Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
File: T9ZCEC691_ImjBTCfj678mtMr-s.mft (raw, json)
Hash identifier: +T2PCBH6o1cEqDvCRjge7g3JEk+N70zxj/dpcVn+Vmk=
Subject key identifier: 3D:E2:03:3C:F4:03:96:5C:76:26:0C:A4:37:43:07:8C:A3:93:56:57
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 019DA4C1642A9DC14F55DD4BCE954E89AC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
Manifest number: E9
Signing time: Sun 19 Apr 2026 08:00:30 +0000
Manifest this update: Sun 19 Apr 2026 08:00:30 +0000
Manifest next update: Mon 20 Apr 2026 08:00:30 +0000
Files and hashes: 1: FXU6diYKcbRIsw4MmevlGTpvGb0.roa (hash: aFnvjS1XXi7qixi4xTsDLaU24Ku8jOZbxW9SYMuhSJc=)
2: T9ZCEC691_ImjBTCfj678mtMr-s.crl (hash: plncyCKSLx0IQTPbxobNhiFWWAyghIgkRwhm/uppoyo=)
3: ZTOkVo51zjkueJP-_jF8sE0dlwI.roa (hash: qWI1aXm7aJOa2gqUSo121mJhm0HQWb9xB4CjBEm9B2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:64:2a:9d:c1:4f:55:dd:4b:ce:95:4e:89:ac:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Apr 19 08:00:30 2026 GMT
Not After : Apr 20 08:00:30 2026 GMT
Subject: CN=3de2033cf403965c76260ca43743078ca3935657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:29:c0:2b:00:3e:46:89:ea:12:94:6e:8b:
57:72:33:2e:6a:e4:2b:e3:8c:ae:d7:44:ef:cd:f4:
4c:b3:8f:75:6d:ba:e0:2e:26:b9:88:09:b0:83:5c:
5f:a0:f8:3d:2d:0b:86:ee:ea:75:ea:cc:29:62:ae:
bd:41:60:a6:9d:08:fb:4f:48:eb:5e:a2:5d:b2:48:
e3:15:7d:20:65:e9:11:cc:b5:74:36:e7:c3:c3:5e:
40:92:ce:02:5e:c3:80:1f:04:19:3c:a7:ac:e9:84:
3b:49:a5:3c:ac:99:03:80:94:35:67:20:37:a6:42:
d2:41:f0:0f:a3:b0:20:ba:64:ab:bb:38:df:f9:83:
18:ee:b3:54:9a:b2:2d:cd:89:6b:c4:3a:fa:20:f5:
3f:b9:ae:e9:af:db:d3:b6:bd:a0:7b:50:9c:48:50:
6d:20:5b:5d:fa:e7:eb:d3:47:6d:da:80:35:47:3e:
32:4b:81:97:a0:ee:22:93:eb:40:fa:ac:e7:12:8d:
7d:c1:f8:1f:65:c7:84:91:80:67:8d:c8:b8:a2:0d:
bc:b2:a1:20:1e:a1:b2:ad:be:5e:7d:3e:80:5d:75:
a1:fd:3c:85:66:7d:cf:1f:0a:83:f0:3e:09:bd:5e:
83:e0:dd:96:b1:27:72:45:c9:b2:27:2c:f3:c6:f8:
a7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E2:03:3C:F4:03:96:5C:76:26:0C:A4:37:43:07:8C:A3:93:56:57
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:89:a5:76:35:62:54:0a:8d:4a:5f:22:7f:30:63:e7:6f:b1:
ec:0e:60:a3:39:d4:c8:3f:ec:d8:ab:78:f8:d2:07:eb:67:3e:
68:9c:b9:9a:c1:04:37:28:4f:3a:90:54:e5:8e:6d:f3:87:42:
28:c8:5f:90:80:06:1a:f3:79:cb:41:80:dd:69:34:99:25:bc:
57:07:62:3b:06:2a:b1:3e:e6:c6:87:9b:7e:53:85:b3:ac:4c:
3c:60:5f:ac:a5:25:fe:c3:21:8d:9c:59:5b:7c:44:e8:46:94:
6b:18:6c:70:40:e3:cc:30:6b:57:9e:5b:0e:ea:58:04:cf:7a:
57:12:43:ff:c4:dd:75:30:07:9a:53:2a:00:7d:cb:1d:54:45:
3a:20:14:22:c7:e9:88:1e:82:73:84:76:4f:58:cd:e4:f9:ef:
dc:60:75:9b:98:d7:b0:78:b3:02:4f:ca:b0:a5:00:d3:90:11:
74:d3:ae:a5:6b:5c:e2:82:6a:0e:c4:73:6e:d9:40:e9:a0:4e:
01:de:b2:15:0d:ad:63:47:7c:43:53:b0:f2:8d:18:fd:07:39:
fa:e6:6c:24:62:b4:c5:95:66:e5:3d:13:59:1a:1c:1a:7b:a8:
dc:db:9c:1c:a8:36:6f:a6:30:e2:d9:6b:b9:51:bd:fd:e3:f8:
91:d1:c7:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kwWQqncFPVd1LzpVOiayMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZDY0MjEwMmViZGQ3ZjIyNjhjMTRjMjdlM2ViYmYyNmI0
Y2FmZWIwHhcNMjYwNDE5MDgwMDMwWhcNMjYwNDIwMDgwMDMwWjAzMTEwLwYDVQQD
EygzZGUyMDMzY2Y0MDM5NjVjNzYyNjBjYTQzNzQzMDc4Y2EzOTM1NjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTwpwCsAPkaJ6hKUbotXcjMuauQr
44yu10TvzfRMs491bbrgLia5iAmwg1xfoPg9LQuG7up16swpYq69QWCmnQj7T0jr
XqJdskjjFX0gZekRzLV0NufDw15Aks4CXsOAHwQZPKes6YQ7SaU8rJkDgJQ1ZyA3
pkLSQfAPo7AgumSruzjf+YMY7rNUmrItzYlrxDr6IPU/ua7pr9vTtr2ge1CcSFBt
IFtd+ufr00dt2oA1Rz4yS4GXoO4ik+tA+qznEo19wfgfZceEkYBnjci4og28sqEg
HqGyrb5efT6AXXWh/TyFZn3PHwqD8D4JvV6D4N2WsSdyRcmyJyzzxvinIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3iAzz0A5ZcdiYMpDdDB4yjk1ZXMB8GA1UdIwQY
MBaAFE/WQhAuvdfyJowUwn4+u/JrTK/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQt
Zjk0MWNjMzlhNzFlLzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQtZjk0MWNjMzlhNzFl
LzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYmldjVi
VAqNSl8ifzBj52+x7A5goznUyD/s2Kt4+NIH62c+aJy5msEENyhPOpBU5Y5t84dC
KMhfkIAGGvN5y0GA3Wk0mSW8VwdiOwYqsT7mxoebflOFs6xMPGBfrKUl/sMhjZxZ
W3xE6EaUaxhscEDjzDBrV55bDupYBM96VxJD/8TddTAHmlMqAH3LHVRFOiAUIsfp
iB6Cc4R2T1jN5Pnv3GB1m5jXsHizAk/KsKUA05ARdNOupWtc4oJqDsRzbtlA6aBO
Ad6yFQ2tY0d8Q1Ow8o0Y/Qc5+uZsJGK0xZVm5T0TWRocGnuo3NucHKg2b6Yw4tlr
uVG9/eP4kdHHow==
-----END CERTIFICATE-----
Generated at Sun Apr 19 16:13:23 2026 by rpki-client