Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
File: S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft (raw, json)
Hash identifier: /MKc1FKv0UhiBgPe7tHV9Nzs2eriDdtogqsVHmWjd9U=
Subject key identifier: 50:CB:8D:2F:64:D0:0A:54:F8:83:54:8D:57:BD:3F:E9:93:C0:7F:85
Authority key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
Certificate issuer: /CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Certificate serial: 019D99D0080AB36D1624E2E9E343B81BDA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
Manifest number: 1431
Signing time: Fri 17 Apr 2026 05:00:40 +0000
Manifest this update: Fri 17 Apr 2026 05:00:40 +0000
Manifest next update: Sat 18 Apr 2026 05:00:40 +0000
Files and hashes: 1: S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl (hash: On3Kcryvp5u0dHzABEo5DNqTo+2IzzmC9JSI/kKhCAQ=)
2: WSR87e3Ee1tCNbfum8rM02_xB8c.roa (hash: qVtjtU8RmU9TX2RXNkWcIFQwTFAnao/WjTXbBMNqj5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:08:0a:b3:6d:16:24:e2:e9:e3:43:b8:1b:da:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Validity
Not Before: Apr 17 05:00:40 2026 GMT
Not After : Apr 18 05:00:40 2026 GMT
Subject: CN=50cb8d2f64d00a54f883548d57bd3fe993c07f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:b6:16:c0:44:c1:6c:27:03:aa:f3:8a:3c:
f2:51:58:36:6c:ba:a7:1b:c3:df:a8:62:4a:8d:e4:
7e:15:81:9c:d8:ad:f1:12:0c:6f:fb:27:ac:d8:b6:
0e:a1:68:42:0b:65:4e:f2:54:de:18:28:2c:73:be:
d8:6f:48:34:5d:4a:99:cb:1e:f0:80:ba:20:97:84:
99:a6:4f:40:70:55:bf:0f:a4:fb:93:5e:b9:f1:31:
0a:c7:c2:4d:2b:c0:27:fa:3b:e5:4b:fd:66:0b:46:
0c:5c:80:e6:2d:16:d1:74:b0:94:2a:d6:1c:f2:85:
ea:5e:15:23:97:85:f2:50:86:87:10:f1:85:24:ee:
1d:75:35:98:5e:2c:f0:0f:f1:85:71:ec:2d:0d:bb:
3b:54:7b:7d:98:23:3a:c6:6f:a4:ad:13:96:ad:a2:
c5:0e:b1:95:80:b1:18:a8:ae:3e:bc:e6:fe:1f:79:
44:e7:57:6e:1b:5c:af:ed:f5:9d:de:8e:fc:8f:44:
84:b5:c5:2c:ca:19:4b:52:0a:0a:30:d6:30:d7:fd:
ae:14:73:60:64:c0:27:f7:65:d1:23:54:0c:20:1b:
49:1f:0b:5e:3d:1d:27:e4:cf:98:f0:64:e1:8b:c5:
82:83:2e:4b:29:e9:4d:2f:6d:36:d2:e4:a7:8f:12:
0f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CB:8D:2F:64:D0:0A:54:F8:83:54:8D:57:BD:3F:E9:93:C0:7F:85
X509v3 Authority Key Identifier:
keyid:4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:33:a2:f1:ab:2d:e3:ad:d0:b8:11:e0:1e:67:23:fc:65:95:
c0:64:d6:a4:81:c1:39:2c:3a:97:69:95:36:2a:03:65:28:fc:
