Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
File: ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft (raw, json)
Hash identifier: Ja7J+xdg5OQOc3FiwxnhCLlEH43UYW/VMR901NAL5Pg=
Subject key identifier: 3B:B4:3C:76:E7:BE:BA:BC:62:06:3D:16:72:61:17:DD:6B:98:7E:1E
Authority key identifier: 8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
Certificate issuer: /CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Certificate serial: 019DA41D22C874569AE5DDA86C6854263AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
Manifest number: 014C
Signing time: Sun 19 Apr 2026 05:01:06 +0000
Manifest this update: Sun 19 Apr 2026 05:01:06 +0000
Manifest next update: Mon 20 Apr 2026 05:01:06 +0000
Files and hashes: 1: 5JsNsuuUapw5fDgkbUkuWEzMsLk.asa (hash: RxL4Yv7FvjiasU1GewN7L6R6PTxiHwL1wYEDnRLK5b8=)
2: Sxkhw8Fa5pO8BhRGtQeTU8fdya8.roa (hash: l1dlDAqaaU0qfv4ZGVF35Fo37aw65NRWppLOtUVD5ug=)
3: ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl (hash: kN/0F2AxiZy0LFYc7vS+QUtoM6Vbt64lKEF611QyVLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:22:c8:74:56:9a:e5:dd:a8:6c:68:54:26:3a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Validity
Not Before: Apr 19 05:01:06 2026 GMT
Not After : Apr 20 05:01:06 2026 GMT
Subject: CN=3bb43c76e7bebabc62063d16726117dd6b987e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:95:ed:47:35:23:52:b7:a3:89:80:0d:43:49:
8b:c0:7e:ca:75:06:b6:9b:8b:0b:35:30:3f:82:f6:
cc:05:8b:6f:e3:b2:b3:f9:e3:f4:02:54:51:bf:96:
39:e1:0c:b0:f9:96:56:c7:2c:8a:4a:55:3a:ac:6f:
e2:ef:e6:da:a2:14:1f:ce:64:7d:f3:8f:b8:a0:ac:
c5:7e:21:dd:76:46:b8:92:0c:1e:c8:bf:62:c1:c5:
da:93:fa:d8:68:5b:82:ff:82:82:39:2f:2c:f6:ae:
dc:e7:78:11:61:8d:b4:1d:a7:6a:c5:73:ac:60:0d:
21:07:19:40:23:c0:a9:0c:78:9a:e5:cf:61:68:ea:
c6:14:fe:7c:3b:34:56:c0:96:6f:92:a5:1e:21:24:
c8:96:4c:fa:19:93:89:39:b0:71:4f:71:3a:7e:03:
ad:bc:39:c1:fe:9f:53:73:23:39:bb:cd:f6:c4:57:
29:ca:6e:1e:2a:0a:79:93:0a:2d:4a:f3:af:5d:94:
d2:01:f2:ec:5d:ba:1f:a0:a4:79:85:42:07:d5:40:
a5:4e:bc:7f:2f:59:ea:e5:6a:d5:b6:b8:04:2c:da:
3f:f4:c2:a5:59:cd:88:dc:a5:a7:d0:a8:69:61:9f:
1c:90:34:2c:4b:b5:d5:ca:5e:89:a6:3d:45:ca:bc:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B4:3C:76:E7:BE:BA:BC:62:06:3D:16:72:61:17:DD:6B:98:7E:1E
X509v3 Authority Key Identifier:
keyid:8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7c:cb:64:b2:de:09:06:fa:9f:c3:8a:8b:5e:ef:c8:3b:8f:
b1:0a:91:63:35:43:01:bf:fc:fd:e7:6b:99:44:61:d9:73:e6:
ab:99:a4:7a:b0:bd:f6:1a:84:fc:5d:f9:79:ec:eb:b9:e8:97:
5e:6c:7a:00:6a:fe:65:79:fa:8a:70:a1:79:ac:a2:b8:1e:46:
32:b6:ba:aa:ba:40:db:3a:d3:66:a7:ca:76:c3:d3:bb:fd:ef:
5d:b2:88:f4:25:16:ba:2d:6c:fb:43:42:c9:06:8f:ef:c4:3d:
45:a0:f3:c1:50:a2:68:ca:b4:57:ad:fb:b2:cb:01:e5:f9:4d:
40:84:38:a2:05:16:3e:99:1b:e5:5a:af:21:fa:d1:9c:66:9b:
59:13:1f:04:41:88:8c:af:64:d1:42:80:1a:99:f6:8f:a7:1a:
f7:b2:69:3c:63:6e:6a:cb:77:9d:d1:75:75:14:d9:01:8d:bb:
29:6e:81:56:c0:1f:b9:71:2a:fd:00:19:f1:01:52:ff:97:c9:
7d:93:bd:e4:f2:d3:31:77:43:40:4d:44:46:28:9f:ae:0d:8f:
67:c9:e0:8e:c9:53:db:17:12:91:9f:6b:3c:2f:47:f6:20:d3:
34:15:45:35:4d:f1:a8:12:36:04:0d:dd:54:b1:d0:c0:f2:37:
a6:c7:4e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:43:40 2026 by rpki-client