Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
File: 9QVtq7mkcBDNG07ydLw9L0pZ6To.mft (raw, json)
Hash identifier: 9UCtQXV5YkuBsXjNJnYXIBSvqhdW8l5V3qJEwvALV+g=
Subject key identifier: 72:25:94:9B:BA:EC:1C:4B:1C:26:B7:6B:ED:19:DE:02:C6:C5:08:A1
Authority key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Certificate issuer: /CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Certificate serial: 019D9C9A21D98E110D27DBC80C3CD1BCC14A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 18:00:39 +0000
Manifest this update: Fri 17 Apr 2026 18:00:39 +0000
Manifest next update: Sat 18 Apr 2026 18:00:39 +0000
Files and hashes: 1: 9QVtq7mkcBDNG07ydLw9L0pZ6To.crl (hash: oQkyrgxAn6qe0fuckYoVo92UTsTSMfIW0VTM6YKM9Cg=)
2: RnRCh1Xrb9yuwaris6_5MCtF1KE.roa (hash: 80wSt9zZDVoZeJMwPuaJTAz1yifqf1crCsttUVlJAD4=)
3: VRJ4Vc94OyT64lapMXpmOD1B3Wc.roa (hash: Ky32PchK8c9vLn0orEiQizK102tpl+arDsTOuP7+gVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:21:d9:8e:11:0d:27:db:c8:0c:3c:d1:bc:c1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Validity
Not Before: Apr 17 18:00:39 2026 GMT
Not After : Apr 18 18:00:39 2026 GMT
Subject: CN=7225949bbaec1c4b1c26b76bed19de02c6c508a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ef:78:ca:1b:33:76:a7:31:2c:a7:3b:b8:b1:
dc:cd:f0:79:1c:ca:b3:e0:bf:aa:d3:05:d4:4a:d1:
51:3e:dc:f8:bc:c5:69:a8:0f:6e:b5:8f:26:b6:e2:
f6:62:16:84:c8:e5:49:d3:75:bf:02:b6:96:a5:99:
1e:5f:19:87:7f:9d:3d:a2:74:3e:65:cc:44:92:e3:
50:32:35:05:e1:e6:73:01:72:f6:2a:22:db:e2:45:
c0:24:58:cf:b5:fc:8e:19:8c:de:77:19:6d:1e:83:
e2:fb:8b:59:f8:6f:87:b8:d4:63:53:03:8e:65:05:
26:53:84:56:18:39:f5:de:95:db:f5:aa:d0:c8:68:
e3:49:f4:13:87:b4:fa:d0:7b:36:12:22:6b:3d:33:
03:2d:21:4e:15:0f:98:ef:22:74:e3:3e:62:0f:c4:
09:ba:9f:a0:24:34:f0:df:17:eb:a7:49:04:7f:96:
8b:dc:b1:91:f0:09:ac:42:ef:76:46:a6:8c:de:4b:
27:0b:31:9d:36:7c:18:d9:f3:db:22:64:df:4b:01:
8d:59:ce:48:91:dd:50:1c:7a:24:73:07:11:1d:29:
d9:95:aa:13:47:83:38:19:2d:f4:eb:02:61:be:25:
e7:8b:6d:42:f6:22:e1:ff:3d:01:97:f8:5e:c6:bf:
64:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:25:94:9B:BA:EC:1C:4B:1C:26:B7:6B:ED:19:DE:02:C6:C5:08:A1
X509v3 Authority Key Identifier:
keyid:F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ad:9c:fb:33:75:08:ba:f1:a8:3c:0a:33:8b:66:cc:79:17:
57:7b:83:f0:fd:66:c0:b5:7d:5e:06:32:ff:d3:19:a6:07:30:
30:8a:2b:7e:48:ca:df:b7:26:d9:0d:34:d4:15:1d:17:47:d8:
df:74:11:91:a6:f1:8f:68:68:af:00:d8:dc:29:8b:48:1b:90:
f3:e7:ec:52:35:21:b5:e9:d2:42:2a:41:88:3a:09:dc:7e:5d:
0e:2f:2d:d4:65:87:b8:50:87:c1:41:09:4e:88:41:44:54:6f:
e7:63:1b:ee:21:54:3d:56:0a:c6:19:1f:86:86:44:76:cf:bb:
33:00:e9:7d:35:80:8d:4f:54:07:d8:c0:85:5d:be:64:a4:b5:
18:98:c9:49:b8:97:7e:60:92:e2:e6:c3:a2:da:34:00:82:79:
4d:45:c7:62:30:66:ce:4f:7f:4e:f7:cf:0c:dc:55:a7:d5:c6:
06:cb:cd:9a:7e:4a:9a:06:b1:19:80:d0:ac:5e:d0:af:2f:01:
ef:6d:8e:94:82:3c:f8:3e:43:65:c0:ad:48:c4:6c:bd:0d:83:
e3:81:66:b8:e9:39:ed:73:d2:64:9e:5a:1d:b8:a7:22:9e:f2:
ca:e0:81:28:5b:ce:c5:69:dd:ae:36:ab:8b:b6:dd:8e:03:df:
7f:54:e8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:29:29 2026 by rpki-client