Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
File: r9I8xVrurzN-23Pq4ltZCXoneEw.mft (raw, json)
Hash identifier: Z5gO/8pBqxYghLgpNjcLYlrfYmQ84JvqkB4WPX6Bor0=
Subject key identifier: A9:9E:D3:E5:81:C1:54:69:E7:C4:61:07:44:68:2B:39:A9:30:C0:D2
Authority key identifier: AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
Certificate issuer: /CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Certificate serial: 019D9B50B9DABB69FA45A909E3DBF1D601E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 12:00:51 +0000
Manifest this update: Fri 17 Apr 2026 12:00:51 +0000
Manifest next update: Sat 18 Apr 2026 12:00:51 +0000
Files and hashes: 1: EgkLrTbqfCqKtc1_HO_4N3RqgDA.roa (hash: hSie2Ig7NXZ8GW1BlGvPkiht1lHg7Q/uBsfmB2XjW4k=)
2: r9I8xVrurzN-23Pq4ltZCXoneEw.crl (hash: JvPL/F0rqFSBshmM7zwTmdT8M8WDcPiJT82FqVwF7dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:b9:da:bb:69:fa:45:a9:09:e3:db:f1:d6:01:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Validity
Not Before: Apr 17 12:00:51 2026 GMT
Not After : Apr 18 12:00:51 2026 GMT
Subject: CN=a99ed3e581c15469e7c4610744682b39a930c0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:12:84:fc:7c:db:7c:c2:00:59:0f:53:1c:
16:10:72:95:1c:aa:82:08:47:9d:39:67:5a:84:55:
4e:5b:2c:2f:89:5f:32:2e:1b:46:18:b5:aa:20:b8:
ad:10:77:59:0b:96:51:86:4e:84:eb:7c:50:82:ce:
85:ff:5d:6a:ee:db:13:4a:5a:ff:a7:51:46:14:5f:
3f:66:a3:63:53:79:7c:c7:0b:71:a6:0f:a8:bb:6b:
3a:9e:cc:3b:6e:6b:ec:30:08:dd:af:21:8c:af:90:
23:4d:a7:08:a8:60:24:0e:2d:8d:2c:8d:ad:1d:c8:
e0:38:1d:2c:c7:f4:de:f8:7b:aa:eb:d9:d1:7e:8e:
0b:4c:2f:7e:fe:e2:7a:2b:bf:47:b5:05:83:a0:e5:
e8:c6:9d:ef:84:d2:8f:a5:aa:e9:bc:eb:0f:77:ad:
91:d1:d5:39:a3:41:a0:b5:75:ac:69:b5:d9:05:8b:
86:f1:22:8c:a6:4d:3a:d9:01:4c:53:af:53:78:8f:
de:21:f0:8e:29:ff:64:5c:86:80:7f:f2:5d:e1:a6:
03:1f:b2:67:4a:ab:2d:f0:e2:3d:d1:0b:21:f8:d6:
e5:fa:72:40:91:98:60:9f:89:b1:6d:ae:9f:3c:7c:
4d:02:83:e0:27:bc:65:62:9f:89:40:dd:16:c3:81:
33:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9E:D3:E5:81:C1:54:69:E7:C4:61:07:44:68:2B:39:A9:30:C0:D2
X509v3 Authority Key Identifier:
keyid:AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:90:10:8d:38:a2:e3:76:02:f0:e8:cc:52:b6:e3:d9:b2:4e:
6e:76:a3:d6:a1:b8:cd:56:d4:92:9c:6b:11:8b:64:19:f5:36:
d5:88:a5:bc:de:3c:ce:d9:15:82:3d:cc:91:c8:75:12:46:e2:
28:ed:95:7d:34:05:46:15:7b:1e:da:c2:ef:8c:4d:ca:25:a5:
24:6d:c6:69:2a:1c:86:c0:33:cd:45:09:de:47:56:53:1d:3f:
4e:db:7a:4c:df:7e:94:3e:c3:45:fb:5f:2c:12:aa:f8:a5:4b:
16:6d:4e:cc:e8:f4:f2:b7:9b:df:e0:fa:1d:dc:9a:d6:85:7e:
f5:89:d2:c5:fa:62:1a:35:9c:3e:ed:73:9e:bf:1d:e3:42:a9:
0b:45:7c:02:be:da:52:24:1c:2d:f3:6d:b2:44:0e:05:3c:7b:
f1:38:64:c4:25:35:17:97:b1:27:3f:a8:87:e5:66:0a:c4:53:
0c:7a:76:27:40:7f:19:38:b3:0b:86:a9:61:af:48:37:93:8d:
de:3f:7a:c1:a4:0d:d5:6d:ab:1f:1b:19:5e:c9:c6:da:59:18:
4b:7a:35:8e:6b:7c:5c:81:fd:f7:b7:65:12:e5:fc:a8:5a:84:
09:29:40:64:47:66:0e:61:a8:0b:c1:72:4c:24:99:27:9f:0f:
0b:7e:76:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:21:34 2026 by rpki-client