Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
File: 309yD7vOaxVdc1fb5xJspWwevnU.mft (raw, json)
Hash identifier: J6eXKDz2SAqWpVkMs1Dt0c7r/n5UjxEffeWk2yc3l7U=
Subject key identifier: C7:75:82:40:48:44:7B:B8:AF:22:19:92:20:3C:EA:3E:75:D4:4F:5B
Authority key identifier: DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75
Certificate issuer: /CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75
Certificate serial: 019DA4F955872AA465589978495AA17BE2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
Manifest number: 0470
Signing time: Sun 19 Apr 2026 09:01:36 +0000
Manifest this update: Sun 19 Apr 2026 09:01:36 +0000
Manifest next update: Mon 20 Apr 2026 09:01:36 +0000
Files and hashes: 1: 309yD7vOaxVdc1fb5xJspWwevnU.crl (hash: 6CZ41bONaSzheKmEQ8b7tvYQhcnzLDvJUAe3gn3NcM0=)
2: ZiAi_TdUfMkb3j8gN1a3XiArDYg.roa (hash: p3ud5x+KgWlnChdbJ3zLdy64GsE5PLnEtLECSRQZh38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:55:87:2a:a4:65:58:99:78:49:5a:a1:7b:e2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75
Validity
Not Before: Apr 19 09:01:36 2026 GMT
Not After : Apr 20 09:01:36 2026 GMT
Subject: CN=c775824048447bb8af221992203cea3e75d44f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:8e:3c:5c:a4:d5:0f:56:32:40:58:00:87:
16:8a:4c:ed:1b:34:f8:50:52:e3:ff:fe:63:42:ab:
5b:d7:c1:54:8e:27:ac:5c:be:23:01:ee:ad:a8:15:
22:75:68:16:e1:4c:08:15:40:f1:5d:85:0f:79:10:
65:d0:ba:b2:0c:8c:32:a5:00:d2:9b:22:9a:08:15:
23:e8:28:36:0f:4e:5c:d2:63:aa:5e:3d:65:7d:7c:
24:71:93:85:c9:66:b2:13:a0:39:aa:f7:a0:08:bb:
7c:44:ed:4e:59:c9:fb:59:67:46:a3:4a:07:5d:f8:
13:93:a5:ee:4e:86:12:b9:8d:03:a3:b5:a4:5a:e8:
7c:ba:f0:81:70:1c:3b:b6:c6:4b:02:fa:76:fd:83:
0a:43:d0:17:a9:c7:83:26:1d:99:85:17:d1:c6:44:
bd:ae:25:51:9a:eb:25:70:dc:09:fc:af:33:03:0f:
ac:4a:1b:81:27:62:96:14:9a:7a:58:5f:3d:5a:c5:
31:4d:8b:2e:34:76:9e:b6:2c:b0:d9:7e:b2:13:c4:
74:c3:4d:52:97:43:be:1e:2d:fc:99:1f:7e:1b:e8:
30:0f:fc:34:07:a3:b9:5c:06:8c:16:d8:a8:01:62:
3e:c5:f2:49:88:8d:55:53:9d:dd:87:bd:83:c4:6d:
d7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:75:82:40:48:44:7B:B8:AF:22:19:92:20:3C:EA:3E:75:D4:4F:5B
X509v3 Authority Key Identifier:
keyid:DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ae:f9:78:c8:15:f7:43:bd:b1:7c:c7:30:d0:05:82:c9:d0:
79:6e:57:04:20:4f:28:18:28:17:d5:07:29:82:d5:f7:51:3a:
d6:2d:36:f7:73:cb:af:62:1b:05:cc:2a:d1:7f:9c:82:bb:c5:
e2:33:d2:1c:8f:de:0a:51:6f:ff:ec:24:3e:99:22:50:20:61:
83:ba:d5:aa:21:1b:82:65:28:16:12:f9:b1:5e:48:b0:80:d3:
73:b3:2b:79:16:8c:03:b3:7d:d3:be:91:1e:ca:e2:e3:d5:e7:
0b:5b:2f:64:4a:23:a0:3e:0e:f5:e8:1c:72:b6:fc:1f:ff:47:
29:aa:ba:6f:9a:2b:3e:e8:90:f5:c5:54:4d:8d:6f:ef:32:45:
ec:6b:c1:28:79:2f:4f:f0:e1:2e:47:de:c2:74:4d:29:c3:96:
27:a5:c8:f8:01:49:94:cd:1a:e1:9e:0e:6a:04:15:94:91:f6:
13:f5:dd:5c:e8:89:7d:b6:f8:b4:8d:ad:3f:58:57:3e:e0:90:
a6:96:0f:92:16:1d:08:44:3a:44:d6:d5:ce:52:f5:fc:3e:db:
9a:d4:1e:1a:1d:8d:ba:b1:4b:7f:b0:b3:4e:21:55:13:68:14:
b6:6c:38:9a:71:d9:b1:e9:78:2f:05:64:49:68:a7:6e:17:0e:
62:01:32:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 19:03:15 2026 by rpki-client