Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: RyeXRkJnkdsu1x5tERajwSGwCuJttAqBJfQWmxvYM/M=
Subject key identifier: E1:3B:B6:3C:3F:99:A6:D3:4C:4C:EE:F5:12:E0:E6:D7:D0:9D:46:AD
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 019D99D03003FF4F4AAEB15367E70DAEEAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 05:00:50 +0000
Manifest this update: Fri 17 Apr 2026 05:00:50 +0000
Manifest next update: Sat 18 Apr 2026 05:00:50 +0000
Files and hashes: 1: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: ERIvGHf3r4kELju50whWJ4qKYiE+nNU3V943B9VjnCw=)
2: d2tSXbQmgx_5joDSWcoPnabG6ts.roa (hash: OeDG3n8yLp+p4vWMH9BV363xFOTnKrmVdLEjiUivNwQ=)
3: ni2pJYsgjdd_PvsJim4HSq8So90.roa (hash: oeFgA//XgCFg9vA4VhOc/9YfMueTyaFUxUNd6kbXTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:30:03:ff:4f:4a:ae:b1:53:67:e7:0d:ae:ea:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Apr 17 05:00:50 2026 GMT
Not After : Apr 18 05:00:50 2026 GMT
Subject: CN=e13bb63c3f99a6d34c4ceef512e0e6d7d09d46ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:05:32:4c:b2:2b:63:0a:bc:25:69:a3:d3:
f5:15:94:2f:02:39:c0:ed:b3:43:3a:7f:c9:65:1f:
ac:bb:5d:57:a9:cc:c9:5b:d0:6b:24:1a:86:b7:9c:
b9:12:6b:04:98:bc:de:d2:67:9c:94:5c:b1:8d:ea:
b5:80:24:a1:b9:01:ec:b7:f7:d6:83:18:67:86:af:
ba:61:1c:8b:77:11:3f:58:9a:21:82:57:0d:50:39:
1e:06:45:92:6b:cf:ed:52:c8:57:14:86:d8:e9:39:
07:a6:cc:2d:3f:be:6c:4d:ef:73:3a:a6:f1:e4:1a:
a7:f6:bc:ce:58:17:10:e4:5a:ff:43:6c:07:69:0e:
b6:51:29:5b:c1:c1:dd:3a:63:c7:05:d2:29:37:1c:
09:f5:fd:b9:bb:b5:12:c8:e8:2f:73:1b:f0:4c:45:
94:d2:b3:c5:c9:14:9b:0f:32:57:6c:8e:e2:b8:ba:
52:e1:5d:d6:24:9e:a4:63:06:09:a1:10:80:4f:8c:
26:75:0c:98:62:38:a4:7e:25:a5:88:6e:65:77:66:
01:d3:42:91:a1:67:ce:ed:e7:57:b2:73:07:bc:df:
e9:c0:22:0c:7c:7f:13:ab:87:c5:75:f7:82:0c:13:
93:51:ef:3c:b3:71:3c:74:cf:21:3c:b0:98:62:50:
4d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3B:B6:3C:3F:99:A6:D3:4C:4C:EE:F5:12:E0:E6:D7:D0:9D:46:AD
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1f:b5:36:8f:02:9a:e1:e9:59:0c:90:d0:e4:e9:6e:81:08:
5f:a5:bb:dd:7d:45:57:0a:03:ba:db:45:18:6f:45:8f:c9:f3:
3c:2d:9a:6f:5c:e6:fc:4c:4a:04:23:91:bb:73:c5:0a:57:9b:
bc:c5:30:44:29:b8:52:c6:74:56:9a:dc:7c:15:f4:76:e6:78:
71:0e:59:f6:9a:13:bd:80:5f:68:43:14:99:f4:b1:0e:a8:3f:
67:ea:44:f9:96:a3:72:a3:f5:01:ee:a7:22:61:2b:e8:f9:ba:
0d:ed:61:44:55:d2:65:78:17:5f:33:2b:3c:83:20:66:bd:87:
50:65:cd:18:0f:06:57:76:88:05:44:43:c3:79:32:82:70:60:
87:aa:b9:2e:87:90:24:ab:55:75:e2:35:d0:f5:8b:eb:4e:67:
07:4b:83:7e:67:d2:a3:18:bb:41:67:92:b3:6f:6c:b5:4b:85:
b3:bb:c1:68:11:68:96:52:1d:44:48:59:0f:20:4e:16:93:4c:
70:fe:49:ca:7c:37:2a:e8:3c:5c:6d:4d:c2:98:c8:f3:c3:ab:
5f:7a:03:2b:52:cf:d5:9c:32:da:4d:06:35:b8:32:6f:9e:d0:
9e:4b:3c:90:d2:ee:f7:bd:a7:ec:e8:f4:92:10:ff:9b:f2:72:
78:e7:90:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:29 2026 by rpki-client