Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier: Nnah9cs3Pz3QZYKrBaRPkZWdMGZicW+5L9hWsTLY5lg=
Subject key identifier: E5:CE:6E:A5:FD:06:50:E4:D3:0E:49:FF:67:71:A0:A7:BC:E0:BA:D7
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 019D97E205EECCF7D1228AD2948EC69921FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number: 18AA
Signing time: Thu 16 Apr 2026 20:01:05 +0000
Manifest this update: Thu 16 Apr 2026 20:01:05 +0000
Manifest next update: Fri 17 Apr 2026 20:01:05 +0000
Files and hashes: 1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: glgeLblypaWZu99JH5kvTqDu4HTow3doHb/LN/+cwJY=)
2: T9rz93pJrKV5HZUDPNt-auvowcY.roa (hash: Y2TAvhfs7O4nAyyTTSyBt46eHZbCQZ13ePvrQ4ueMNo=)
3: rtoaF4eNoCfBlVaGIH3lILCxwDw.roa (hash: uP2Cltj1neggz9Zc7r+kubVviQuOHIeAbOo973WtReI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:05:ee:cc:f7:d1:22:8a:d2:94:8e:c6:99:21:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Apr 16 20:01:05 2026 GMT
Not After : Apr 17 20:01:05 2026 GMT
Subject: CN=e5ce6ea5fd0650e4d30e49ff6771a0a7bce0bad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:2a:ef:38:19:ea:5c:20:8c:67:1c:f0:77:
60:37:9d:68:af:e5:8d:e1:91:da:60:d1:bc:55:06:
ab:07:c9:e5:2f:36:45:64:1e:5a:48:b1:23:3b:d3:
56:2c:60:07:21:55:25:ac:e3:40:2a:75:dc:31:62:
cb:c2:c2:57:2e:77:dc:29:cd:a5:4f:ef:4d:d0:a5:
ef:1b:63:39:2f:b6:f6:1c:9a:cd:19:75:d4:92:2f:
dd:b1:5b:ed:69:7d:80:86:65:17:0c:34:8c:c9:33:
39:9c:8a:60:53:2f:55:e1:18:dc:b9:b9:70:ed:00:
be:e8:cc:2e:c6:e1:73:02:14:5b:05:24:75:f9:f1:
20:97:fd:40:16:5f:33:32:82:f6:72:66:60:36:4a:
07:f6:26:25:97:86:72:4e:a0:f7:5a:90:04:f9:4a:
c8:ca:cf:b6:a4:81:0a:5a:79:af:cc:8f:4a:1e:12:
f5:02:6b:85:6b:f4:ba:43:be:57:23:db:19:de:d0:
ef:1f:52:64:4f:81:f1:b5:7a:43:75:01:88:ef:e7:
b2:68:e6:31:74:5a:0e:0b:8a:f6:84:40:bc:51:f2:
e3:f8:21:61:e7:91:77:da:bb:5c:6c:c4:ff:b9:b4:
0a:a7:63:9e:5f:40:16:16:4a:55:4f:d2:d5:9d:98:
f7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CE:6E:A5:FD:06:50:E4:D3:0E:49:FF:67:71:A0:A7:BC:E0:BA:D7
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3f:f9:46:99:56:20:c4:e2:e3:15:8f:f5:90:17:40:c7:59:
5b:3f:d7:75:cf:af:83:70:62:b3:ba:69:a7:8b:79:f5:ed:b2:
63:9b:09:29:d7:af:0c:fb:93:4f:ad:c2:dd:ea:fd:ae:dc:94:
ed:c0:17:65:43:42:36:f8:b6:d7:b5:e2:8b:55:39:c7:cf:70:
0b:b6:73:67:c3:e4:f8:84:9f:8a:04:bb:0b:05:ae:c7:68:21:
e7:7d:d4:84:5a:d1:9a:72:c9:8c:58:5a:45:67:79:25:e8:b1:
dd:3b:2f:69:d3:fc:39:4d:7c:04:81:47:2f:cb:70:69:49:2b:
e2:4f:4f:6f:9b:53:6f:d6:bc:97:e5:35:5e:b8:d8:54:39:f3:
bc:16:59:49:80:85:28:ec:b9:dc:46:92:61:6c:a6:70:9d:44:
2d:21:c6:24:8f:d1:2d:a4:cf:ef:7f:64:21:7b:f2:21:34:de:
73:74:4e:18:d9:ec:d9:b0:80:3e:b8:29:41:8c:5e:cd:eb:1f:
5c:f3:31:e3:9d:f4:d0:5c:24:49:6f:78:10:a0:44:31:e9:f1:
36:92:1e:e5:fb:d0:cd:48:1d:33:31:7b:4e:5a:ef:b2:2a:68:
16:1f:14:b4:4f:76:6d:e8:4c:66:f2:ef:83:15:56:40:d9:5e:
1e:96:33:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:37:05 2026 by rpki-client