Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier: VPRvj7TVV+nDi/ectElO4LYzDWgKQBBS5BglMrCyve4=
Subject key identifier: 9E:35:2B:93:A3:56:90:E5:96:8E:76:3C:6C:AD:9F:CE:16:78:0F:6F
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 019D98BD299EDDBE46AE9E4F4AAFA12FDB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number: 1225
Signing time: Fri 17 Apr 2026 00:00:26 +0000
Manifest this update: Fri 17 Apr 2026 00:00:26 +0000
Manifest next update: Sat 18 Apr 2026 00:00:26 +0000
Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: b74taN4J106noj59W+EL32I6imBaHylzdzcfno6cdYQ=)
2: vybKFSnUUtCvuNDjBmPdlEc4moI.roa (hash: NvnlzgrButbUBUuTuJIYrEkvgNvaHTxK68ujFnkuVpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:29:9e:dd:be:46:ae:9e:4f:4a:af:a1:2f:db:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Apr 17 00:00:26 2026 GMT
Not After : Apr 18 00:00:26 2026 GMT
Subject: CN=9e352b93a35690e5968e763c6cad9fce16780f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:9e:da:ec:25:4d:83:b1:c6:c9:ef:df:c6:
79:16:f7:01:95:c0:d6:58:5e:2d:ba:23:c4:89:17:
6c:b2:05:24:3e:64:eb:05:8e:ee:61:cd:7b:bc:cf:
44:49:b0:44:b4:93:3a:9f:bf:5c:09:ad:08:ef:9f:
1b:8e:4a:c0:77:da:ef:3a:31:c8:f2:ea:c4:97:9e:
44:71:98:0d:01:ce:c6:2b:c7:37:63:6e:b7:7c:56:
05:78:aa:72:e3:e3:98:b7:e8:7f:de:f0:fd:60:c3:
30:91:e5:e0:cb:51:05:f9:5c:1c:0b:4c:47:1a:cf:
91:0a:68:d1:ba:8f:ae:14:fd:0f:d0:81:ba:b3:54:
d7:e3:a7:50:b6:71:b0:27:64:b5:62:3a:9f:8a:9b:
2b:12:a0:10:2b:8d:18:01:17:6d:f1:3d:70:f2:87:
1c:37:1b:dc:ea:91:d2:d8:97:47:9d:1b:b2:de:ed:
4e:e8:43:30:af:b6:d8:f8:94:44:94:f0:96:69:83:
2e:45:1a:c6:a3:cf:2b:37:62:4b:78:8d:98:0e:5d:
ec:47:7b:c3:62:73:06:df:6d:a4:06:f4:ba:8b:b2:
36:84:3d:2b:f6:d9:54:56:45:4b:f6:b2:21:ee:3a:
5e:75:67:c0:af:f0:0d:33:ed:70:cc:e8:81:4f:e1:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:35:2B:93:A3:56:90:E5:96:8E:76:3C:6C:AD:9F:CE:16:78:0F:6F
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:13:64:d9:4e:58:58:7d:ea:78:91:e5:2a:c3:58:1d:90:3f:
3a:68:98:1e:60:c5:6c:a7:d1:05:84:ae:54:4f:b7:8f:d1:eb:
bd:4c:bc:ba:83:07:7e:71:99:2a:9e:e7:a8:03:f8:a7:62:21:
93:49:53:62:ff:1c:1d:4e:cc:6b:2e:e9:84:1c:7f:c4:dc:e5:
a8:e0:f6:90:d3:2c:1c:e0:24:df:25:8c:7f:2a:74:2c:63:1f:
e0:c9:02:98:bb:e0:11:45:17:d4:a1:22:57:4a:2b:3c:89:ea:
36:d8:54:66:47:6f:ce:c8:96:bc:7f:84:1c:3d:97:88:60:1b:
be:05:11:78:8f:e0:31:24:40:1b:33:f6:28:ab:56:93:6e:82:
30:c6:f7:14:b5:ce:4d:5e:08:66:5a:e4:e4:0c:a5:b6:15:fe:
dc:e6:6e:a7:9d:63:d6:5c:d9:ad:e8:2d:c5:ab:f6:4e:1d:c0:
79:17:c5:b3:40:61:fc:64:43:39:15:28:6f:5f:bf:79:9b:7f:
d9:6d:b0:2e:b4:47:1a:fa:f0:fc:02:12:bd:4d:dc:d9:7d:d8:
78:7f:74:e1:f4:da:5d:32:84:f1:76:19:3c:04:e5:af:65:8f:
31:cc:c4:69:65:8c:2a:c7:65:47:3e:03:a6:47:91:aa:da:70:
2c:63:62:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:30 2026 by rpki-client