Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier: X2Kpnct8x/uS8yk6dRzhQgp4RKeo0woQiPsalTnRd6k=
Subject key identifier: 4E:87:DE:2D:03:63:FD:CB:59:45:53:F0:A7:6B:FF:05:8B:BB:0F:A7
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer: /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial: 019D984FBCD47AFD1542AD90EDE9FDC36B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number: 0FED
Signing time: Thu 16 Apr 2026 22:00:55 +0000
Manifest this update: Thu 16 Apr 2026 22:00:55 +0000
Manifest next update: Fri 17 Apr 2026 22:00:55 +0000
Files and hashes: 1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: qjBuRc1hg7x6uxx75k5SACZqJ02/rqzHR9yxYytWcq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:bc:d4:7a:fd:15:42:ad:90:ed:e9:fd:c3:6b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
Validity
Not Before: Apr 16 22:00:55 2026 GMT
Not After : Apr 17 22:00:55 2026 GMT
Subject: CN=4e87de2d0363fdcb594553f0a76bff058bbb0fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:2c:0a:ee:77:6b:9c:e5:f5:02:77:69:19:
35:97:6c:8f:7a:a3:21:ef:02:a8:37:b7:f4:3c:32:
23:46:d6:58:9a:ef:d7:8a:45:0c:88:a6:c5:df:d2:
d2:e6:c6:c7:d1:4c:24:74:c5:dc:f3:94:9a:c2:23:
e8:54:bc:2b:17:02:0e:bf:73:cf:5f:c8:32:8f:dd:
4f:38:f9:79:7e:b7:74:50:5d:86:df:2d:31:6f:6d:
50:b8:42:23:11:89:87:d4:9f:85:01:f8:bf:f5:c4:
27:d6:67:15:33:2a:c5:68:43:8e:b1:d8:3d:f1:bb:
f1:3d:01:87:69:ea:67:b4:0c:9c:a2:c0:f5:12:13:
9a:46:63:d4:44:86:7d:a6:e9:0c:0c:4b:22:fe:66:
65:4b:c9:44:7e:4c:f9:9d:e1:a6:50:38:4c:1c:80:
76:d2:4e:3d:38:f7:8d:ed:c1:72:68:86:8b:48:c7:
ba:1f:85:bc:d9:79:97:5b:00:8a:ef:eb:ef:45:a5:
ef:12:8a:95:dd:12:7d:07:91:06:73:40:33:32:d0:
b4:64:d4:a8:03:92:9b:c8:58:1b:75:06:10:22:1a:
eb:4d:a0:ef:8f:15:b4:b7:a8:24:6c:08:bd:98:09:
4e:fe:bf:d2:43:aa:c1:c0:83:f7:a6:06:a0:ff:50:
1f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:87:DE:2D:03:63:FD:CB:59:45:53:F0:A7:6B:FF:05:8B:BB:0F:A7
X509v3 Authority Key Identifier:
keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:00:2f:96:af:bb:e6:bf:06:95:31:aa:7d:d2:8a:00:bf:37:
5f:96:40:dc:a7:fe:3d:57:cb:df:cd:a2:fe:94:4b:f0:6e:a5:
e0:33:b1:3c:18:53:30:71:ca:d9:36:dc:76:fc:d3:1e:bc:b9:
10:99:8e:cd:7e:ac:8a:e1:a9:64:29:79:51:c8:78:4d:6e:4f:
cb:59:b3:97:0b:ac:49:89:9d:ba:47:dc:76:15:41:dd:06:36:
d0:07:a2:38:3f:94:7e:49:7b:bf:3f:95:9b:a3:26:20:62:3b:
6e:c1:74:7e:5b:ca:75:cc:68:89:62:1d:c5:1c:67:32:56:b7:
13:9c:09:d6:7d:1c:1e:df:82:3d:e7:58:2d:51:4e:05:8a:6c:
19:71:86:28:01:87:80:07:d5:59:c7:a2:a8:cc:ae:b1:25:59:
18:76:61:16:c2:82:79:b1:09:19:0b:2f:c9:a3:4c:4a:85:48:
eb:ed:e6:b6:b1:f8:47:ad:f9:63:f4:d9:53:80:24:50:16:03:
2e:72:47:3f:64:c7:a3:75:02:23:89:27:94:82:28:1d:34:eb:
72:1f:eb:02:5f:fb:3b:73:d4:a9:2c:91:55:e6:59:96:72:23:
14:e8:a2:5a:86:6a:7e:a8:93:80:e6:ba:40:13:ef:03:e1:2c:
7d:59:d1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:57:48 2026 by rpki-client