Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
File: i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft (raw, json)
Hash identifier: sNqVjddIOK74DI/Hctld1YhCanAR/ITxZ7lsdPD3QwU=
Subject key identifier: 8D:F4:3A:C8:F1:03:1C:17:9E:41:9B:C2:03:51:81:20:B0:40:6A:B2
Authority key identifier: 8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24
Certificate issuer: /CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
Certificate serial: 019D9A3F0A3DA033809E743E8FE7C065641C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
Manifest number: 0D99
Signing time: Fri 17 Apr 2026 07:01:55 +0000
Manifest this update: Fri 17 Apr 2026 07:01:55 +0000
Manifest next update: Sat 18 Apr 2026 07:01:55 +0000
Files and hashes: 1: i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl (hash: 4p3m54RWF6waBoiEYcvYjHKCcvanvn2tZQssYj4I6Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:0a:3d:a0:33:80:9e:74:3e:8f:e7:c0:65:64:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
Validity
Not Before: Apr 17 07:01:55 2026 GMT
Not After : Apr 18 07:01:55 2026 GMT
Subject: CN=8df43ac8f1031c179e419bc203518120b0406ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:ac:61:1d:ac:3d:b0:c1:62:48:48:ee:fc:
df:f7:60:6c:34:13:1c:02:3c:cf:5f:8e:f1:60:3e:
36:2e:82:ba:d1:d5:3a:32:c8:32:b6:c7:c9:bf:9f:
eb:d2:b3:c5:d6:d6:c5:f8:54:da:fd:1c:67:d0:f5:
a7:1d:8a:c0:9d:8c:5f:65:03:5d:35:5f:90:71:61:
f8:8b:94:39:fb:45:37:8a:71:13:50:d0:e1:80:5a:
67:7e:3e:83:f5:58:07:d4:0c:7c:e0:62:a9:a0:c5:
98:45:08:28:9c:62:2b:df:7d:4c:e5:ad:c5:29:bd:
4f:a9:bd:74:5f:1f:bf:6f:35:60:fd:31:7b:0d:68:
40:c1:12:23:cb:1e:fa:d2:94:53:17:a3:52:51:dd:
d0:c1:00:f4:43:9c:0a:a2:62:49:a0:71:26:b9:cd:
d5:fa:d3:ef:e4:b5:80:cb:41:ed:70:8c:f3:10:7f:
c6:86:7c:8e:05:7e:e5:89:dc:51:96:d1:fa:67:9f:
bd:f2:b9:08:0e:b1:f7:d0:52:a1:bf:40:dc:bf:d7:
3e:de:b0:4f:94:b3:b0:9a:19:e6:01:ea:09:79:b6:
55:55:23:82:96:45:63:a3:53:af:66:98:ae:b4:04:
86:ab:c1:70:9b:c2:d7:9e:eb:2d:40:b0:84:37:7b:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F4:3A:C8:F1:03:1C:17:9E:41:9B:C2:03:51:81:20:B0:40:6A:B2
X509v3 Authority Key Identifier:
keyid:8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7c:0c:6b:3e:dc:23:e5:18:48:93:f3:1c:1f:6b:1e:0e:b0:
d4:da:b9:ef:7b:69:c0:b2:1a:0a:77:e2:f4:0f:07:5b:0a:24:
40:81:7a:b8:36:f0:70:60:c6:b1:ad:b3:5c:75:90:6a:11:29:
a0:44:df:3e:b2:37:84:bb:55:b0:a2:20:b8:3e:00:13:b7:d0:
2b:99:4a:cd:18:e3:3f:da:24:7c:cd:98:be:40:3d:e4:46:8b:
77:2d:71:b9:75:dd:8a:9e:4d:45:40:d6:d8:cf:b1:80:9c:dd:
64:79:a2:65:44:c9:9a:23:1f:cf:6c:9d:7a:0f:8e:31:a6:bd:
bc:08:11:ac:2b:bf:af:b0:fc:91:1a:a3:7c:7a:4a:af:f2:9b:
9f:10:4e:69:77:ec:7b:29:8e:79:5d:d9:5d:0d:81:ba:1d:7a:
47:59:6f:a2:b8:46:f0:35:ad:ba:94:c8:ce:40:ab:12:ca:84:
57:52:fa:03:a4:13:17:77:ac:6f:07:74:6e:ba:ee:fb:86:9d:
18:7e:12:b3:0e:dc:5c:41:4f:30:f7:90:5d:78:97:ce:2c:cb:
17:8f:2f:a3:19:b9:d1:0a:1e:e3:d4:63:f7:1c:a6:77:98:03:
94:64:be:73:d1:03:ed:56:52:5a:8e:bc:a1:db:ff:04:d4:ff:
34:89:07:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:37:56 2026 by rpki-client