Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json)
Hash identifier: 2f4r3j9O7wTd7jVjukVD7e0fhWqBhYo5b8RcxikayLU=
Subject key identifier: BC:91:23:99:04:82:DA:25:B8:11:30:B4:73:86:A0:68:BD:98:41:1F
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 019D9A3EBE689701926B733D7B19AF356407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 07:01:36 +0000
Manifest this update: Fri 17 Apr 2026 07:01:36 +0000
Manifest next update: Sat 18 Apr 2026 07:01:36 +0000
Files and hashes: 1: 1pNjMggR1gYBaftihFMx8w1rMhE.roa (hash: PULZtkL3C3zDaM8kMCwf21Yb0UEXTXjrHY8fh/1iHFc=)
2: BH6ERj2EK1Gwrfo5u9qhco6CgYM.roa (hash: HBZO37pz26No65orIL67yFB8MvBngZCIHxDCzlTkjJc=)
3: C-hiHL_GzbD5a_s8Sar_hmP-Vyw.roa (hash: hyN/ftVawg2QF6kkYn1VlnFyi9JVIm7PN5l5sJloEAU=)
4: Wc1vP6_SY_r3YRWRNCEYvgmMIEU.roa (hash: DTSBhlEZWBIgKWeFJQfKtS9sYqKdFbuY0AXldEHxAZ4=)
5: eo5H4o3ZZ3iXbDapo6cBEE7NS6M.roa (hash: X2Eq1j8xxP8127RbRQQH82ZQaRO794u+GIRwZ/G/1eM=)
6: mK3OtIQBuc5E_Igw6gzRMSv2d3c.roa (hash: DMwAvTUmsGM0zrMHUTJobXjFU2+cLUzH4tvhaMwkiwc=)
7: nUVyELULlyE5fyAdMqySIUcD1Kg.roa (hash: 7IAppAs9x9RzUF7a3+rIPbPjrq3AFXyVcrF/g7C0QPU=)
8: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: xiC2ox1aXRupVabG4DVqxmSyHgrWcmrTMatd222xroM=)
9: taXjOwEPFjUj9cMa7Gq70xb_Xw8.roa (hash: amO1PgtWxEDUcYd/ZIcEzv+wLt54N13hJwoq+TKEsJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:be:68:97:01:92:6b:73:3d:7b:19:af:35:64:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Apr 17 07:01:36 2026 GMT
Not After : Apr 18 07:01:36 2026 GMT
Subject: CN=bc9123990482da25b81130b47386a068bd98411f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:f3:07:63:52:ca:b0:3c:91:24:d7:aa:9b:
bb:c1:19:60:c7:61:5c:6e:e6:90:51:ac:56:a9:c4:
04:04:2f:86:3d:5e:99:36:e1:4e:5e:b7:d8:a9:43:
e6:2d:80:94:00:7c:e5:0f:9c:7b:a5:41:bf:d0:17:
9c:83:f5:93:69:15:db:40:49:54:95:a8:f7:74:cb:
a1:36:3f:2f:ca:90:36:95:88:f8:0e:b7:56:5e:33:
ea:b1:6c:5f:a6:78:fd:b0:4d:3c:95:cc:35:4a:3f:
77:12:36:a1:1a:c3:74:25:92:f5:c0:5c:81:96:95:
8a:04:1c:8f:b2:1d:63:5a:df:90:57:5c:7b:f4:27:
4d:b5:2f:8e:ac:9c:50:47:3d:96:d7:7c:f5:b9:23:
5b:ef:21:64:42:15:1c:8b:79:d2:08:2f:b6:71:7e:
cb:ff:b2:12:ce:52:53:6f:62:70:5c:55:06:1b:d6:
83:85:84:b3:9c:23:cf:f2:99:b9:7d:48:61:0a:dc:
8a:02:ad:af:09:34:cd:2a:1d:9a:d4:62:d1:03:8d:
46:b6:6b:15:97:5b:8b:37:b0:2f:47:5c:45:fc:f2:
d9:5e:d8:52:fe:97:7f:40:e2:75:00:b5:66:19:41:
f7:dc:da:85:b7:b2:e3:08:41:ee:2d:a1:a7:a1:e9:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:91:23:99:04:82:DA:25:B8:11:30:B4:73:86:A0:68:BD:98:41:1F
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e4:4a:e8:41:f5:74:88:92:4f:2c:ed:02:9b:77:57:9a:03:
04:3f:92:dc:17:ac:52:76:27:bf:cb:22:e5:88:bc:df:8c:2f:
e8:5a:23:a7:6c:59:dc:c7:cd:d8:52:ee:fc:6d:cb:91:22:51:
4c:c6:c3:25:9d:68:09:b4:b2:0e:a4:aa:1a:69:31:d0:c9:32:
4a:10:76:86:4a:1e:f2:61:5f:87:43:8d:8e:2d:fc:09:45:f1:
60:d9:9b:f0:dc:01:d0:65:60:b7:66:ff:50:67:08:c3:33:2c:
5b:ca:30:af:c2:8f:a5:24:76:22:e2:fc:a9:a9:d7:c4:e7:4f:
00:29:16:5a:2a:2d:61:c0:e6:29:d2:42:4b:78:8a:e6:32:b7:
2b:d4:49:58:c0:29:d7:10:90:d7:73:a2:02:92:10:a8:fa:a0:
a2:a8:d2:1e:9e:18:5b:4e:6f:5b:b9:57:cc:88:ef:70:42:0b:
ca:35:86:da:fc:46:c3:af:23:b5:cc:4d:8b:1d:a5:f6:4f:06:
c4:65:03:7b:4e:2c:da:3c:9c:2b:b6:e5:9f:e7:61:6e:fc:28:
1a:bd:95:9f:59:94:8a:86:09:03:6b:2b:19:50:8f:32:ae:99:
27:ae:b4:34:d3:cc:da:b8:97:91:25:20:32:00:54:48:bb:d3:
4e:83:55:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:57 2026 by rpki-client