Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
File: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft (raw, json)
Hash identifier: bgxz3FqNJWfAh5roune4GZ6myr2Bd6FBmipEDMP2k0g=
Subject key identifier: 20:B3:9E:29:FB:75:3D:B0:61:B9:C6:48:EF:39:A7:06:56:94:E5:01
Authority key identifier: F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
Certificate issuer: /CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Certificate serial: 019DA48B038C2A81611EB2791DCAA6DD7A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
Manifest number: 0264
Signing time: Sun 19 Apr 2026 07:01:06 +0000
Manifest this update: Sun 19 Apr 2026 07:01:06 +0000
Manifest next update: Mon 20 Apr 2026 07:01:06 +0000
Files and hashes: 1: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl (hash: NhlAWHthhlOtO4y+gt/VZJSWaMwmuhugEIAhvdeARc4=)
2: gFSyqMzduDiA854t0vAjekdq0Zw.asa (hash: Dfz1RNuUP2ZQSFWAImj3h5vywanLi9lBAQZshEdsMcs=)
3: mqyazNOfM1ZVPm3cOVRYyNHDwpA.roa (hash: C7VZbHKV6HPYsBlX1X4bgcS+0xR52AiRYn6dtHpeMwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:03:8c:2a:81:61:1e:b2:79:1d:ca:a6:dd:7a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Validity
Not Before: Apr 19 07:01:06 2026 GMT
Not After : Apr 20 07:01:06 2026 GMT
Subject: CN=20b39e29fb753db061b9c648ef39a7065694e501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:bf:1a:03:9a:c1:c9:c3:ed:91:55:70:f3:
fe:19:7e:0e:db:7a:19:03:2d:35:a1:e3:8b:02:ac:
10:d1:66:d1:75:43:7d:be:84:df:db:85:15:19:52:
b6:ef:91:aa:0d:36:9b:9b:2e:4a:e3:8e:d0:7d:1c:
c6:ed:c0:6c:3b:0a:30:77:cc:db:63:7c:41:27:ac:
68:e6:8e:21:e3:78:da:24:e7:f2:12:c6:61:fe:08:
8f:49:42:1f:84:46:b6:bb:95:2c:5f:af:92:14:34:
42:54:6f:5e:7a:94:75:42:f9:fc:1b:84:e3:41:28:
43:df:f7:e8:4d:ff:c3:5e:8f:06:b0:d6:29:1a:78:
aa:ce:cb:62:84:7b:0d:08:eb:de:aa:4b:92:0d:13:
45:54:38:a7:17:7a:f2:eb:84:b8:a1:6c:e5:41:dd:
7f:cf:32:eb:10:90:db:de:8e:3d:69:4f:05:02:27:
c2:a8:c8:a0:94:b4:3b:ad:3f:17:f7:eb:e6:93:51:
43:b3:70:ac:a9:93:04:a1:48:b4:d5:a2:25:5d:4c:
a8:bb:c9:38:bf:0d:06:60:9c:1c:a9:27:26:a6:f4:
cc:86:f5:8a:43:1d:52:c2:43:33:59:20:9a:d5:00:
7c:3c:e1:c6:f3:bc:38:89:01:d2:cd:f7:20:d6:9d:
6a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B3:9E:29:FB:75:3D:B0:61:B9:C6:48:EF:39:A7:06:56:94:E5:01
X509v3 Authority Key Identifier:
keyid:F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d8:e2:b5:e9:c6:6f:57:05:f7:6e:88:39:43:aa:b5:0f:18:
ec:ba:4c:ff:fa:dc:70:e4:ac:40:84:57:c6:72:e0:96:4e:2a:
44:c2:82:a3:e1:04:c3:fc:cf:ee:43:d8:5d:fb:d8:4a:35:85:
59:6e:a4:57:33:36:73:1b:1f:5b:95:97:84:e4:9b:9b:ff:2e:
d8:82:36:d5:a4:87:6f:0c:81:32:da:89:56:f0:76:56:59:66:
75:5c:25:1a:84:e8:09:94:f8:fd:e7:7c:ad:65:b2:d0:ab:e7:
b2:b7:ed:0c:e3:e1:37:ab:71:a1:00:ee:e9:eb:fb:37:73:ac:
73:80:fe:ab:0d:36:32:7b:17:ba:87:b4:79:3d:a3:7d:aa:f1:
b2:45:b3:4c:94:00:22:e6:8d:58:6b:c9:d9:81:46:7d:51:e1:
3c:fb:48:70:71:cc:fa:27:7a:d5:9a:d9:a5:6a:9b:f4:24:ef:
76:a8:1b:35:82:3b:0e:cc:12:97:3c:b8:34:01:af:72:de:dd:
85:93:53:c5:c1:53:ee:ee:a1:6b:c7:5a:38:40:af:08:b8:39:
04:ea:b4:00:df:e1:5d:e7:e4:a4:b1:37:08:97:33:80:28:5a:
d9:92:78:34:e7:26:a3:3e:58:66:a6:38:a9:0f:dc:b0:7a:ad:
0c:6a:5f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:11:56 2026 by rpki-client