
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
File: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft (raw, json)
Hash identifier: pEmOLUp1lSQ7gGkBbbFSFWrwSxK9aRt+TgMSgg1nf5g=
Subject key identifier: A6:81:FC:73:C7:8D:25:6B:C7:E5:11:B7:05:70:FB:31:7D:33:CA:3D
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Certificate issuer: /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial: 019DA45388410D9FB0185CC8EC1D20B9F0AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
Manifest number: 0898
Signing time: Sun 19 Apr 2026 06:00:30 +0000
Manifest this update: Sun 19 Apr 2026 06:00:30 +0000
Manifest next update: Mon 20 Apr 2026 06:00:30 +0000
Files and hashes: 1: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl (hash: WpgLaiFnq4xstco6sx4W5DyckVGnyC4sirdXFkkkPi8=)
2: PBFghIae2xwjHfVkKp2B7TGOs9U.roa (hash: 6sEYt1wV5te4lrcRseI0CvT+vo353HmkjymuLozkj+U=)
3: tKmmsRGg9YbOwZD0WDnzLRT91zI.roa (hash: 1BiDxW73ZmhEDeC+jXIfDWgmKydIlt1YsSH4cXEQpzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:88:41:0d:9f:b0:18:5c:c8:ec:1d:20:b9:f0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Validity
Not Before: Apr 19 06:00:30 2026 GMT
Not After : Apr 20 06:00:30 2026 GMT
Subject: CN=a681fc73c78d256bc7e511b70570fb317d33ca3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:f2:bd:e0:0b:1f:d4:6b:b8:a5:a2:eb:07:
ab:43:e9:ea:74:79:ec:d3:8b:dc:d9:3f:2b:e2:b2:
62:d9:99:e8:96:4a:ed:fe:4f:04:92:a2:5f:48:85:
a5:0a:68:a1:fd:39:ee:e7:ea:56:2e:e0:62:24:2e:
85:e9:03:94:51:5f:d7:e5:81:4d:dc:8a:84:11:5b:
b9:bc:d8:8b:12:1d:e4:15:ca:49:e3:d0:b3:4c:78:
98:43:ee:e9:c3:fe:20:2e:6a:9e:91:73:b1:a5:28:
60:a7:4b:a3:0e:82:5f:b9:62:17:53:a6:b9:67:72:
23:6d:b8:5f:08:f9:27:4e:15:31:ac:b8:01:68:49:
53:ad:7b:a5:fc:01:43:cf:d0:9f:f5:cc:83:14:fc:
bb:5d:d7:12:fc:96:c3:10:ef:10:47:7d:91:25:8f:
3e:2a:6e:a2:c5:c9:89:a2:6a:3a:48:a4:9d:a7:9b:
31:99:44:f9:c0:4b:a4:7e:eb:2b:6a:1a:73:82:6b:
fa:59:92:81:57:88:e0:6a:04:75:ee:4c:7d:9a:c9:
f8:19:f6:97:95:6d:d2:3d:ad:8a:08:ff:99:05:96:
a8:0a:99:44:ec:bc:2d:d1:70:af:22:78:18:ef:03:
5e:66:8c:5f:bd:bb:b7:6b:d6:aa:32:6f:a6:d9:98:
4c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:81:FC:73:C7:8D:25:6B:C7:E5:11:B7:05:70:FB:31:7D:33:CA:3D
X509v3 Authority Key Identifier:
keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:fa:f5:e4:54:79:7c:06:cf:24:54:a7:b4:1d:62:9b:f6:c3:
dd:f0:f3:63:6b:61:4f:da:c5:ed:4e:d2:32:34:bb:f1:9d:98:
70:02:ae:91:91:0f:c7:24:5f:09:a8:79:97:8d:ee:5e:01:1a:
72:49:78:3a:a1:45:ae:4b:5b:7f:63:89:f1:7a:43:a7:f8:f7:
17:d1:9f:ae:df:a4:a2:88:2f:14:b0:db:bb:02:ec:96:64:f1:
38:41:e4:09:f3:7a:a3:2f:62:bf:30:8a:dc:07:cc:8f:ca:c0:
92:ec:89:20:fd:23:01:a6:59:c4:48:77:fa:d8:c6:aa:75:6b:
4f:76:13:64:bb:d5:46:3c:ac:dc:a1:85:82:c4:9b:80:bb:11:
2d:4d:94:7f:22:1c:86:d0:e0:40:23:a8:ef:0d:05:5e:6b:c6:
c6:3e:c8:08:e4:61:77:64:54:4c:52:ad:77:eb:1a:2f:6f:cb:
6b:b8:21:97:44:01:ba:3e:b2:0f:6b:7d:da:b7:7a:63:38:65:
0b:12:6f:fc:26:ce:df:cb:4b:a0:b6:b3:bd:12:2b:df:6e:1d:
67:89:15:e4:5e:5a:fd:b3:be:41:5c:76:d7:44:55:4c:c3:e2:
0e:3f:c8:ef:56:98:39:80:71:c2:f0:c8:93:3f:d2:d3:fb:cc:
13:73:42:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:35 2026 by rpki-client