Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier: 7NzMyoEWX7N18LDchsS7mVyC6Xtea2cPIwoTv7qAfRM=
Subject key identifier: 73:18:75:F6:60:BB:40:FA:E1:72:31:C3:8B:F5:B4:B9:67:20:F5:95
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 019D9BBED4B3EEE41FD5B23517084120D226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 14:01:07 +0000
Manifest this update: Fri 17 Apr 2026 14:01:07 +0000
Manifest next update: Sat 18 Apr 2026 14:01:07 +0000
Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: zctjBTJEC/4OTOILkdL/pNCj2bBTGpyTMxn9oldrsr0=)
2: M3wRggjCUsGg3wdEN0GVZSY7UNs.roa (hash: syu83Vs+aGOZec7SpDVJCQQPJPYaj6sFS8IZVudbAxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:d4:b3:ee:e4:1f:d5:b2:35:17:08:41:20:d2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: Apr 17 14:01:07 2026 GMT
Not After : Apr 18 14:01:07 2026 GMT
Subject: CN=731875f660bb40fae17231c38bf5b4b96720f595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:70:04:83:46:75:0b:d8:fe:39:96:46:ee:64:
44:e2:88:aa:16:73:86:07:ee:2e:dc:82:10:7b:76:
50:b2:60:98:c5:dd:44:a5:8f:0e:9b:80:11:4b:d9:
9c:e8:89:e0:fe:08:9c:eb:5c:aa:88:e3:a2:16:03:
da:0a:ab:9a:56:a4:97:61:03:45:eb:da:42:c0:88:
2f:2a:c3:71:32:ae:c4:d7:2a:a9:6d:d2:b4:b5:cc:
3a:a0:f1:09:79:00:cf:e6:ef:38:96:69:40:63:78:
63:4f:36:2c:c8:ce:67:b6:3c:d3:81:e2:d6:ba:40:
88:ca:5e:bd:34:e0:ff:88:b5:21:6b:b4:af:fd:93:
c7:ac:08:0d:da:90:bf:03:f7:cf:24:8c:69:78:16:
1a:97:59:68:04:1b:5f:55:80:27:f1:8e:b6:da:0e:
56:3a:d4:fe:ad:f3:0a:fc:76:78:cb:8f:5d:fc:28:
96:07:61:f9:5f:98:31:9f:a4:39:18:1d:5f:5e:f3:
81:47:5e:3d:cd:84:e3:06:22:2b:22:5a:71:15:dc:
22:55:17:21:d1:04:6e:91:92:46:12:5a:e1:49:f4:
9c:7e:89:6b:94:04:02:16:3f:ab:ba:26:ae:ae:f1:
3d:44:96:66:72:c0:7b:b6:ba:2f:aa:f5:15:ec:91:
6d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:18:75:F6:60:BB:40:FA:E1:72:31:C3:8B:F5:B4:B9:67:20:F5:95
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:57:a9:a6:47:36:2e:77:bd:5c:89:ac:ad:bb:9f:4e:e2:9f:
a2:ae:db:a9:71:a1:a8:a3:f4:af:78:b1:cc:49:2a:32:64:e8:
a7:5e:1e:fa:3a:6d:a8:cb:ff:96:3a:4c:4b:15:a3:37:61:e9:
43:51:75:32:9b:9b:2f:5c:5f:0a:a1:4b:1f:9c:95:e5:04:73:
c9:85:f2:2b:3f:08:32:0e:40:b7:64:60:b4:2a:9f:54:d8:86:
06:df:b9:90:14:39:05:ca:54:57:e4:ca:c8:fb:c7:31:e8:b9:
18:98:e0:77:3a:32:4c:4a:85:bb:2b:be:fb:ac:f8:d3:bb:71:
57:09:7a:8c:d7:fd:cf:48:89:6d:9e:98:c7:1f:f5:f6:c0:74:
1e:07:99:ba:c6:66:af:eb:13:9a:73:9f:e1:07:1f:a4:5a:37:
e7:01:92:16:e5:7b:59:42:00:39:a0:9b:79:07:9d:50:1a:16:
7a:b6:8d:e2:48:af:20:eb:e1:ee:75:20:33:6f:c1:32:2c:4c:
83:aa:05:e0:c2:b5:29:9f:b2:ec:e4:cd:c6:40:52:25:0c:19:
be:88:41:f2:96:3d:f8:96:a4:5f:3b:1a:ed:85:56:44:0c:b6:
7d:1f:1c:9f:c4:6f:86:d7:4a:12:75:07:0e:73:45:09:0f:43:
54:fc:87:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:36 2026 by rpki-client