Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
File: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft (raw, json)
Hash identifier: uWYQwn72D9o+3LHdxNxSOscOkLEMDE8mXVxxDdb7SQQ=
Subject key identifier: 99:E8:DC:9C:A5:60:E2:0A:69:9A:FE:C0:D9:F9:8D:FA:BD:E9:56:8A
Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
Certificate issuer: /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Certificate serial: 019D9C2C84D3EE7CF6A235004B9CBF437397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 16:00:56 +0000
Manifest this update: Fri 17 Apr 2026 16:00:56 +0000
Manifest next update: Sat 18 Apr 2026 16:00:56 +0000
Files and hashes: 1: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl (hash: Lg1azQ1dM1wkxiAXE582z6eaR6vbZoddIFd7kmhVbHo=)
2: L3FElQgN_OK9ME85XjkPB5d4njo.roa (hash: 7fKQw9/kLDh7zT4p1MB3dQg/LI4nczVMbuMgYO277J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:84:d3:ee:7c:f6:a2:35:00:4b:9c:bf:43:73:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Validity
Not Before: Apr 17 16:00:56 2026 GMT
Not After : Apr 18 16:00:56 2026 GMT
Subject: CN=99e8dc9ca560e20a699afec0d9f98dfabde9568a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:2d:64:69:74:3e:21:e3:34:a5:dc:0e:59:
2c:39:97:f2:34:db:3e:e3:0a:e1:2b:d3:a7:6f:f5:
57:c3:d9:98:db:7a:ea:19:aa:bc:8e:f8:ba:41:1e:
2d:50:ca:98:7e:9e:c4:e5:a6:4c:6d:7f:d3:ea:d8:
99:78:f6:f1:2c:97:c1:e0:f9:e4:35:eb:1a:48:46:
a8:8f:07:d9:c5:c1:44:0d:5c:5e:4b:90:f0:a4:fe:
27:6e:19:d5:06:65:47:8e:df:e5:28:34:90:a3:28:
0a:24:a2:09:91:62:99:d0:80:c9:0a:f8:5c:b3:2a:
31:86:1c:f4:b2:3d:35:44:d6:9a:8c:a8:6e:b1:95:
14:9e:d7:18:a8:5e:f9:5f:e7:2e:46:1b:dd:7b:de:
a7:72:c6:b7:78:5d:89:ea:0d:e6:13:e1:e6:3d:9f:
41:b7:a3:c8:8a:d8:c5:17:91:db:ae:99:c0:ea:2b:
45:51:cc:98:08:20:3d:f3:08:3a:2c:b7:6f:31:8b:
dc:f2:d2:2e:24:db:26:39:23:b8:62:a7:07:2b:d4:
ee:fc:bf:c9:cf:be:c6:b9:93:0c:ab:70:36:51:31:
6c:19:f9:e2:52:4a:07:37:be:74:07:a1:24:d5:8c:
30:9c:97:ec:03:d7:d6:91:0b:02:aa:15:78:67:8c:
4f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E8:DC:9C:A5:60:E2:0A:69:9A:FE:C0:D9:F9:8D:FA:BD:E9:56:8A
X509v3 Authority Key Identifier:
keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:13:c6:92:7c:69:de:93:ed:d3:04:05:28:5c:e4:83:51:2c:
f7:9f:aa:3d:15:34:01:6e:de:25:30:c0:40:82:ba:f3:5c:32:
36:9c:0c:5e:1b:f2:29:13:6b:26:d1:dc:67:c1:38:86:59:cc:
a2:4a:40:bc:ca:c3:2c:3f:d8:78:6b:af:4a:d6:57:68:38:e0:
4a:7f:ad:42:47:96:cd:dc:38:88:8c:5e:41:a7:81:17:30:d9:
3f:c2:0b:a2:90:5e:cc:f6:94:3d:82:3a:d5:f8:c0:f5:11:26:
fd:2d:47:1e:f7:43:0b:cb:cc:4a:09:3c:fd:69:47:fe:e2:b2:
9f:c3:18:8f:0e:e0:e2:04:76:59:77:40:b8:c2:1c:a6:b5:4f:
88:83:e7:aa:f6:e2:7e:78:02:93:a0:a1:df:6b:d3:d2:c5:a7:
99:c8:a6:06:0f:f6:67:e1:d1:d6:fa:08:46:74:af:23:28:e6:
90:55:5b:11:c3:6a:50:2b:69:cd:6b:ca:ec:aa:ca:94:9e:7d:
3f:b5:7c:bd:72:75:f8:13:52:bb:e1:a2:62:0f:9d:6b:79:09:
7c:82:da:a6:3c:db:db:e9:52:65:b1:29:21:68:60:cb:c6:02:
92:41:d2:ac:f9:74:72:61:72:f4:c0:d0:21:c6:4c:7c:96:52:
a3:b2:ad:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:05 2026 by rpki-client