Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
File: 9GRgXq8UuLXSjujQdsHjc491glM.mft (raw, json)
Hash identifier: vl5MnWdlaCzd6H5hTSnv+GcsYe1tS5PJQoGzcOaK1FY=
Subject key identifier: A9:4D:AC:D4:A6:8E:45:16:F3:47:5C:03:FD:6A:72:28:34:BA:F2:E3
Authority key identifier: F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
Certificate issuer: /CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Certificate serial: 019D98BDE46B388E93F3106B3303EE078AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
Manifest number: 1380
Signing time: Fri 17 Apr 2026 00:01:14 +0000
Manifest this update: Fri 17 Apr 2026 00:01:14 +0000
Manifest next update: Sat 18 Apr 2026 00:01:14 +0000
Files and hashes: 1: 9GRgXq8UuLXSjujQdsHjc491glM.crl (hash: iMTagr8vqY8kkM7lPA3d7YT+kgqmd0IqZ6V2HTh1Gaw=)
2: bvCBuuEdxAUjZ43AaqObXsCRP24.roa (hash: +knVgbiUviDOgcpEQ9q1n1I2+704D2tY8YWzgF0kEqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:e4:6b:38:8e:93:f3:10:6b:33:03:ee:07:8a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Validity
Not Before: Apr 17 00:01:14 2026 GMT
Not After : Apr 18 00:01:14 2026 GMT
Subject: CN=a94dacd4a68e4516f3475c03fd6a722834baf2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:da:9d:21:9e:f8:f3:1c:2f:9d:1c:ab:81:
4d:71:83:aa:b1:d3:68:32:56:59:a6:e5:2d:2f:48:
10:cf:62:5c:c4:a3:9f:70:35:98:97:d3:31:a5:78:
13:68:2e:eb:c9:57:ff:3e:c4:fd:07:33:28:aa:95:
9e:ef:29:b6:83:b2:be:ec:8a:d6:cb:f5:c4:d7:7b:
4a:95:8b:4f:24:0e:c8:e4:08:0c:4e:91:ee:37:a3:
ff:a1:ed:8c:01:ae:e5:f6:47:6f:5d:41:7d:e5:c7:
4d:42:42:c9:cc:98:16:70:2f:f6:de:e6:32:31:7d:
f8:e6:5f:5a:a5:36:90:bb:b8:e8:31:f2:5d:2f:98:
b6:45:47:b1:8e:cc:f9:63:b8:77:4b:34:9e:23:5a:
24:79:4a:d6:13:6a:cc:75:94:39:82:c1:e7:f6:32:
8e:67:b2:7d:a3:52:50:9a:4f:37:2d:ad:94:da:3f:
ea:5b:c4:85:b0:69:4f:5f:50:3f:59:3f:91:e7:52:
61:de:5b:a9:ab:20:42:c6:d9:16:99:3f:b4:21:e8:
fd:7d:eb:9b:f2:94:f0:ee:28:ee:0e:16:13:77:02:
3b:20:01:3b:fa:8b:27:e0:9f:a2:1b:0a:63:7b:a4:
b1:9d:df:4f:ab:e5:30:94:e3:bc:4d:33:2e:bc:b9:
32:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4D:AC:D4:A6:8E:45:16:F3:47:5C:03:FD:6A:72:28:34:BA:F2:E3
X509v3 Authority Key Identifier:
keyid:F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:12:24:99:62:eb:f6:5c:20:3a:71:ec:1c:2a:b6:f0:2a:0d:
5b:a9:30:b1:21:70:e1:f3:f4:87:47:3f:75:ab:6a:72:3b:8b:
8f:24:c5:1d:eb:cf:dd:40:f5:10:18:14:cf:8e:0b:94:bd:9e:
fc:52:65:c4:60:55:3f:b9:ee:22:4e:2a:6d:4c:3f:67:45:9e:
8c:17:12:91:29:9a:33:24:e6:18:54:db:ab:8b:fc:50:32:f9:
6c:f4:94:2a:f9:bb:35:ca:a0:47:cf:bb:8b:81:02:70:3d:82:
15:43:62:ef:82:07:4d:99:93:0e:63:31:28:e4:6c:e5:2c:1b:
03:ee:63:b1:10:98:19:a3:72:e2:10:0e:be:aa:83:5d:33:a2:
1c:07:dd:f6:9c:c6:de:51:7f:15:2f:d0:4d:4b:50:d3:97:a3:
b5:5f:ac:89:5f:a4:98:a4:ed:a8:08:59:d5:58:cc:34:8e:3e:
20:72:14:8d:67:02:21:28:6e:01:6c:2b:62:93:da:0c:40:a2:
2e:8c:8b:f1:39:76:b1:b0:5e:b5:4c:c3:6f:40:54:42:04:d9:
47:37:9b:9f:2a:ec:45:d6:31:34:7a:46:25:14:6c:c5:5f:b0:
6d:74:52:bd:a5:10:d1:92:c8:5d:e6:39:b9:b1:a3:58:51:ce:
9a:97:ba:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:33 2026 by rpki-client