Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File: 9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier: lBBTmYz0wmnv5DU1DRq8F/p4OGkgQCnsiXLvkdMyqo4=
Subject key identifier: 48:DB:FC:F7:F2:5A:04:8A:4F:B6:F4:04:57:09:A4:1C:AA:F2:68:83
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 019D98BD6D57C143CA165A2E6E0910A5920F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 00:00:44 +0000
Manifest this update: Fri 17 Apr 2026 00:00:44 +0000
Manifest next update: Sat 18 Apr 2026 00:00:44 +0000
Files and hashes: 1: 14LKfzEcyprlucXZUzPgqnyuaSo.roa (hash: owEZKmUqoURhemkZHaPKsDWoCPoanQn9LH86MqhDwCI=)
2: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: TBqdkQpquoawQUnR6P3KWm48vUQEqzaJj22viUZ6/Cs=)
3: G5qi4rCJoI8AUX8isP7b0ojIn7g.roa (hash: FS/t0aq2LUO9zTLCRQWanvLuxo6AAzEoo01kqAkUXDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:6d:57:c1:43:ca:16:5a:2e:6e:09:10:a5:92:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Apr 17 00:00:44 2026 GMT
Not After : Apr 18 00:00:44 2026 GMT
Subject: CN=48dbfcf7f25a048a4fb6f4045709a41caaf26883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dc:cd:68:e3:f7:c4:85:65:50:28:d7:6b:bc:
bf:e9:7a:84:41:11:da:7b:7d:67:b1:b4:71:a0:b9:
1d:d6:0c:b2:c3:ca:ef:ba:4f:a5:ca:8d:1e:66:19:
3a:97:9f:3c:5b:eb:55:bf:32:dd:9b:eb:1c:6a:7c:
ea:6b:b1:98:11:c3:89:17:a1:31:17:12:8b:9a:9c:
d6:6e:17:73:4a:c6:11:e8:8a:5e:36:f2:9a:6c:82:
5f:4a:b8:bd:51:00:0b:a2:34:4a:a4:50:b7:2e:06:
34:ba:f6:a8:dd:bb:72:1f:d8:a1:c3:cb:ee:5d:ef:
11:a7:b3:eb:c7:5c:df:4d:f8:01:0f:83:63:22:c4:
18:ef:1c:8c:f4:bd:fb:5d:23:75:1e:a1:cd:cf:a4:
cb:b8:73:75:d2:3f:52:ec:09:c2:cc:f4:a4:04:b4:
81:88:20:5b:35:49:2b:56:e4:a3:09:3c:5d:ec:fc:
0f:93:24:23:b4:ca:02:ec:34:61:9f:0f:42:cd:f9:
a5:a8:a3:e6:96:65:e4:b2:21:c1:3c:a0:82:44:4b:
8b:2d:43:01:e5:c5:c3:93:b5:99:cc:62:ed:cb:c2:
34:57:ea:ec:61:ff:f4:3b:75:1b:59:94:99:f8:b1:
5e:5a:f5:1c:c9:b9:78:fe:3c:de:ae:94:b4:ec:17:
bf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DB:FC:F7:F2:5A:04:8A:4F:B6:F4:04:57:09:A4:1C:AA:F2:68:83
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:9e:07:26:23:a9:f3:e1:28:72:86:b0:01:4d:83:b9:f7:4c:
9b:db:94:d9:0f:b7:44:e4:c7:45:85:75:c4:9b:56:33:ad:a3:
ba:8e:aa:3f:48:16:bc:13:c0:68:7f:d3:8e:93:d8:5b:2a:3f:
2a:7a:b9:9f:74:d9:c3:8d:58:23:f3:10:cc:3b:b0:25:e3:ad:
84:92:56:8e:bd:04:df:e4:f7:5b:d4:c5:f1:5c:a2:ff:12:a5:
73:b7:ea:08:12:92:44:0a:97:f7:ba:7c:2e:e0:53:3a:7e:10:
df:41:15:ac:87:04:72:e4:f7:de:dc:21:9c:0a:98:fa:28:89:
c6:5b:c2:81:14:da:97:46:ff:bc:22:c4:e1:c6:1c:7d:a1:9c:
a8:ae:ed:cf:fb:5b:7e:22:5a:4d:0b:fc:ff:09:bd:e4:e8:0c:
3a:9b:bd:cd:86:48:e3:25:74:b9:64:48:93:9e:40:7b:64:61:
b1:91:17:b8:b7:d0:3a:44:55:ba:b4:f4:d9:51:15:01:4a:5b:
fc:f7:98:ba:9d:01:0b:f2:f5:22:66:3f:a2:b4:5d:ee:d6:8c:
4b:f2:db:92:6a:93:66:53:2a:6b:30:fc:3f:66:8f:25:94:68:
70:23:4f:61:fa:8d:a0:bc:b3:0b:de:50:57:fe:88:3d:40:88:
df:61:5f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:16 2026 by rpki-client