Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
File: m9o0FBNxKfo4psYcSWq4thQJzgI.mft (raw, json)
Hash identifier: VPLw/NKBi5vPLAD/9WG0lGtSOSrgKkKBLl6XsDQqh5k=
Subject key identifier: 43:41:FA:34:35:7B:2D:D4:8B:2D:50:35:5F:89:66:7B:CA:68:93:D7
Authority key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
Certificate issuer: /CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Certificate serial: 019D97E21C1E090AEF05E0C7031313611DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
Manifest number: 18BF
Signing time: Thu 16 Apr 2026 20:01:11 +0000
Manifest this update: Thu 16 Apr 2026 20:01:11 +0000
Manifest next update: Fri 17 Apr 2026 20:01:11 +0000
Files and hashes: 1: m9o0FBNxKfo4psYcSWq4thQJzgI.crl (hash: 9nZOh8v5pl2iAgjSwPOW4YmxKLabZTr23c3C8KjWrVY=)
2: oNy7iyROhmf7k1QXS1fyOykVhms.roa (hash: 7ICki/NejOefHux3d5CNCzujTTJwY1H52uKM23OBmV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:1c:1e:09:0a:ef:05:e0:c7:03:13:13:61:1d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Validity
Not Before: Apr 16 20:01:11 2026 GMT
Not After : Apr 17 20:01:11 2026 GMT
Subject: CN=4341fa34357b2dd48b2d50355f89667bca6893d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:11:5e:f9:71:4c:5a:8e:ad:e0:a8:d1:aa:
26:54:3c:8a:c2:0f:12:61:4a:d2:da:60:b3:2a:36:
40:2c:47:5c:e0:bf:a6:05:05:62:d1:52:34:3e:94:
27:a3:7f:5b:a9:ff:70:ce:7d:bf:0e:bf:9c:8c:4a:
69:c3:eb:7b:aa:ec:bc:db:eb:89:76:ca:32:6e:78:
ca:4d:c5:9c:29:c7:e7:12:bb:81:91:f5:4e:7c:d2:
a2:32:fd:3f:6e:f7:95:a9:2a:a9:14:16:03:74:8f:
b0:53:93:46:8a:78:ab:12:ac:38:73:60:fa:eb:2a:
fd:a3:b1:2e:93:cd:98:18:37:17:56:00:b4:64:49:
a0:f6:ac:bc:f0:ba:c4:2b:ee:6b:d3:09:84:27:95:
34:fb:3d:48:cf:4a:41:c4:65:d1:55:fa:a0:98:d8:
48:41:4f:5d:e5:1a:a2:79:dc:77:17:1c:f7:5b:19:
bc:eb:b6:c8:57:7d:d8:ef:04:bd:c8:3f:1b:04:f5:
31:73:95:1b:d3:b4:32:69:92:50:ee:de:85:d9:6b:
ad:af:65:4d:8b:59:de:89:c0:a4:e7:4f:4e:c9:c9:
97:02:73:82:bc:0e:4d:b4:3d:43:b0:e1:31:24:26:
5a:d6:1a:b9:a5:2e:79:db:b4:0e:48:12:cd:f6:c0:
01:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:41:FA:34:35:7B:2D:D4:8B:2D:50:35:5F:89:66:7B:CA:68:93:D7
X509v3 Authority Key Identifier:
keyid:9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:05:33:ef:31:1f:38:bf:4f:53:80:b5:78:a0:b9:24:7d:8f:
a1:79:a8:42:0d:eb:23:4f:fa:26:5d:c2:c4:dd:e1:96:ab:25:
ad:d9:64:ee:d0:04:35:b7:8d:b0:91:54:73:84:7e:06:82:96:
61:cf:fa:2a:12:ac:32:8f:e7:51:90:96:b4:bf:a5:b3:e2:9a:
5d:f3:fc:fa:93:ea:09:81:f2:e6:33:6a:16:7b:f1:49:2a:06:
71:73:48:0b:2b:1d:1d:c9:45:2a:3d:48:31:ce:e2:c7:5d:42:
71:ea:5c:5d:bd:1f:96:91:17:b7:b1:8a:0c:44:27:69:b0:b7:
95:5b:71:75:e5:6b:c7:d0:81:b9:b4:e8:4b:2b:03:98:32:eb:
64:77:1d:e9:6b:29:71:56:95:f1:b8:e6:9c:0b:5c:0a:2b:69:
d5:14:4e:32:4d:b2:f5:58:9a:39:6b:ec:05:0b:b5:bd:e6:a9:
35:0d:65:1f:c0:2f:eb:3a:50:87:e6:7e:08:bb:91:45:6b:fd:
bd:56:df:56:34:83:b5:7b:e3:9f:64:bc:05:3f:4b:9c:5b:ae:
51:27:59:61:d7:b5:d6:f7:4b:71:97:55:18:38:6f:3a:ba:a9:
40:0f:1a:2b:21:df:02:e1:b1:d7:52:6c:c3:74:f9:dd:ce:a2:
99:aa:55:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:21:40 2026 by rpki-client