Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
File: 9rrOePyQJ42C8ehmiooZ7pmCzcM.mft (raw, json)
Hash identifier: VBXySyDIj41hkOkYNT6wuTOaPA3Z2EEZ5XXpzihYPMg=
Subject key identifier: 06:63:0D:4C:97:3B:83:6E:F0:4E:56:1E:BC:8C:56:3E:A8:C4:4E:38
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 019D98F545887E5D643ABA8FC6C7543E795A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
Manifest number: 0AE5
Signing time: Fri 17 Apr 2026 01:01:44 +0000
Manifest this update: Fri 17 Apr 2026 01:01:44 +0000
Manifest next update: Sat 18 Apr 2026 01:01:44 +0000
Files and hashes: 1: 9rrOePyQJ42C8ehmiooZ7pmCzcM.crl (hash: D3UOduNvjwuHHXHzgMKTYyKL/6ecXfGFwgmnCRJ7XQo=)
2: eiKeW5DZrw8ubUVRgQR3ZnISUA8.roa (hash: G/mSpJ5ilGB6NcS3kOpxScz/226GTJNOO7cls8f2b0g=)
3: ey3Mr8JzbFWqpi_zpEHpZfcPVTI.roa (hash: RZTYOXGch0DUBzdLJFR6bBMusCngAipnQLe9rTFjcIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:45:88:7e:5d:64:3a:ba:8f:c6:c7:54:3e:79:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Apr 17 01:01:44 2026 GMT
Not After : Apr 18 01:01:44 2026 GMT
Subject: CN=06630d4c973b836ef04e561ebc8c563ea8c44e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e8:5d:8d:02:7b:05:5d:5f:28:b5:f7:df:67:
6e:90:05:62:d3:1f:21:0c:43:9e:02:86:04:bb:72:
89:c0:c3:e5:4f:b4:3a:fb:3a:6b:3d:7f:04:20:33:
42:25:9b:07:ee:3d:c9:ba:0c:83:d5:4d:ad:57:8f:
d8:cf:b7:06:58:73:bf:c0:1d:70:6d:ef:03:4b:ba:
43:1b:72:42:10:09:15:c6:fd:1f:9f:8d:f3:3d:5f:
be:c2:15:ea:cf:d0:d6:87:d0:89:0d:f1:81:4f:6d:
d5:56:d0:f9:dd:f5:87:63:93:0c:97:77:09:42:a1:
25:43:5e:a0:7a:a0:52:1c:8f:0f:9a:8f:90:33:43:
16:71:18:1c:fd:79:18:3e:0f:63:28:a1:61:ee:ca:
28:74:50:20:47:d5:19:9b:23:d5:91:24:be:d4:cd:
f1:fa:c8:24:2a:0e:cc:65:24:6e:bf:26:b3:01:3b:
4c:e9:43:e1:05:33:ce:e8:9a:a4:be:81:ad:0e:64:
53:b2:c2:6c:fa:88:09:f4:02:63:26:99:72:3c:c6:
6e:da:ef:24:0b:2d:15:3b:c3:a5:07:62:52:29:7b:
74:a3:e3:f5:ed:53:aa:1e:de:e6:da:8c:b1:1d:f9:
66:f1:18:a9:90:98:e8:b3:c1:7c:a6:3a:96:01:b7:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:63:0D:4C:97:3B:83:6E:F0:4E:56:1E:BC:8C:56:3E:A8:C4:4E:38
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a2:8c:4d:dd:9b:ad:9f:35:27:a0:5a:45:8c:cf:e5:fd:4a:
e7:d4:75:ad:25:01:35:8a:5d:67:1a:5c:3c:0e:c1:f7:2d:29:
e3:05:e4:6e:57:0c:e4:4a:2e:38:86:68:9d:dd:6d:4f:c3:d3:
89:5c:37:01:98:2f:c5:74:b6:07:a9:2c:da:5f:38:50:99:f9:
b4:0a:e2:2f:b2:d2:85:71:5b:1e:ba:f0:24:40:da:75:65:f8:
95:1a:a6:2c:2f:b1:72:32:23:e5:e3:61:a8:6e:80:6d:7c:8c:
ed:32:e0:19:28:3e:00:47:6e:15:ae:f6:09:4d:2d:17:63:17:
0c:1f:e4:f6:fb:19:c3:9f:c3:11:4c:14:2a:0e:d6:5d:25:b0:
31:2b:d7:8f:e4:38:63:88:80:b9:91:50:3b:8c:58:b9:c3:f2:
72:c7:95:e9:da:8d:15:57:1d:0a:60:cd:62:aa:b6:fd:df:ae:
07:12:ab:d8:66:9b:33:5e:0c:4c:59:6e:b5:a5:46:1f:c6:b1:
b3:e4:7e:93:98:81:1a:33:d8:cd:ed:df:49:ad:de:0a:fc:ec:
3c:b2:a8:8b:f4:35:3a:5c:d6:d3:d9:a6:8e:09:8d:e0:ce:94:
d1:77:46:0f:d2:c8:1a:90:ab:c7:1a:bf:0b:4e:01:07:a8:8b:
48:07:2d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:22 2026 by rpki-client