Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
File: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft (raw, json)
Hash identifier: 3kXnZxfM8MNK7k+d5/noInMYwb0ACL4o4NYlhkfzH/U=
Subject key identifier: B4:3F:CD:BB:D3:AB:42:4B:E5:DC:8F:84:2B:72:00:FF:7E:A5:05:40
Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
Certificate issuer: /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Certificate serial: 019D98F4209C24A81AF74503F13A28DABA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
Manifest number: 072E
Signing time: Fri 17 Apr 2026 01:00:29 +0000
Manifest this update: Fri 17 Apr 2026 01:00:29 +0000
Manifest next update: Sat 18 Apr 2026 01:00:29 +0000
Files and hashes: 1: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl (hash: YfvbjIlZ8oKVEHckOhgC5Fy7mgo4Hu62bEkSjuQqWcs=)
2: b1tEVuM57ah52OvUq3Fvdd-4XkA.roa (hash: Odyf//1QBuLxW+qHnAmLWghjISD9y11hRldd+HjGtOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:20:9c:24:a8:1a:f7:45:03:f1:3a:28:da:ba:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Validity
Not Before: Apr 17 01:00:29 2026 GMT
Not After : Apr 18 01:00:29 2026 GMT
Subject: CN=b43fcdbbd3ab424be5dc8f842b7200ff7ea50540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:c7:2f:06:7d:98:6f:f7:2c:0b:ea:61:81:
69:13:d3:ff:c8:0d:59:b5:2b:56:99:97:96:01:29:
39:7a:8a:a7:a1:83:54:88:11:7e:62:3f:35:2f:05:
8b:62:ed:9a:93:2f:8a:63:f5:69:76:c3:eb:1b:92:
27:f4:71:6f:e0:a4:a8:b8:96:dc:ad:21:20:c2:7d:
0b:4e:94:0e:ab:20:71:30:4e:78:a0:59:d3:63:f9:
55:d1:3e:06:5d:e5:87:c6:81:c5:c8:fe:97:ca:ee:
0b:97:7b:54:1b:85:f3:97:5d:cf:24:39:7e:18:98:
e8:6f:5b:eb:e8:7b:e8:e8:ae:82:9e:99:34:89:a9:
0a:0c:0f:ed:0a:0c:d8:a7:7f:eb:12:cf:71:63:45:
f8:41:65:54:27:92:d4:2d:44:3d:73:38:4e:7b:01:
22:9b:23:b2:8c:45:e7:72:4d:8d:fc:4e:75:be:55:
ce:15:fb:3d:23:eb:7d:2f:c6:59:de:97:4b:0e:26:
ae:bf:c7:16:55:0a:cf:5a:73:98:7e:21:2a:f4:22:
e5:33:ae:a6:ee:d4:49:7e:e3:14:72:c2:b6:3e:2a:
dd:0f:cd:53:62:1c:c8:14:bc:a8:12:4e:d7:a1:92:
a3:50:8c:f3:db:d1:c6:d1:d7:8f:3f:2e:4f:bf:ee:
26:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3F:CD:BB:D3:AB:42:4B:E5:DC:8F:84:2B:72:00:FF:7E:A5:05:40
X509v3 Authority Key Identifier:
keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:75:b8:5c:79:70:8d:ae:48:31:67:94:7f:9f:1b:94:8e:39:
bc:5b:4b:01:4c:c5:71:4a:f7:b7:46:b0:50:f8:2a:e5:67:bb:
6e:d6:c7:e4:3e:a9:ee:94:4a:6a:67:99:16:ee:03:ce:22:ef:
61:3e:fe:44:50:c4:50:cf:9a:18:dc:44:14:d7:fb:c4:ba:c5:
1f:e3:0c:f1:25:53:13:a4:d1:fb:19:37:53:c2:ad:6f:1f:68:
f1:a0:a9:51:28:d2:64:90:10:7b:d2:b3:25:8b:33:42:98:ec:
71:4d:f9:38:fd:9f:9a:99:83:33:c6:4e:32:f8:4c:7e:ea:aa:
1c:55:39:fa:e6:d3:0c:88:35:c7:92:5f:41:9a:cd:9e:2a:7e:
91:15:11:76:e9:62:e9:a1:a9:b2:2f:65:88:7c:7f:20:2f:8f:
cb:62:57:5b:7f:68:0c:d6:a6:52:da:6d:01:e9:58:cd:ec:d3:
8d:59:7b:b5:3c:7e:14:7c:4c:75:74:4f:36:65:04:6d:05:1d:
bd:eb:c9:78:be:7c:90:70:62:f3:e1:67:1c:5a:87:1c:db:6e:
96:0e:12:5e:27:87:e7:da:9b:9a:c5:c7:9f:3c:5a:bd:08:e8:
56:e2:35:64:c5:64:ed:2d:fe:7b:e1:62:b1:42:76:c9:b6:42:
f8:c8:f3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:08:38 2026 by rpki-client