Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: ljTB2wQO+PLDgjDHIYAEKuRQubsQzVNp6pP7aV+dZFI=
Subject key identifier: 9E:A9:D9:06:EE:07:D7:79:D8:6F:FD:A2:22:06:C8:3A:6D:F3:8B:29
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 019D99D0740F18A4BE2CF7CC049F82AF6886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:01:08 +0000
Manifest this update: Fri 17 Apr 2026 05:01:08 +0000
Manifest next update: Sat 18 Apr 2026 05:01:08 +0000
Files and hashes: 1: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: YDDlsJJ+/rkyHkwyQNjXeEae5lS+8+XpSVxfbc49EK8=)
2: EUgLAWtAQkj2b81EVNaYNI21B8Q.roa (hash: YH1yRF3btNqvfXvDOf+ohxslhwH0GDsrS4U4ZZBSNxE=)
3: PEehES5SpZnr6s-nLTRBCvh0KiA.roa (hash: KLNyhN+bpOs8kGrk8EPysrLFKdZzU9fW9CEvBaXVGAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:74:0f:18:a4:be:2c:f7:cc:04:9f:82:af:68:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Apr 17 05:01:08 2026 GMT
Not After : Apr 18 05:01:08 2026 GMT
Subject: CN=9ea9d906ee07d779d86ffda22206c83a6df38b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:90:43:39:f4:bd:19:44:e0:d4:ac:0a:40:d0:
bf:94:5f:20:cf:1b:c2:1b:78:70:b3:75:ac:7a:46:
42:96:64:fa:f8:60:d3:a7:65:82:f8:d4:9c:6c:b6:
a1:4e:83:bd:dd:1d:f7:44:81:43:43:4e:61:4d:64:
6d:9e:43:a8:dd:20:32:05:3f:ed:b0:f8:bb:44:96:
bf:f1:35:f9:53:ee:ba:57:f5:7f:84:f8:f5:4c:e0:
31:ae:17:09:05:d7:9c:4c:61:1d:b2:e6:12:e4:d9:
01:42:e2:88:a3:88:86:4f:6d:8e:a6:f8:2f:80:63:
9f:ef:e7:05:35:00:a6:53:95:a2:64:49:b3:db:29:
44:e4:ef:66:7f:ba:0f:3b:28:43:d4:2a:a1:af:16:
56:c4:6c:9c:18:18:84:aa:3b:ff:ea:c3:18:e4:7c:
b5:b4:23:76:56:2d:ae:c3:f2:73:45:e8:7d:03:ab:
50:aa:0e:2a:df:5b:fd:34:5a:d6:a9:f5:eb:2f:96:
2c:ff:af:91:99:38:70:24:a4:3e:b3:30:62:67:4f:
16:22:10:3a:e5:a6:cf:dd:66:d7:51:fc:d3:85:bf:
33:d4:f7:3b:05:e3:8c:5e:cb:a6:ae:9e:d5:bd:59:
f4:9c:60:2d:5e:48:a9:77:17:b5:86:10:99:0b:f0:
9e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A9:D9:06:EE:07:D7:79:D8:6F:FD:A2:22:06:C8:3A:6D:F3:8B:29
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:be:66:64:bf:b1:07:03:99:db:b9:a0:3a:5d:0a:a1:b2:6d:
23:51:42:74:83:f0:4d:ee:98:f5:64:62:fa:fd:d2:a4:05:45:
4e:8d:58:02:a4:e9:62:5c:d5:06:0b:15:fc:d2:2e:9c:26:3a:
74:21:c5:3f:40:78:71:08:04:5b:32:c4:45:a5:f4:48:2b:28:
fe:3e:31:ae:ee:b4:54:0a:57:5a:0c:86:ac:35:e3:f2:11:1e:
6b:84:ad:b6:35:10:bd:17:27:74:1a:92:75:a2:67:56:bd:77:
f5:7a:95:ae:90:55:cd:a0:68:e8:40:81:7f:90:85:e8:2a:40:
4b:8e:ec:ae:b8:93:be:34:07:e3:9e:44:76:a6:27:cc:54:d3:
12:4e:fb:4a:3d:4a:52:09:29:75:39:69:f1:de:18:25:42:9c:
a2:16:e5:21:e8:71:e2:df:9e:5a:bd:73:8c:b9:61:af:a1:1a:
b9:cd:cc:9a:39:0d:0b:5c:62:7c:66:8c:f3:bc:7e:ff:85:46:
22:25:73:6e:e2:c9:a3:ac:0c:53:0e:39:7a:86:ab:09:a7:d0:
dc:6a:44:c8:e1:d0:92:eb:bf:07:62:90:0a:7f:47:a1:30:f4:
f8:3a:f0:a6:dc:51:2d:4e:a3:a3:91:2a:a4:46:fe:28:d7:f6:
4e:01:3a:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0HQPGKS+LPfMBJ+Cr2iGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NmIyMDQ5YjNhOWFhNmYyMzY4ZTZlZWI0YmZjZDE2Nzk1
M2E1ZTkwHhcNMjYwNDE3MDUwMTA4WhcNMjYwNDE4MDUwMTA4WjAzMTEwLwYDVQQD
Eyg5ZWE5ZDkwNmVlMDdkNzc5ZDg2ZmZkYTIyMjA2YzgzYTZkZjM4YjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpBDOfS9GUTg1KwKQNC/lF8gzxvC
G3hws3WsekZClmT6+GDTp2WC+NScbLahToO93R33RIFDQ05hTWRtnkOo3SAyBT/t
sPi7RJa/8TX5U+66V/V/hPj1TOAxrhcJBdecTGEdsuYS5NkBQuKIo4iGT22Opvgv
gGOf7+cFNQCmU5WiZEmz2ylE5O9mf7oPOyhD1CqhrxZWxGycGBiEqjv/6sMY5Hy1
tCN2Vi2uw/JzReh9A6tQqg4q31v9NFrWqfXrL5Ys/6+RmThwJKQ+szBiZ08WIhA6
5abP3WbXUfzThb8z1Pc7BeOMXsumrp7VvVn0nGAtXkipdxe1hhCZC/CeBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6p2QbuB9d52G/9oiIGyDpt84spMB8GA1UdIwQY
MBaAFPVrIEmzqapvI2jm7rS/zRZ5U6XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEt
MjQwMWI3NDIwNmYzLzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEtMjQwMWI3NDIwNmYz
LzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArb5mZL+x
BwOZ27mgOl0KobJtI1FCdIPwTe6Y9WRi+v3SpAVFTo1YAqTpYlzVBgsV/NIunCY6
dCHFP0B4cQgEWzLERaX0SCso/j4xru60VApXWgyGrDXj8hEea4SttjUQvRcndBqS
daJnVr139XqVrpBVzaBo6ECBf5CF6CpAS47srriTvjQH455EdqYnzFTTEk77Sj1K
UgkpdTlp8d4YJUKcohblIehx4t+eWr1zjLlhr6Eauc3MmjkNC1xifGaM87x+/4VG
IiVzbuLJo6wMUw45eoarCafQ3GpEyOHQkuu/B2KQCn9HoTD0+DrwptxRLU6jo5Eq
pEb+KNf2TgE6nw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:53 2026 by rpki-client