Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier: WQKxzyV6uJfYmDr7q9o6LkmcG1Tgub6ngWDuxmITEB8=
Subject key identifier: 32:63:B2:5D:36:09:62:D5:E7:B3:17:8A:B7:A5:F5:D8:EC:77:AA:E6
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 019D9BBE85AD033AE6E0FC3ACDAD8345B7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number: 0FDE
Signing time: Fri 17 Apr 2026 14:00:47 +0000
Manifest this update: Fri 17 Apr 2026 14:00:47 +0000
Manifest next update: Sat 18 Apr 2026 14:00:47 +0000
Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: 7NDFvcbi4vX7CYkzIile5hx6YlTkbDOoIaIVwbp3ev4=)
2: i1q-5ppGHZKen0mg4iu01mYnQM0.roa (hash: sIuyBrADQrDmfb4gofoZhceJ2ljMvz5t7ov19sRqXKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:85:ad:03:3a:e6:e0:fc:3a:cd:ad:83:45:b7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: Apr 17 14:00:47 2026 GMT
Not After : Apr 18 14:00:47 2026 GMT
Subject: CN=3263b25d360962d5e7b3178ab7a5f5d8ec77aae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3f:cf:64:c5:7a:bb:04:c8:99:fd:77:d2:1f:
d3:d3:00:dd:da:d6:17:b1:2a:c9:76:71:2e:ed:2c:
9d:56:1f:5c:0d:6c:55:9d:b4:b8:cb:dd:b7:09:1f:
ae:fc:0e:6f:7c:c1:10:bc:31:c3:55:cf:50:c8:6f:
8a:6c:78:ae:b1:81:0c:ef:50:9e:b4:3b:08:25:ff:
a3:26:ef:02:fb:5c:18:20:16:e7:b7:a8:b7:3b:91:
df:7f:e9:a9:19:17:8d:bd:01:8f:d2:a3:22:1a:16:
8a:70:51:c0:75:eb:d6:d7:a2:0a:e2:38:b6:0f:4d:
89:57:42:eb:f2:64:fe:d1:91:f5:6e:df:10:4f:a1:
34:69:eb:06:a5:c5:d4:3d:b1:6b:0b:eb:a9:74:ca:
31:f2:67:eb:c8:bf:0e:35:43:94:89:df:2c:2a:e8:
06:d7:71:66:84:57:22:cf:6a:1c:bb:f1:d9:e8:61:
b5:b9:b4:ed:dd:91:40:63:6e:de:f0:ea:99:de:33:
1b:79:c8:27:f5:22:b1:9a:9d:f8:96:49:45:f3:ea:
6f:24:ad:3c:8c:41:b1:c1:3d:6d:91:d2:66:c0:ab:
aa:fc:8b:1e:3d:f8:64:ff:8b:10:14:c3:a0:cf:d3:
1f:50:f9:3a:3e:f5:4f:e3:bb:23:db:c4:55:81:58:
90:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:63:B2:5D:36:09:62:D5:E7:B3:17:8A:B7:A5:F5:D8:EC:77:AA:E6
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f7:d5:32:c7:53:2f:32:1d:6e:3d:95:97:5f:e0:29:6c:15:
82:e8:19:df:30:59:4b:2d:2f:f8:a2:63:2b:ff:b0:cf:a0:34:
8b:53:59:bd:32:5a:69:b1:6c:81:42:ab:88:fe:16:d8:72:fd:
18:2e:c3:79:8b:15:9f:bb:71:a6:08:14:87:14:67:2b:44:3f:
e1:75:c2:9c:02:67:bd:dd:21:90:e2:05:71:60:5c:40:0c:dd:
c2:c0:af:d4:1b:32:5c:6b:d4:8d:d2:29:da:d8:2b:31:88:19:
a3:bb:bc:b1:18:b8:f0:3f:90:26:01:b6:0a:fa:43:cd:40:62:
dc:f4:fc:20:81:4c:ff:e7:68:7a:89:5c:18:7f:ac:14:85:6a:
25:f2:93:d7:fd:1b:53:f3:33:cc:d9:c4:1e:6c:05:55:df:8f:
41:06:f6:5e:1f:f1:5c:35:67:4f:23:24:76:ad:3f:73:ad:72:
b0:72:ff:06:73:33:47:4a:39:f5:ba:51:cf:c3:4e:91:35:20:
35:fe:d5:6e:9d:bd:b3:c9:d7:c4:4e:21:fa:87:88:0f:49:89:
d7:35:59:1c:8a:c7:66:09:7b:9b:f1:ba:b3:6e:52:6f:0c:d6:
72:27:25:9f:ef:02:1e:0f:d2:5c:e5:65:33:de:6c:12:06:25:
15:6d:62:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:15 2026 by rpki-client