Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
File: 9vojpSZFyW2w3bFNJPa08FWfvis.mft (raw, json)
Hash identifier: IRb1pZIs5nxofd+DwtBtQYgHQiJ8ZZCpt73+w7Q6wmE=
Subject key identifier: 5B:BA:5D:C9:BF:D7:81:4A:32:AD:E6:CA:D8:80:93:0C:1D:D7:BD:85
Authority key identifier: F6:FA:23:A5:26:45:C9:6D:B0:DD:B1:4D:24:F6:B4:F0:55:9F:BE:2B
Certificate issuer: /CN=f6fa23a52645c96db0ddb14d24f6b4f0559fbe2b
Certificate serial: 019D9C6348381E9FC3D5FAC4DC7F5E81482F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
Manifest number: C3
Signing time: Fri 17 Apr 2026 17:00:45 +0000
Manifest this update: Fri 17 Apr 2026 17:00:45 +0000
Manifest next update: Sat 18 Apr 2026 17:00:45 +0000
Files and hashes: 1: 9vojpSZFyW2w3bFNJPa08FWfvis.crl (hash: WS+B+tVqBuhe0X+2TKYtlYGRXs16qwG9QMxb3QFhj6w=)
2: Y05s2C2gAhXtNYGjGMDlYLY9J1o.roa (hash: iorVZeRHEyFOVeQ+otFT4qEcKzaY5W8TFT5LOqiFu0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:48:38:1e:9f:c3:d5:fa:c4:dc:7f:5e:81:48:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6fa23a52645c96db0ddb14d24f6b4f0559fbe2b
Validity
Not Before: Apr 17 17:00:45 2026 GMT
Not After : Apr 18 17:00:45 2026 GMT
Subject: CN=5bba5dc9bfd7814a32ade6cad880930c1dd7bd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:57:1b:d9:1e:bc:8b:5b:c6:b3:9c:c2:db:cb:
4b:5d:f7:23:0e:f3:a0:a5:42:ae:7e:36:4e:0e:70:
e6:a2:5b:a1:2b:3e:c5:83:ef:7b:30:f4:6c:34:7f:
d4:bd:f6:c0:d5:5d:0e:a7:21:c4:d9:91:d6:33:f6:
53:bd:f1:c5:05:6c:e1:3a:a4:20:c1:64:ef:e2:23:
8c:38:5e:60:df:6c:8e:d3:7b:4f:a4:f5:35:e3:60:
02:3a:3f:d0:73:74:54:db:fd:12:30:bb:52:1c:69:
a7:0e:9f:c3:bc:d6:f3:c5:4f:bf:df:3d:2e:5c:7e:
be:3f:9f:83:a7:23:95:6b:d5:69:f6:00:77:0d:e8:
13:a8:60:55:16:ac:31:54:39:4c:23:86:62:42:bf:
ca:c8:6b:58:57:6a:43:a2:d2:9c:51:30:c1:23:49:
7d:a9:f1:3a:ee:3e:96:47:ae:d1:c3:09:59:6e:55:
c6:b6:4c:93:cd:ae:6d:c6:06:cb:7f:c2:49:2f:f1:
31:4d:51:34:6a:3c:30:80:c5:e6:c8:ab:39:ab:c1:
25:b9:f7:e1:f8:54:49:b9:65:a2:71:b6:e6:44:8b:
47:1f:05:9b:02:08:1f:c5:31:6a:f4:c7:a8:14:da:
de:2c:3c:eb:d5:10:63:5b:7c:07:6f:18:65:15:e3:
70:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BA:5D:C9:BF:D7:81:4A:32:AD:E6:CA:D8:80:93:0C:1D:D7:BD:85
X509v3 Authority Key Identifier:
keyid:F6:FA:23:A5:26:45:C9:6D:B0:DD:B1:4D:24:F6:B4:F0:55:9F:BE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8f:74:ac:20:6c:42:c6:d0:6f:2b:fd:b2:50:b3:27:c2:ca:
76:95:4a:dc:93:c1:e5:f2:d5:cd:86:fe:01:51:3a:a2:92:f7:
bc:52:ac:24:50:89:9d:6f:0a:61:c9:3c:44:fe:ac:aa:37:1f:
73:3a:6a:83:4a:3b:2f:b8:75:fc:c4:6a:75:26:90:e7:d0:56:
9e:cc:89:d3:b8:85:20:78:1b:63:9c:7d:a4:d7:73:86:74:a3:
21:3a:36:d9:d7:b7:71:3c:79:d2:2e:1d:98:4e:71:b7:f5:32:
ea:2f:27:15:7f:c4:2c:71:71:e7:97:27:50:30:d9:e8:81:77:
bd:91:0f:76:a4:eb:fd:09:4b:3a:e7:c6:52:e2:5f:3e:58:73:
9f:0c:f7:e6:b5:b3:d5:54:14:f8:a2:f4:a8:b6:15:e8:bd:2d:
43:b5:96:6b:a2:c1:05:13:2e:00:6f:c2:1d:ea:56:d9:2f:8f:
00:a4:f9:b3:24:da:0d:4d:23:97:54:fd:fc:3b:b1:93:32:6d:
aa:19:ed:50:ca:d5:12:8d:08:d5:ba:cc:0b:f2:e7:4d:6c:19:
fd:95:55:58:31:a5:ea:b0:6b:be:37:ef:c8:91:53:17:2f:49:
0d:6c:ba:f9:f9:ab:cf:fb:59:cf:09:74:3a:25:ee:36:47:61:
a2:0b:de:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:23:19 2026 by rpki-client