Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: rFDLjQAHN4QDmJIQ347p2ZC6u6JGnKCaL/ewQr6OoLQ=
Subject key identifier: 63:35:E8:AB:A5:47:CC:A7:E2:5E:BF:3C:32:B2:13:59:D8:D4:1F:1F
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 019D984FDA317C4F78F27955B45FEA1D69B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 18C5
Signing time: Thu 16 Apr 2026 22:01:02 +0000
Manifest this update: Thu 16 Apr 2026 22:01:02 +0000
Manifest next update: Fri 17 Apr 2026 22:01:02 +0000
Files and hashes: 1: 8gINa2lFaHAK60FtqIDDhXwZP7w.roa (hash: z1FvylnNOuEEDQQea39SZ8k3cYtqZE6bJ6wCeGonrDw=)
2: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: o042mL8exon5HWJRPZg7/vfW+1KE/IWHxdgy2EYWu1U=)
3: IbJ4yELvtm8HXdu0Yp_CCRHVlP8.asa (hash: NPCHrCQgVoOMqCSPlDc/hj6wxQzJAbSJUalGFEL7VEc=)
4: tRcrwi6Z0c7Sb0NYMrmjnVVjOto.roa (hash: unf/ZbmoQZ2C8O0WxuwscfoRSvADWqKnPxDoOQZPINs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:da:31:7c:4f:78:f2:79:55:b4:5f:ea:1d:69:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Apr 16 22:01:02 2026 GMT
Not After : Apr 17 22:01:02 2026 GMT
Subject: CN=6335e8aba547cca7e25ebf3c32b21359d8d41f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:75:b1:86:ec:39:f3:ad:6b:65:a0:84:26:
12:50:2a:f3:09:54:d8:8c:8e:02:45:2a:c1:bc:0a:
6b:96:8a:af:10:25:b4:8a:2b:8e:8c:92:21:12:dd:
4a:fc:ef:ec:e8:bb:25:07:33:1c:c9:3e:1d:c5:06:
0a:0a:df:5e:16:07:ed:36:18:86:07:33:df:80:08:
61:fe:1f:6e:9f:09:04:eb:d4:82:59:1a:ed:e0:43:
83:54:80:3b:5e:8a:b2:ab:0e:48:72:e9:d9:ae:cb:
9d:c2:76:9d:1e:9d:ba:a8:3d:fc:fc:e8:91:7a:49:
11:ff:3c:f0:d9:6b:a5:15:b8:2d:61:14:ba:e2:25:
a2:80:a1:d1:e4:90:66:0f:5c:a5:9a:70:70:6f:d8:
d8:5c:3c:08:56:1a:ad:82:34:5d:21:b2:90:62:e3:
84:ca:e2:2f:01:d9:0a:ed:5f:73:b5:31:33:f8:8d:
af:c1:5e:6e:39:3d:44:36:f9:84:b8:57:18:fc:d4:
45:9f:24:ba:0e:76:bf:96:1e:dd:c6:ba:58:bf:2e:
b5:26:f8:e8:41:5f:a9:4d:26:31:c2:1a:21:c8:8c:
1c:0c:ce:8d:ae:28:8b:38:40:99:b8:28:a7:e3:f4:
12:39:45:80:2a:ab:18:fa:43:29:02:d8:92:9b:64:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:35:E8:AB:A5:47:CC:A7:E2:5E:BF:3C:32:B2:13:59:D8:D4:1F:1F
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:43:b3:0b:12:b2:64:11:8f:19:61:42:26:e8:fb:cc:96:5d:
6f:cc:10:f8:6e:c3:58:55:e3:e4:7e:06:1d:8d:f2:45:fc:38:
e3:fa:fe:bf:cd:be:ff:63:b7:df:a8:ce:65:f7:2d:15:27:54:
52:f1:13:45:29:8b:ba:be:80:62:15:93:3b:74:63:00:50:ae:
b2:e7:72:10:66:d6:b9:8b:17:5d:f2:63:79:b9:cd:25:68:22:
eb:da:44:4b:65:40:b2:26:62:ac:55:c7:d6:11:13:a5:1f:1d:
6d:ec:05:f2:e8:b7:dd:ee:dd:b5:72:42:bb:98:db:66:c5:b2:
0d:60:d0:e5:fa:84:15:e6:e3:77:f1:a0:6b:be:3b:8e:24:57:
e8:c8:33:68:1f:02:fc:73:57:c7:d0:4e:13:15:75:11:a4:f3:
89:37:f1:1f:0d:d2:e4:a0:d8:df:23:2e:c4:b1:ad:a5:81:00:
bb:6b:88:14:1d:ab:5f:9a:c1:fd:3b:ce:20:c2:3b:4e:3b:d3:
b4:f7:54:03:5f:be:8f:a9:12:99:aa:5c:b2:2c:1f:12:df:f1:
b8:2b:06:67:22:53:b0:e5:7c:fb:bf:30:5b:c2:ba:18:22:ec:
a3:48:b3:d2:c9:e6:f2:49:6e:df:e1:fb:4f:b1:0b:86:03:01:
48:0c:3d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:49 2026 by rpki-client