Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
File: 9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json)
Hash identifier: v2En9N7mXpFv7C4opwdBm4G1X8EtGrvYBf2e9aQnkmU=
Subject key identifier: C8:F6:6E:EB:1A:05:97:42:45:4E:DE:52:5B:F8:01:75:F1:8C:8B:89
Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
Certificate issuer: /CN=f67d67da8860b8322c4f204d611b006138f1b391
Certificate serial: 019D9998FC07A13F10C2DA7C9FE6EDF10EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
Manifest number: 05C0
Signing time: Fri 17 Apr 2026 04:00:32 +0000
Manifest this update: Fri 17 Apr 2026 04:00:32 +0000
Manifest next update: Sat 18 Apr 2026 04:00:32 +0000
Files and hashes: 1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: mQMvSDqCZLMvDgZ+0qXwwlkyVNQPEWSOQhattj4inKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:fc:07:a1:3f:10:c2:da:7c:9f:e6:ed:f1:0e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391
Validity
Not Before: Apr 17 04:00:32 2026 GMT
Not After : Apr 18 04:00:32 2026 GMT
Subject: CN=c8f66eeb1a059742454ede525bf80175f18c8b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:e4:23:14:cd:23:bb:df:c4:ae:c4:59:30:
99:da:2e:74:27:02:18:13:c0:38:b5:9b:05:d1:53:
16:c9:e2:01:e2:69:89:0c:4c:05:98:87:3a:fa:7f:
cb:89:b0:f5:7e:c5:b4:d4:ea:70:2f:56:4d:d0:80:
24:9a:b1:6f:8d:73:0d:e4:15:ac:f3:fa:81:72:6b:
61:2e:7f:f0:86:98:86:f3:4c:0a:4b:08:d9:27:d7:
e2:3c:6b:10:f6:7d:3f:a7:43:79:f3:ad:d4:c3:a5:
8c:91:a6:b7:86:43:4e:a0:16:8b:2a:38:70:9c:23:
a1:0b:00:e3:cd:17:fb:f9:bd:c1:9c:13:eb:c0:10:
69:f1:de:e0:88:5a:b1:9d:08:62:76:f7:eb:68:e7:
14:86:b6:65:e2:81:9f:e0:8e:c5:df:9f:4d:33:81:
9d:13:77:c8:c5:61:40:da:09:71:e0:2b:a5:11:48:
68:ac:98:76:2c:d1:a0:d8:f4:a7:ea:92:de:8d:fa:
78:a0:73:01:2f:62:3f:4c:46:68:42:98:d0:55:13:
3e:83:65:7b:4d:45:8a:95:0b:6f:89:85:9f:a3:c9:
e7:5d:df:a5:33:b0:02:04:c7:5e:8e:87:18:5f:3b:
1a:9b:88:ac:fc:17:61:67:8b:38:8b:bf:9e:51:31:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F6:6E:EB:1A:05:97:42:45:4E:DE:52:5B:F8:01:75:F1:8C:8B:89
X509v3 Authority Key Identifier:
keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5f:d3:7e:d3:92:0f:19:c9:d7:b2:b1:ac:aa:1b:96:ed:ab:
6e:0b:d0:fb:8f:0f:15:19:25:d2:c7:ec:37:b8:02:8c:8b:30:
65:d5:a4:05:e4:6b:13:98:d0:07:24:da:83:ea:a9:d2:e6:ee:
f9:99:d4:eb:0d:37:0b:d0:8e:ec:ca:6a:c8:50:3e:ec:f5:6d:
c2:ac:36:9b:2d:b3:1e:b1:6b:ac:7f:49:c7:54:a4:f1:33:1f:
86:fa:10:82:2a:cf:f5:ba:08:90:03:a4:7a:00:70:de:a6:10:
57:63:e3:ac:80:f5:09:57:50:28:0c:54:ee:17:f5:6b:45:d4:
04:66:fb:51:44:d5:ae:a9:b1:b3:46:8d:3f:50:ae:c3:dc:33:
d1:b9:74:29:7a:3a:8a:1d:34:a9:eb:90:04:2f:33:21:6a:b8:
86:f7:bf:5c:f6:7d:4c:5d:47:17:c9:ea:b9:a9:6e:c0:54:13:
0d:24:f7:94:63:67:c8:ff:3b:89:99:b6:d0:d4:4f:85:bd:42:
fa:27:2a:87:dd:53:bb:26:da:3d:06:07:28:ec:19:56:69:f9:
8a:fe:f7:10:7c:e5:83:1c:91:f7:57:4d:50:85:e5:66:bc:bd:
ca:72:64:36:9b:8d:2f:c1:2b:81:50:56:18:af:fb:54:4e:b3:
ed:97:14:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:38 2026 by rpki-client