Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier: nN+8/Vu5aA24/wH+DdQEBLnvtXQ1XUpT79JjCz782zY=
Subject key identifier: CF:B6:B6:15:09:7C:A8:A8:1D:EE:FD:D6:CB:03:CA:82:DC:DB:FD:3A
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 019D9B875797C899FEDB426CB9A5AA1CBDE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number: 18D7
Signing time: Fri 17 Apr 2026 13:00:31 +0000
Manifest this update: Fri 17 Apr 2026 13:00:31 +0000
Manifest next update: Sat 18 Apr 2026 13:00:31 +0000
Files and hashes: 1: _Hegz1VVkQxT8dMR4TPbzXidnGo.roa (hash: wCUCX/ENynsQM4yWKSMGJBVSMGdPMxR8qubJ5kFNMNc=)
2: rBaBGD3me64LECmMKa6dKRV8Yy0.roa (hash: K+BptzFvZJeOeMKzMOMTcV3487VC0j+Wsdpi6o13OCY=)
3: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: 4Z2TXNeKzrBt+QzMfBin1uYOg/c3cPEVXY2Zq+1Rp1I=)
4: vvTAvxdhx3NqRY7Mg6sIRjTavUM.asa (hash: B0okjC7PiUjc05N96TAWbJ82kV+SDnSQSBLWFMRkR/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:57:97:c8:99:fe:db:42:6c:b9:a5:aa:1c:bd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Apr 17 13:00:31 2026 GMT
Not After : Apr 18 13:00:31 2026 GMT
Subject: CN=cfb6b615097ca8a81deefdd6cb03ca82dcdbfd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:44:36:71:f5:6c:9b:b7:db:11:ca:c5:e2:db:
55:6c:1d:29:b1:69:0d:1a:ad:c8:5f:01:7c:1d:4d:
92:bb:4a:5b:8b:44:96:ad:c6:1d:33:cc:ca:d4:82:
80:96:b2:96:97:ff:99:54:16:d2:97:8c:f4:c7:b9:
48:86:90:b9:eb:89:16:da:04:a9:bb:71:f4:ac:e6:
90:3c:3e:1d:b9:20:13:ce:7c:2c:6e:c3:50:c4:ba:
c5:4b:0e:21:9a:82:c8:1d:3c:f2:31:dd:9b:5b:09:
ab:86:f6:1b:3e:8b:fc:9f:7b:20:7a:de:48:91:04:
40:c3:35:25:61:93:96:99:a1:7e:3f:b5:f1:ec:c9:
68:80:3e:1d:12:2d:d3:18:e4:b2:2e:d6:ee:db:d9:
6f:22:b2:50:d5:bf:5b:5f:40:80:f3:97:e6:f5:7e:
be:74:6f:21:78:60:54:7c:74:f9:9d:53:43:4d:63:
bc:4e:19:a5:6f:e8:39:e9:90:fb:4c:52:c4:ef:5b:
03:92:fb:3c:e7:e6:67:50:9b:0f:98:91:19:9c:79:
85:7e:81:4b:9c:f4:10:16:df:8c:97:62:9c:ad:a4:
5d:cc:de:4a:df:1a:7e:5b:c2:3a:31:e0:5e:88:37:
0d:49:b9:c3:31:29:df:b0:58:c7:d1:e0:92:df:c0:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B6:B6:15:09:7C:A8:A8:1D:EE:FD:D6:CB:03:CA:82:DC:DB:FD:3A
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:86:ed:2c:cf:70:67:25:6e:d7:02:8f:52:bb:6a:fc:a9:71:
42:93:0f:d3:77:ce:33:36:c6:08:0c:56:f4:ad:d5:f4:64:ec:
83:d9:34:d2:ee:b6:f4:8b:27:75:6e:fa:16:df:3b:c0:70:26:
de:d6:e7:b7:0b:98:19:15:30:3f:92:c3:6a:06:9b:de:30:17:
9e:90:68:0d:18:2b:af:c5:3d:fa:87:31:63:cf:6b:c7:ea:92:
ea:3c:62:e9:30:b9:31:ea:1b:e0:7a:a9:2b:bd:f6:8e:3f:71:
90:58:10:16:a1:24:98:c0:e7:fc:1d:6e:09:2a:3d:70:ed:4c:
26:6f:66:b2:65:1d:b7:e9:d0:49:d3:86:bd:7f:ff:73:30:2d:
fb:74:c5:b3:29:8d:01:39:ab:62:6b:3f:dc:76:f1:ef:05:da:
4c:33:bd:fd:8e:6a:73:b7:f8:26:05:3c:d1:28:de:a4:a4:c5:
f2:00:8d:31:00:ac:3f:eb:2d:90:97:51:35:15:4c:5e:06:05:
01:cd:b7:40:98:da:6d:a5:55:8a:dc:46:91:39:5c:2f:00:c8:
fb:ac:66:4d:be:a4:b6:99:9c:f8:bf:70:e5:c6:a8:01:9c:b3:
d2:8b:2d:9c:45:b0:70:5d:e3:1a:79:b4:e2:bd:ca:58:81:13:
bc:3f:13:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:20:13 2026 by rpki-client