Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
File: 9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json)
Hash identifier: us40Gq+Gz1ps4PKKJl3oMK5lcQ/lmbRqhppezy9sS3o=
Subject key identifier: 53:46:3D:52:57:EF:71:1F:85:12:8B:3B:41:A7:EF:CD:23:F6:61:6C
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 019DA3781E675890BC6A829189AA4D2FC744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
Manifest number: 18C4
Signing time: Sun 19 Apr 2026 02:00:51 +0000
Manifest this update: Sun 19 Apr 2026 02:00:51 +0000
Manifest next update: Mon 20 Apr 2026 02:00:51 +0000
Files and hashes: 1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: +bKGG21qLP38YLXo0J4DtCJDCA5adAPx5JgCaCN7ECc=)
2: HZePOmsjkPsg7dlktNrDrbvkEoQ.roa (hash: EMtZKX87wa385GEwMyBcWWCzgkUjroenf3wknZ0qOr8=)
3: feUrijd_KveyJ7eNJ1rBQYy4hhQ.roa (hash: 8ChsNr7pTk9JhrykIfRkpxl+JlzU+6lvsFJu1WkZIeY=)
4: jbQbuOumCNgoddvSeNQ0EqiLIvk.roa (hash: r2PNx4QtBVQh/b8nKhzHQVcKqAGoHRGsycMInrQsQyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:1e:67:58:90:bc:6a:82:91:89:aa:4d:2f:c7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Apr 19 02:00:51 2026 GMT
Not After : Apr 20 02:00:51 2026 GMT
Subject: CN=53463d5257ef711f85128b3b41a7efcd23f6616c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:6f:5b:b3:c5:64:b9:0b:0b:2a:d6:df:06:
0e:ad:24:43:36:97:48:0f:d7:e7:d8:c4:46:3e:88:
33:f5:c7:c2:34:72:fc:ed:a2:58:93:dc:17:80:20:
36:4a:ec:10:db:ca:66:b1:f6:fd:62:8c:26:a2:73:
f1:7d:c3:f1:0a:15:40:17:ac:05:94:8f:a1:31:bf:
61:96:84:ef:22:9c:9b:b4:12:32:7c:7e:f6:48:da:
4b:f4:67:f7:42:9e:f5:f1:d5:19:84:fc:cb:d8:cd:
53:55:ab:b2:d2:f1:6f:a1:25:4a:43:af:11:3e:f7:
22:f6:73:a5:c2:29:4f:14:c7:28:00:4c:81:7e:5f:
ab:9b:51:68:6c:89:27:21:c2:06:0c:f6:7d:09:d3:
29:e9:8b:9a:ec:87:e1:e7:a3:af:c8:f8:05:08:c6:
e5:0e:57:88:19:f1:a4:c2:97:36:e7:d7:b2:59:a5:
b5:fb:88:42:08:42:aa:d7:ca:4a:e1:3b:f8:14:31:
5c:73:30:a5:98:64:15:21:98:90:db:85:2b:64:19:
f3:66:b4:12:74:ae:f2:5b:9a:ef:81:ff:b0:9b:38:
f5:d9:d2:77:3f:64:55:17:bc:bc:1a:8b:fc:f8:19:
c0:31:73:5e:71:37:e7:e2:92:74:ae:1a:d1:5b:f0:
68:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:46:3D:52:57:EF:71:1F:85:12:8B:3B:41:A7:EF:CD:23:F6:61:6C
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ed:b8:bb:0d:5f:51:50:f7:da:3d:42:da:8e:f5:21:41:0f:
7a:ac:1c:ea:c2:67:60:22:fa:14:1c:73:b6:c4:ec:8b:bf:c7:
fe:a3:66:04:48:05:16:fb:47:0f:60:5f:b3:21:1e:97:d8:f3:
2d:21:96:7a:7a:13:00:56:ca:80:34:7f:96:61:92:99:c3:ae:
c4:fb:2f:04:fb:20:d0:a9:14:c5:de:0a:e8:53:30:d8:c7:f1:
c5:4c:df:5d:5f:92:d3:c2:53:87:b3:d3:c0:ad:6e:69:e7:1e:
9c:09:be:5e:f7:97:5c:e0:ad:32:99:5a:16:9d:7a:b9:1a:59:
1f:0c:c6:17:c8:9d:90:64:9c:5c:b2:4d:81:fd:f0:03:e9:e7:
07:1f:0b:2a:7a:4f:9d:4b:71:a0:8e:5d:57:2e:ed:95:80:4e:
e8:4a:c5:f5:dd:d6:76:0b:c5:3e:46:d0:e7:e6:86:f8:3d:df:
d8:8d:2a:81:26:55:7a:09:10:24:35:6e:ae:8f:47:ce:4d:4c:
8b:a1:ed:8c:78:cb:18:1f:7e:0f:7d:95:27:98:94:ce:58:d8:
75:70:44:e8:08:83:a9:3e:c3:a6:b7:e6:53:d9:b1:3e:e5:87:
52:22:53:7e:d5:61:80:39:aa:44:92:45:79:d2:f8:6c:33:ad:
0d:f8:90:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:02:49 2026 by rpki-client