdyqghVV2hTY=
Subject key identifier: 11:BA:97:35:53:8E:E3:6C:22:EB:07:5F:DF:C2:01:1E:E2:D5:69:59
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Certificate issuer: /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial: 019D98F4389BFE23A974FAEF05D3BDAA2671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 01:00:35 +0000
Manifest this update: Fri 17 Apr 2026 01:00:35 +0000
Manifest next update: Sat 18 Apr 2026 01:00:35 +0000
Files and hashes: 1: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl (hash: OhDr1ht3FwropdfgxPlvclFyq9tLFTh1FfwlBPFkEnk=)
2: MYsq3VI7S6Tys8tH6kZ55isv4aM.roa (hash: nLJu9Ca3UL28v4nK9lRnWd7XxYbaE6zulNTp5ZAXAYk=)
3: q_ccM_3Nsf3YIqRvSxwp7j28WKA.roa (hash: bQAdrUPOpax3Tea6DtDpoS5dYyAQRIvDyf7eum/Y1dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:38:9b:fe:23:a9:74:fa:ef:05:d3:bd:aa:26:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Validity
Not Before: Apr 17 01:00:35 2026 GMT
Not After : Apr 18 01:00:35 2026 GMT
Subject: CN=11ba9735538ee36c22eb075fdfc2011ee2d56959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a6:7e:20:0f:24:09:74:67:61:83:1f:a7:96:
25:e5:25:5d:25:76:0b:a0:a8:98:a1:40:eb:e5:5a:
16:49:9e:9e:26:bb:25:b6:d1:c0:63:97:31:b0:f1:
b6:80:04:70:72:c3:cc:57:70:6e:d6:69:40:36:a6:
36:e4:21:42:fc:4b:1e:21:33:3f:f2:1d:77:c2:39:
25:c9:90:c0:3c:b0:e3:4b:9e:76:2e:b8:c3:3f:c2:
2b:6d:9c:b5:d5:69:9f:a6:09:20:13:3e:a3:fc:62:
ab:cd:22:5b:44:60:5a:10:ec:e9:73:d7:37:4f:56:
18:9f:82:da:51:5c:72:21:37:ca:d1:38:ac:98:b6:
b1:3f:b4:73:0a:d3:3f:a3:96:11:ab:3e:d1:59:19:
d1:2e:0b:d1:f2:c5:02:1a:b4:3b:11:64:cb:d6:f7:
4a:40:db:f7:d0:1a:91:90:04:c3:3f:5e:48:b7:41:
34:a1:b4:cf:88:46:0b:1b:b9:7c:ba:d4:a5:0d:b9:
6e:a8:9f:8e:3d:5d:95:ff:0e:14:90:68:6d:50:f5:
71:22:22:63:e7:e4:d1:80:d9:1b:73:5a:12:66:1d:
32:20:02:46:70:fb:bc:61:33:80:1c:40:03:d3:cb:
f0:33:ec:78:f0:ed:c1:40:c7:e8:62:98:73:a6:92:
9d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BA:97:35:53:8E:E3:6C:22:EB:07:5F:DF:C2:01:1E:E2:D5:69:59
X509v3 Authority Key Identifier:
keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c3:65:d2:fe:6b:1c:30:5c:6e:3a:02:86:0f:dd:cc:a4:a2:
9b:f7:ea:68:f7:78:20:4b:8a:9f:4d:c5:5d:85:f8:21:80:1b:
ea:0f:2c:2b:a3:3c:30:ab:4f:b2:5e:8b:b3:fd:7f:f9:9a:c8:
98:bd:dc:6e:8d:e5:ce:0a:96:b0:2d:50:12:2a:c6:ae:e0:15:
b3:cf:bd:f1:be:03:0d:ed:00:c3:93:f8:fd:17:d4:43:56:0b:
99:f6:16:34:4d:c2:4e:22:7b:84:9f:58:5f:e6:71:1a:f5:c1:
45:e4:8f:df:e0:55:96:c2:8e:3e:42:9f:6d:b8:8b:f5:a6:c5:
c8:5a:71:77:0a:89:26:c9:8d:f6:5b:96:fd:cd:c2:21:a4:b6:
b8:26:05:38:43:77:e3:15:11:83:a9:6e:10:da:31:c9:be:55:
b0:31:fa:a4:b8:0e:b0:3f:c9:a3:63:04:0e:88:90:78:11:5a:
01:47:69:1b:e3:72:32:5a:14:3f:01:c4:92:1e:88:0d:dd:23:
c7:0f:b0:e0:0a:2f:f8:65:13:26:d6:30:f8:bc:42:34:aa:b8:
1d:7e:bb:92:53:e1:49:7a:0e:a0:d5:45:ef:a2:30:49:d9:aa:
11:b7:9f:c5:ae:d7:24:df:67:8a:5d:b4:72:d8:f8:81:0e:9c:
e7:e0:b8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:27:05 2026 by rpki-client