Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier: EM3woTbNw2eqiUlptUW96k64iwmz5labt51QL9MfN70=
Subject key identifier: B1:2D:11:7E:D8:DF:7C:9B:F9:B7:C0:34:2D:3C:2F:FA:8D:4D:C7:24
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial: 019D992B7ECDCC491873F3B5F801C0C97DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number: 05C0
Signing time: Fri 17 Apr 2026 02:00:57 +0000
Manifest this update: Fri 17 Apr 2026 02:00:57 +0000
Manifest next update: Sat 18 Apr 2026 02:00:57 +0000
Files and hashes: 1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: GXOFftgEQ1bmlWqQMXF+ODzjGcx1FJWaVfkpQbF56og=)
2: JKxruJrsyQODEt0lo_2igVlEBhw.roa (hash: 2Ldq4wJQTMkIcJXiRtPhwdIrKaep4MniRxTOmuYmXUs=)
3: UrR8he9LeX1_n_grB04eKjIEfn4.roa (hash: 6VYM1BE9h3lSboPJRgPSxyvYhSPFOMNMfzzxqBF3w0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:7e:cd:cc:49:18:73:f3:b5:f8:01:c0:c9:7d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Validity
Not Before: Apr 17 02:00:57 2026 GMT
Not After : Apr 18 02:00:57 2026 GMT
Subject: CN=b12d117ed8df7c9bf9b7c0342d3c2ffa8d4dc724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:6f:87:29:f8:1e:ab:69:a9:b7:42:85:11:
46:63:26:2f:20:9b:66:b0:d1:d2:1d:1f:e8:a0:5c:
4a:37:27:a4:30:da:6a:77:75:1a:c7:34:67:da:02:
2d:59:16:13:21:9f:c1:dc:87:0d:f0:ad:ae:0b:70:
00:30:9a:a9:29:6e:fa:af:70:79:e1:8d:37:ba:f5:
4c:02:24:46:a9:b9:93:75:3d:ae:b2:23:5c:ec:59:
20:b3:cd:bb:1b:34:80:9f:fd:a4:79:47:ab:62:ef:
a3:cd:77:56:86:24:ba:e2:49:db:05:28:60:dd:4a:
91:fe:fd:9d:d7:d4:a5:aa:cf:a8:68:64:d8:e2:57:
43:64:82:5b:39:f6:12:29:c2:1f:c2:46:f8:da:f3:
97:ab:53:84:23:82:dd:f5:82:98:c2:5a:06:65:d1:
b6:2d:da:49:29:e0:cc:2f:f7:8c:09:14:86:d1:22:
75:45:05:fd:10:9b:de:7f:4f:b4:d7:9a:a9:32:33:
09:cb:d0:a3:73:a7:c5:b4:20:95:01:5e:41:6a:28:
68:83:98:6b:89:35:17:f5:40:47:de:ad:5c:76:c7:
f3:05:e5:a8:fd:1e:e5:b9:3a:63:45:c8:c8:8b:49:
3a:cf:ba:c8:bb:bb:5f:e5:b8:28:12:bb:b2:c0:79:
23:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2D:11:7E:D8:DF:7C:9B:F9:B7:C0:34:2D:3C:2F:FA:8D:4D:C7:24
X509v3 Authority Key Identifier:
keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:24:35:c8:c8:7a:0c:01:b0:20:26:f2:90:8c:de:39:48:95:
0f:91:75:cf:a3:d0:19:f6:3e:2a:c1:68:31:20:6b:3b:43:ac:
29:f0:57:fd:a2:0a:03:4e:68:22:67:3d:2e:17:eb:18:c7:59:
12:4f:db:da:77:1c:c5:98:e4:a5:30:48:f3:81:63:f2:ad:95:
d8:af:e2:17:7b:b0:51:48:06:7e:0d:f4:23:6a:87:72:47:4f:
1c:ee:0c:31:19:3e:be:4d:d9:6e:49:85:c2:0c:85:f0:ce:ab:
ce:25:e4:80:7e:eb:93:49:1e:6c:29:6f:19:6b:f6:ac:6b:69:
34:44:59:44:15:1c:41:12:fd:8b:e3:88:ab:3c:8d:a3:06:5e:
e8:6a:a9:f0:9e:ae:06:42:0a:c2:6c:1b:1c:25:f6:60:26:73:
4d:cc:1d:9f:d7:2e:39:34:0a:08:25:5c:5d:39:60:19:00:44:
35:0a:79:c5:4b:7e:24:82:57:5f:ee:f1:e0:61:b0:61:88:ed:
fe:54:70:1c:85:a1:06:a0:f9:5e:37:1b:bb:77:4d:6f:93:31:
79:d1:87:d4:52:6f:bb:a3:f8:65:33:6b:f2:9f:f6:9c:ae:91:
fe:a7:69:a9:46:b8:e1:e3:02:79:ab:f0:ee:e4:93:51:f6:9d:
d5:08:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:30:40 2026 by rpki-client