Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
File: k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft (raw, json)
Hash identifier: oBvNTcDfygK9vleVqCtLXlAg8rV/uS02Ktg/TbhI2rA=
Subject key identifier: 1D:11:8F:7A:E0:1C:B5:80:D7:8B:28:49:41:EC:F6:F6:BD:F5:C0:19
Authority key identifier: 93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
Certificate issuer: /CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Certificate serial: 019D9962B6E572267B7F818EC42C12DCFC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 03:01:16 +0000
Manifest this update: Fri 17 Apr 2026 03:01:16 +0000
Manifest next update: Sat 18 Apr 2026 03:01:16 +0000
Files and hashes: 1: A6iHBsnqcj2Riil3U1_TXl2ABqw.roa (hash: wWCu1PETCholC6rFvWG+KWu2TvENNpa++dqGd7mDsM4=)
2: MQh6Wz2-8CGK9b8xrkIk2AZbqhQ.roa (hash: Vu6+oiBxaiIXPalKgvaptYqxpXWKSxP7AU+MBEut6Xs=)
3: k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl (hash: Mwi/cqjohRD+aavnZV/YXT2MHOs0bnKxxtgTyG09yyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:b6:e5:72:26:7b:7f:81:8e:c4:2c:12:dc:fc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Validity
Not Before: Apr 17 03:01:16 2026 GMT
Not After : Apr 18 03:01:16 2026 GMT
Subject: CN=1d118f7ae01cb580d78b284941ecf6f6bdf5c019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2e:a3:04:e2:6a:28:49:dd:d0:86:33:53:b5:
62:32:50:ee:2a:4d:04:40:4f:4f:91:a0:28:9c:00:
6e:44:d8:54:8e:a6:ed:82:d3:09:87:76:d9:a2:f0:
56:b7:04:e7:74:15:a6:c0:1b:49:3e:87:48:3e:81:
69:1a:57:64:5f:38:15:b5:54:42:6c:a1:26:95:54:
23:bf:0d:93:e8:5a:d8:51:a7:32:f9:8d:ce:2c:6c:
18:a1:e5:ba:9d:48:87:87:04:bd:41:96:99:e2:d1:
dc:08:db:3c:e3:2a:8b:e7:dd:c9:e9:15:15:f2:31:
f9:df:14:97:02:1e:d6:d8:56:66:c0:c2:f6:ee:55:
18:ed:f5:ea:4f:f6:05:0c:29:d0:3c:a9:d5:66:6b:
38:6b:fb:c8:c6:83:5f:e5:49:af:92:9a:86:41:bc:
66:f4:ba:c6:16:04:3a:6a:91:9d:8e:09:82:b0:3e:
77:88:98:43:23:ec:b4:04:b9:fb:2c:5d:9f:94:60:
bf:ba:0d:50:76:ec:2e:3c:2d:6a:2d:6d:30:4a:3c:
b8:5b:83:c5:6c:6b:50:a5:ca:b5:f7:9b:20:6b:87:
06:10:33:d6:8a:83:05:cd:8f:1e:c7:75:c9:bd:4e:
8c:0c:08:9c:a0:c6:e3:60:14:7f:9e:c3:74:a3:43:
57:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:11:8F:7A:E0:1C:B5:80:D7:8B:28:49:41:EC:F6:F6:BD:F5:C0:19
X509v3 Authority Key Identifier:
keyid:93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f6:9d:78:9d:66:c5:bc:17:02:f3:e0:b6:6b:07:5c:c5:c8:
82:56:6f:06:53:1a:08:07:12:0c:bb:e2:be:3b:5c:e8:56:71:
49:3a:eb:f8:01:32:89:2e:e1:87:fc:dd:80:c2:57:39:5f:d1:
8c:43:95:11:f6:e1:a2:d0:06:dc:07:c4:bc:51:c1:b0:a9:51:
6c:62:7f:8e:6f:73:ca:32:0f:fa:0b:7d:a5:41:cc:8a:45:6f:
bb:66:ec:42:f8:ab:47:f6:62:8d:d9:84:9b:23:3d:fe:b6:28:
79:df:cd:34:3b:1f:52:e5:8a:9a:1b:50:e8:de:8b:bd:8a:b9:
40:99:1e:24:ca:5e:fb:66:b0:df:12:12:bc:5f:fb:c2:de:5a:
d4:f6:69:67:e0:4f:3b:41:8e:7f:ae:8b:52:70:d7:28:49:96:
f8:19:32:30:7d:fb:c6:ef:57:41:f8:f6:ce:4d:bc:3d:6e:4b:
c2:34:36:58:a6:68:04:3c:4b:76:7d:6a:31:ca:e9:21:39:96:
18:22:a7:e1:c2:19:39:8d:3c:e3:63:47:33:74:76:9b:32:44:
27:d7:31:57:47:0d:95:aa:ad:a1:0b:dd:f1:c5:e1:dc:be:9f:
88:be:69:f7:86:33:10:81:9b:2b:a6:0c:f1:40:d1:56:f2:61:
bc:aa:5c:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYrblciZ7f4GOxCwS3PwxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZGM0NWZmZTEzZjg0MWYxODhhZjc0M2JkN2RjMzRlZDU0
ODA1ZDQwHhcNMjYwNDE3MDMwMTE2WhcNMjYwNDE4MDMwMTE2WjAzMTEwLwYDVQQD
EygxZDExOGY3YWUwMWNiNTgwZDc4YjI4NDk0MWVjZjZmNmJkZjVjMDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y6jBOJqKEnd0IYzU7ViMlDuKk0E
QE9PkaAonABuRNhUjqbtgtMJh3bZovBWtwTndBWmwBtJPodIPoFpGldkXzgVtVRC
bKEmlVQjvw2T6FrYUacy+Y3OLGwYoeW6nUiHhwS9QZaZ4tHcCNs84yqL593J6RUV
8jH53xSXAh7W2FZmwML27lUY7fXqT/YFDCnQPKnVZms4a/vIxoNf5UmvkpqGQbxm
9LrGFgQ6apGdjgmCsD53iJhDI+y0BLn7LF2flGC/ug1QduwuPC1qLW0wSjy4W4PF
bGtQpcq195sga4cGEDPWioMFzY8ex3XJvU6MDAicoMbjYBR/nsN0o0NXQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0Rj3rgHLWA14soSUHs9va99cAZMB8GA1UdIwQY
MBaAFJPcRf/hP4QfGIr3Q719w07VSAXUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yZDBiMTktMGFmZi00MTJmLWEyZmQt
MjE4OTU3MjhiYTRlLzEvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yZDBiMTktMGFmZi00MTJmLWEyZmQtMjE4OTU3MjhiYTRl
LzEvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPadeJ1m
xbwXAvPgtmsHXMXIglZvBlMaCAcSDLvivjtc6FZxSTrr+AEyiS7hh/zdgMJXOV/R
jEOVEfbhotAG3AfEvFHBsKlRbGJ/jm9zyjIP+gt9pUHMikVvu2bsQvirR/ZijdmE
myM9/rYoed/NNDsfUuWKmhtQ6N6LvYq5QJkeJMpe+2aw3xISvF/7wt5a1PZpZ+BP
O0GOf66LUnDXKEmW+BkyMH37xu9XQfj2zk28PW5LwjQ2WKZoBDxLdn1qMcrpITmW
GCKn4cIZOY0842NHM3R2mzJEJ9cxV0cNlaqtoQvd8cXh3L6fiL5p94YzEIGbK6YM
8UDRVvJhvKpcHQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:59:08 2026 by rpki-client