Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: iac2bXXTtJw48tSe6GXtfl3377GBqApyeDtVOiJewSE=
Subject key identifier: 34:0B:B0:F6:55:BA:5E:0A:E1:02:56:39:12:6D:ED:30:07:E3:06:90
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 019D9BF56222B3DDD0AE1351DCA9D1C307A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 09AC
Signing time: Fri 17 Apr 2026 15:00:43 +0000
Manifest this update: Fri 17 Apr 2026 15:00:43 +0000
Manifest next update: Sat 18 Apr 2026 15:00:43 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: yLymr+C0nUgFmsC1EGgV0Sfm/gNtS5I8AmCkVppubDw=)
2: umIyQ32hARkovH7pXTjPbQsyUAw.roa (hash: Vykeq8JG9Smu2I4EYLNs8vno3gc9BXMxlVVP02kGN2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:62:22:b3:dd:d0:ae:13:51:dc:a9:d1:c3:07:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Apr 17 15:00:43 2026 GMT
Not After : Apr 18 15:00:43 2026 GMT
Subject: CN=340bb0f655ba5e0ae1025639126ded3007e30690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1f:7d:13:5b:01:8e:d7:f8:ed:a7:99:56:73:
61:00:da:8c:31:09:e9:db:43:c1:21:8e:a8:dc:a4:
36:86:a0:7a:56:e7:53:59:d4:b4:6a:c6:0f:54:7a:
73:42:82:47:88:60:32:09:a8:ea:8e:4d:43:f3:1e:
bd:c4:7f:7b:18:b9:05:2c:ee:9d:5e:ae:4a:2f:66:
86:ce:a9:db:bc:ef:37:37:ea:0b:0b:5e:54:2a:40:
57:db:37:d1:f2:2a:99:64:fe:8d:19:47:3a:e9:b3:
05:29:92:51:b9:d6:14:3a:fa:5b:7c:10:b7:33:3d:
a1:85:98:bd:51:82:ae:8e:5c:90:a1:2b:13:6c:e1:
69:13:6b:77:95:ee:53:e8:42:d2:2d:1c:ed:06:0f:
d0:be:1b:d6:3f:af:ff:51:96:6a:f0:4a:80:38:04:
ba:79:1c:2c:c0:58:3e:5e:2f:4b:66:8e:0d:65:ba:
25:c3:75:b0:f7:bb:d8:ce:40:97:11:25:a3:7b:d4:
91:65:66:1e:c4:b8:5e:6b:a7:90:8b:58:d2:fa:04:
49:d0:58:f4:f8:77:98:58:2b:2f:4d:57:73:8e:24:
67:43:9f:0e:39:a3:da:19:30:e3:5f:fd:d7:80:3c:
e2:76:98:00:37:ae:38:c8:59:ce:9d:fb:81:d5:13:
7b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0B:B0:F6:55:BA:5E:0A:E1:02:56:39:12:6D:ED:30:07:E3:06:90
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f0:f0:e1:85:aa:ba:97:6a:b9:76:a5:94:67:ad:3f:80:56:
cd:6a:e9:8c:f7:89:a9:26:ad:63:11:a9:de:1d:3b:cd:78:61:
43:6b:45:15:bb:0f:79:ab:da:fa:ca:15:5e:27:97:4f:04:dd:
c7:23:46:ea:4c:bf:82:60:65:77:d4:3f:33:e5:5e:b7:73:b0:
3a:eb:ca:4e:36:e5:f3:74:0b:c5:41:36:32:41:a1:a7:38:84:
b7:db:8d:36:1f:cb:03:fe:28:67:68:b0:af:1c:27:4c:17:84:
74:3f:55:24:7e:33:60:15:39:fa:c2:4f:11:6c:25:71:0e:26:
9f:96:06:96:a2:84:bb:ff:f0:e4:f4:08:9f:c7:5b:05:12:60:
2c:40:46:17:eb:e7:30:38:f9:2f:3f:6a:6e:63:2f:57:11:43:
84:24:e9:d0:88:b7:9b:29:23:e3:5c:00:ef:19:46:58:ba:da:
60:1c:a7:b7:89:ce:74:cf:43:f4:fa:79:5c:66:b4:8a:44:09:
7a:82:41:c8:10:6a:4f:8b:4f:47:c2:44:64:13:c4:c7:06:61:
15:e7:26:22:86:04:6d:26:75:c3:ff:11:54:e3:8f:fa:ea:bf:
92:35:d7:cf:48:74:2f:be:c0:00:46:7f:e1:ff:65:9a:6d:98:
7c:9d:7d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:03:33 2026 by rpki-client