b8:e2:f0:a7:8f:7c:f4:49:a5:69:6b:de:19:5f:b9:89:44:4e:
f9:38:69:19:ce:65:3b:3e:a4:5c:d3:20:2d:af:43:f0:49:2f:
a9:ec:4e:d7:cc:8e:36:f0:8b:ec:04:ee:1c:37:c4:fd:1d:0e:
09:da:eb:04:bf:7a:f5:30:dd:43:c1:d3:2b:a8:70:86:47:2c:
56:9b:c5:3e:0e:cf:a5:54:44:7f:3b:2a:a2:75:f9:89:09:18:
a4:6d:1b:2c:44:34:a3:49:d7:30:f7:17:64:7c:9d:43:e5:1b:
ba:5f:f6:4b:09:64:28:93:36:24:91:c5:ed:9e:04:76:31:aa:
9a:10:ef:37:15:8d:80:3b:7e:93:97:fd:80:c0:0c:0d:50:c0:
ec:3b:bf:49:1d:33:60:51:fc:97:97:69:fb:8a:94:6b:b8:78:
20:2c:aa:b4:1f:83:0d:d9:85:33:ff:23:34:ca:1c:f0:81:cf:
7f:3a:6f:eb:ac:ad:29:26:bb:2e:f0:c8:00:80:f2:ed:34:80:
ac:73:df:5a:d4:44:94:41:17:56:44:d8:47:e1:7d:d5:fb:24:
06:48:c4:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0AgKs20WJOLp40O4G9pXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDFmNTBkZjI2M2ZlNTA5ZmM1ZGU5YzVhNDczYTI4ZTM4
MTI2MzkwHhcNMjYwNDE3MDUwMDQwWhcNMjYwNDE4MDUwMDQwWjAzMTEwLwYDVQQD
Eyg1MGNiOGQyZjY0ZDAwYTU0Zjg4MzU0OGQ1N2JkM2ZlOTkzYzA3Zjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEa2FsBEwWwnA6rzijzyUVg2bLqn
G8PfqGJKjeR+FYGc2K3xEgxv+yes2LYOoWhCC2VO8lTeGCgsc77Yb0g0XUqZyx7w
gLogl4SZpk9AcFW/D6T7k1658TEKx8JNK8An+jvlS/1mC0YMXIDmLRbRdLCUKtYc
8oXqXhUjl4XyUIaHEPGFJO4ddTWYXizwD/GFcewtDbs7VHt9mCM6xm+krROWraLF
DrGVgLEYqK4+vOb+H3lE51duG1yv7fWd3o78j0SEtcUsyhlLUgoKMNYw1/2uFHNg
ZMAn92XRI1QMIBtJHwtePR0n5M+Y8GThi8WCgy5LKelNL2020uSnjxIP+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDLjS9k0ApU+INUjVe9P+mTwH+FMB8GA1UdIwQY
MBaAFEvR9Q3yY/5Qn8XenFpHOijjgSY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlIMURmSmpfbENmeGQ2Y1drYzZLT09CSmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZDIwYTItYjg4MS00NjFjLWJiZjUt
MmI2ODA5MzM5NzAyLzEvUzlIMURmSmpfbENmeGQ2Y1drYzZLT09CSmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83ZDIwYTItYjg4MS00NjFjLWJiZjUtMmI2ODA5MzM5NzAy
LzEvUzlIMURmSmpfbENmeGQ2Y1drYzZLT09CSmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjOi8ast
463QuBHgHmcj/GWVwGTWpIHBOSw6l2mVNioDZSj8uOLwp4989EmlaWveGV+5iURO
+ThpGc5lOz6kXNMgLa9D8EkvqexO18yONvCL7ATuHDfE/R0OCdrrBL969TDdQ8HT
K6hwhkcsVpvFPg7PpVREfzsqonX5iQkYpG0bLEQ0o0nXMPcXZHydQ+Ubul/2Swlk
KJM2JJHF7Z4EdjGqmhDvNxWNgDt+k5f9gMAMDVDA7Du/SR0zYFH8l5dp+4qUa7h4
ICyqtB+DDdmFM/8jNMoc8IHPfzpv66ytKSa7LvDIAIDy7TSArHPfWtRElEEXVkTY
R+F91fskBkjEfg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:42 2026 by rpki-client