Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
File: 9SHhdPhPcWWWHUG2jqcmLigzfWk.mft (raw, json)
Hash identifier: LgLjd3ToPL/vbvsnTTvlCW85BJhrvGJeOsuMG981pww=
Subject key identifier: 24:E5:38:50:88:29:93:87:DD:C4:04:CE:FE:D7:E4:9D:F1:83:70:7C
Authority key identifier: F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
Certificate issuer: /CN=f521e174f84f7165961d41b68ea7262e28337d69
Certificate serial: 019D996209BBC6B44A5D9F4251E266D9F17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
Manifest number: 0243
Signing time: Fri 17 Apr 2026 03:00:32 +0000
Manifest this update: Fri 17 Apr 2026 03:00:32 +0000
Manifest next update: Sat 18 Apr 2026 03:00:32 +0000
Files and hashes: 1: 1-rxopH5LJ9Uzi5ISHJXR-dur0jc.roa (hash: aHfsmVZKRy+7AFPaygX163J+5qjXxNU2emyKoCQGtN0=)
2: 9SHhdPhPcWWWHUG2jqcmLigzfWk.crl (hash: qtQHNZakkEpQuVYYANJQvZv9Qn/CUtaf7gfLwMFl2Jw=)
3: F_pPHJDcrHyVOVWzvhakia7DJiQ.roa (hash: tFJBSOLCH7tZWWFthieckptanNdtDSMnw7UCYwe6+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:09:bb:c6:b4:4a:5d:9f:42:51:e2:66:d9:f1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f521e174f84f7165961d41b68ea7262e28337d69
Validity
Not Before: Apr 17 03:00:32 2026 GMT
Not After : Apr 18 03:00:32 2026 GMT
Subject: CN=24e5385088299387ddc404cefed7e49df183707c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:34:05:fb:e7:ec:43:23:c4:88:32:06:87:
4b:45:98:34:97:48:2c:fc:33:c9:3f:22:02:f7:5e:
06:54:f7:59:ec:ae:62:48:74:5f:49:82:2e:45:b8:
06:d7:07:67:d2:a2:29:6e:a1:4d:e5:f3:62:2e:0b:
90:92:56:2c:9b:79:b4:cb:c4:c1:eb:8c:27:54:b8:
0c:58:d3:7e:2e:a3:f6:46:d5:d3:d4:a5:7f:74:10:
ae:47:fc:f7:2e:ab:84:ad:2b:27:96:9d:28:e7:1b:
ce:ce:ac:54:29:d4:5e:20:5a:b6:9c:94:49:a2:07:
a2:ab:6f:99:78:ec:54:0e:b2:f9:38:b0:98:c6:95:
9a:d9:1c:fd:75:82:b6:d3:e1:a2:1d:8f:de:12:6f:
d7:ee:50:77:9e:5c:2c:85:8e:9c:4c:93:94:e4:f7:
e3:65:54:af:bd:12:d7:33:4a:75:a4:3f:44:78:11:
49:1b:56:6d:c4:cd:2f:e1:e4:47:07:13:30:1a:ba:
d5:0e:f9:5d:03:e8:fb:27:19:6a:c9:91:5c:41:43:
3e:75:0f:01:f8:de:aa:15:3d:47:d6:ef:67:6d:ad:
e4:21:09:39:21:85:46:aa:78:aa:55:9b:a6:6d:e9:
44:63:a0:a9:06:4e:7f:fc:8e:7e:3e:5c:55:16:e1:
ee:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E5:38:50:88:29:93:87:DD:C4:04:CE:FE:D7:E4:9D:F1:83:70:7C
X509v3 Authority Key Identifier:
keyid:F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:94:49:e1:d7:95:99:e9:b8:15:cd:8c:7c:7a:ae:a4:fb:5f:
cc:47:6a:1f:66:d3:5c:22:fa:6b:c9:a0:6f:45:5f:9e:ba:e8:
6d:e1:6c:e3:ef:9e:e7:42:78:3c:44:bf:a9:b8:73:c4:4a:31:
eb:8f:37:43:cd:03:e9:30:fc:1e:20:06:5a:d3:f0:5c:6a:ed:
a9:21:fd:5f:cc:a0:69:1f:a9:f9:76:f9:4f:c7:bb:4b:39:4a:
a4:00:72:17:3b:6c:ce:fc:fe:56:3f:e3:bb:56:39:61:40:1b:
86:6d:72:47:78:2a:54:96:df:ae:3a:40:34:53:83:a5:d8:0e:
ef:c6:d2:4e:1b:e9:61:37:d6:0a:1a:0f:b3:16:65:d8:68:98:
ec:77:07:34:af:22:ed:62:0c:1a:11:a5:64:33:7d:9e:34:e6:
bd:f8:91:5c:1f:9d:09:52:e0:c4:fc:e5:d9:0b:f9:0f:c1:94:
b0:52:1f:9b:bd:f3:42:46:e6:14:8b:4f:7f:97:e7:63:b3:84:
07:11:09:42:78:0f:ce:c8:fe:33:c8:01:d1:d5:1e:bc:33:2e:
07:57:32:33:cc:eb:ce:02:2d:4a:b7:e6:a0:45:6c:ec:ce:b3:
f5:f6:aa:54:75:0b:39:17:65:ce:81:92:fb:cb:cd:b9:36:82:
a2:10:3a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:29:57 2026 by rpki-client