Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File: 9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier: MBv1MVQX6+znD1pfkinhRwqm8n7seuVO188AWwchuJI=
Subject key identifier: E4:5E:E9:75:95:A7:C8:FB:27:B2:D6:28:BF:5C:DE:47:DE:56:26:7F
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer: /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial: 019D9B19AB81478CC7A55DFF6BF990BD2818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 11:00:43 +0000
Manifest this update: Fri 17 Apr 2026 11:00:43 +0000
Manifest next update: Sat 18 Apr 2026 11:00:43 +0000
Files and hashes: 1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: GPwB+Ttfal4jiOqVbWrC4EOR5inxcAFSKo96DdisV48=)
2: GNmi18wQl4vtlo-9lVpDdUD44U8.roa (hash: PX3LxFRdOujIRS22JaSLS22PgqGNSnD4VtofU70m2Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:ab:81:47:8c:c7:a5:5d:ff:6b:f9:90:bd:28:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
Validity
Not Before: Apr 17 11:00:43 2026 GMT
Not After : Apr 18 11:00:43 2026 GMT
Subject: CN=e45ee97595a7c8fb27b2d628bf5cde47de56267f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:81:ad:97:08:50:d4:96:e5:4a:94:94:0d:df:
ee:c1:93:2b:cd:96:e4:89:90:f9:d9:8f:7c:1a:3f:
8a:29:fa:23:54:21:9f:64:54:0d:a4:6d:d3:b5:3e:
15:89:7a:c5:cc:41:07:0c:4d:83:b5:61:19:85:78:
f9:3a:8a:d9:04:3e:25:90:55:09:9a:8a:3c:d4:5d:
18:b2:25:cf:f5:4a:20:d1:81:f7:9e:7c:42:12:00:
ea:88:69:11:f2:d9:bf:ab:bb:0d:3e:93:6f:b0:a3:
d5:ae:40:ac:f2:57:d8:13:4b:f5:11:f8:6b:a2:58:
1c:ba:3b:68:fe:b7:98:45:a9:d2:86:36:0a:64:ce:
9e:51:e4:57:15:3f:cf:a8:f7:62:37:8c:73:45:83:
f3:d2:06:fa:7a:71:c6:48:1a:4b:b2:dc:4a:e3:4c:
38:5d:c6:16:37:a6:46:e7:d5:39:15:a0:5c:06:98:
5e:9e:08:90:24:0c:9c:34:0f:e5:e5:2d:64:04:73:
10:9c:8e:38:b1:93:38:a6:47:86:23:52:e8:42:13:
2b:e9:70:30:8c:91:87:a6:d0:0b:ad:f5:d5:31:a6:
63:0e:62:79:bb:51:12:4c:2e:0c:41:b9:60:af:0e:
0e:eb:b3:03:f3:5e:ca:c8:06:1a:44:c6:0b:ef:a1:
90:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5E:E9:75:95:A7:C8:FB:27:B2:D6:28:BF:5C:DE:47:DE:56:26:7F
X509v3 Authority Key Identifier:
keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:08:19:4e:fe:a3:95:52:a5:86:d0:bd:57:1f:7d:95:15:41:
92:e9:da:53:05:bc:16:22:0f:7b:bb:aa:6f:75:ac:dc:2e:ca:
9b:8a:46:d9:d6:ad:01:44:19:f6:09:47:99:b2:de:27:80:74:
51:7d:75:ab:8f:4e:76:da:40:76:28:b6:f2:1a:34:da:45:f8:
24:e3:c7:b1:e4:87:d1:e4:52:4d:c5:b2:f7:bd:93:37:df:c9:
95:15:35:5b:19:a6:70:ca:21:83:c8:d1:d0:58:f3:12:62:a9:
bd:c4:09:2c:88:fd:d0:2b:66:6f:15:0b:83:30:47:20:7f:39:
8a:21:e1:16:67:df:93:ba:9f:cd:57:10:ce:44:40:8d:b6:7f:
5d:f6:26:ad:c1:5c:92:10:a0:2b:ec:ca:2f:91:1e:68:fe:8e:
de:a5:f0:88:c8:87:af:17:d0:90:25:5a:2e:46:58:f8:56:f3:
1a:23:e7:b9:49:33:03:ab:d6:58:ad:24:a6:2a:16:2c:ac:68:
1f:92:d1:a8:bb:02:37:ac:9e:d7:55:dd:b4:d4:84:20:73:af:
05:1d:e4:7d:10:8b:f7:91:f9:44:a8:da:7a:28:e6:33:02:98:
15:7a:b6:98:00:47:38:dc:c1:40:bc:c9:63:aa:81:97:35:27:
cb:ff:da:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGauBR4zHpV3/a/mQvSgYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0N2QwMzM3N2NjMTA4ZjQ0MDkxMjZiOWEwYzIwMTYzMjQy
MWM2NGEwHhcNMjYwNDE3MTEwMDQzWhcNMjYwNDE4MTEwMDQzWjAzMTEwLwYDVQQD
EyhlNDVlZTk3NTk1YTdjOGZiMjdiMmQ2MjhiZjVjZGU0N2RlNTYyNjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4GtlwhQ1JblSpSUDd/uwZMrzZbk
iZD52Y98Gj+KKfojVCGfZFQNpG3TtT4ViXrFzEEHDE2DtWEZhXj5OorZBD4lkFUJ
moo81F0YsiXP9Uog0YH3nnxCEgDqiGkR8tm/q7sNPpNvsKPVrkCs8lfYE0v1Efhr
olgcujto/reYRanShjYKZM6eUeRXFT/PqPdiN4xzRYPz0gb6enHGSBpLstxK40w4
XcYWN6ZG59U5FaBcBphengiQJAycNA/l5S1kBHMQnI44sZM4pkeGI1LoQhMr6XAw
jJGHptALrfXVMaZjDmJ5u1ESTC4MQblgrw4O67MD817KyAYaRMYL76GQpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORe6XWVp8j7J7LWKL9c3kfeViZ/MB8GA1UdIwQY
MBaAFPR9Azd8wQj0QJEmuaDCAWMkIcZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUgwRE4zekJDUFJBa1NhNW9NSUJZeVFoeGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YmM0NjktZjdlMy00MGM0LWFmYzgt
ZTFkMGZkZDViZmY1LzEvOUgwRE4zekJDUFJBa1NhNW9NSUJZeVFoeGtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84YmM0NjktZjdlMy00MGM0LWFmYzgtZTFkMGZkZDViZmY1
LzEvOUgwRE4zekJDUFJBa1NhNW9NSUJZeVFoeGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAgZTv6j
lVKlhtC9Vx99lRVBkunaUwW8FiIPe7uqb3Ws3C7Km4pG2datAUQZ9glHmbLeJ4B0
UX11q49OdtpAdii28ho02kX4JOPHseSH0eRSTcWy972TN9/JlRU1WxmmcMohg8jR
0FjzEmKpvcQJLIj90CtmbxULgzBHIH85iiHhFmffk7qfzVcQzkRAjbZ/XfYmrcFc
khCgK+zKL5EeaP6O3qXwiMiHrxfQkCVaLkZY+FbzGiPnuUkzA6vWWK0kpioWLKxo
H5LRqLsCN6ye11XdtNSEIHOvBR3kfRCL95H5RKjaeijmMwKYFXq2mABHONzBQLzJ
Y6qBlzUny//a+g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:57:12 2026 by rpki-client