Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier: L0b4wYQRntYOvlBbLdVGp8mV3t189cMvADrdc3yfBB0=
Subject key identifier: 6C:93:76:BD:99:86:03:A7:E3:8E:66:97:F1:E0:DD:EB:49:FD:E1:ED
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 019DA4F8729FB2DFC059C5139776B3A417E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number: 09B5
Signing time: Sun 19 Apr 2026 09:00:38 +0000
Manifest this update: Sun 19 Apr 2026 09:00:38 +0000
Manifest next update: Mon 20 Apr 2026 09:00:38 +0000
Files and hashes: 1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: 1K7gr2EQj+BYHWXsZYPhnmxquv78++PDC0Ta6VEaoVQ=)
2: L2SGUtmn8iVoAZusJiJO0lWPz-c.roa (hash: tzCEkWtWLJDnUs8JcskBJsxe43rrrZgahQVNHwJxPJs=)
3: _p7le5gIIWbAoXoedbYiYmj5NdE.roa (hash: CNMW3XBWI+i2aIdqqxnzyTpertxlov4CAJZZ/pSHhYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:72:9f:b2:df:c0:59:c5:13:97:76:b3:a4:17:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Apr 19 09:00:38 2026 GMT
Not After : Apr 20 09:00:38 2026 GMT
Subject: CN=6c9376bd998603a7e38e6697f1e0ddeb49fde1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:92:19:61:51:3f:1d:6c:45:0b:47:bd:f9:8c:
e7:39:ab:04:47:97:ec:bd:98:03:7b:a3:f7:fa:5d:
78:ce:0d:8f:6e:5c:dd:3c:26:99:47:8f:a1:ea:5a:
b1:49:1d:57:99:21:9c:dd:08:80:e5:af:3d:e6:c0:
e1:2c:d7:db:bd:e7:ea:0e:15:8c:5e:65:67:55:6f:
58:cc:e0:15:9f:cb:f0:a6:85:00:cd:92:82:86:8b:
66:ec:7d:dc:f6:09:e8:39:fc:e3:6b:19:e2:0b:a7:
80:e7:ac:d9:9f:59:3d:ec:8f:7d:04:2b:aa:c0:6c:
42:7a:fa:73:1e:b0:d4:57:82:19:52:e4:47:00:d2:
26:4b:7b:52:6d:03:25:56:a3:92:4e:8a:65:35:ab:
c0:5d:c2:a2:2b:5b:b7:07:ea:07:71:1d:5e:ce:1b:
f3:3e:33:b2:d1:dd:26:11:52:10:9d:1f:61:0a:5c:
9f:42:c7:55:dc:c5:b7:4d:14:2a:9c:81:45:3c:db:
88:77:c7:53:15:da:b5:98:ec:e9:bd:56:06:96:d2:
36:3c:76:eb:07:cd:bc:ca:f8:e6:33:9b:6b:b2:6b:
e5:73:97:e6:d8:d0:e6:4e:88:d8:0c:c1:d1:3d:e6:
e1:e1:6f:db:c2:34:47:73:08:1e:44:e9:31:ec:ca:
6f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:93:76:BD:99:86:03:A7:E3:8E:66:97:F1:E0:DD:EB:49:FD:E1:ED
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b6:68:6f:de:d8:6d:96:41:2a:87:36:f8:b9:77:a7:d0:5c:
e3:f8:5d:8d:e6:38:a5:34:ec:55:22:ac:09:52:16:bb:67:c9:
9d:18:85:8b:0c:3c:76:a9:60:ae:c8:34:69:6b:ac:fc:2d:c4:
78:1e:a0:62:2f:0f:da:59:b6:72:a7:68:a9:e6:29:c3:8c:37:
3c:5a:d7:ef:1b:be:00:62:ba:10:e2:bb:4b:d8:b7:15:95:6d:
bf:88:d8:b5:d7:ba:c6:85:e2:d3:a3:2c:cf:7e:17:e1:73:12:
1a:b2:fa:63:2e:23:c3:0c:e6:34:5a:4d:d6:2d:07:b0:e1:a6:
66:32:2a:4d:2f:2f:14:ab:97:40:7f:cc:9f:9b:64:1e:05:26:
1e:45:a2:9b:80:f8:23:a5:db:22:c5:c2:aa:14:bb:3f:e2:dd:
9a:89:bd:35:42:d9:52:57:31:8b:f6:f7:f8:d5:6f:33:26:6a:
1e:53:bb:c9:b9:5b:9c:dc:0c:f1:49:ae:8a:e0:90:43:46:77:
8b:1d:85:13:e7:26:11:ca:ca:36:32:0c:14:ca:d2:49:b1:d0:
40:d3:93:d6:2d:3d:9c:ab:7e:19:95:41:6c:52:10:db:f7:0e:
4a:7e:ba:37:d4:23:5b:c2:9f:1d:bd:27:c8:6b:cc:98:a0:c4:
c2:2d:3a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:40:08 2026 by rpki-client