Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier: Sh5Z+k7Ir/7UxpfQQSDpsyWEYc3BcLSanUMxUV/9vPU=
Subject key identifier: C9:D3:93:33:8E:13:72:95:52:85:BF:41:65:6B:C7:A5:BA:93:F5:CD
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial: 019D9AE31DEAE0C45F2DFE000136EDE10969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number: 0D1B
Signing time: Fri 17 Apr 2026 10:01:08 +0000
Manifest this update: Fri 17 Apr 2026 10:01:08 +0000
Manifest next update: Sat 18 Apr 2026 10:01:08 +0000
Files and hashes: 1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: /+5cpTVOs01L445N43VsZfz70RdHHd0Grp/YrzSoGC0=)
2: 3hEZWyItuy9dwAtzmZ-AFWLhT5w.roa (hash: L+BYsmG/Ibo7acCTPtDZVtgHekYwJ5+kmxxZnt4e2i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:1d:ea:e0:c4:5f:2d:fe:00:01:36:ed:e1:09:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Validity
Not Before: Apr 17 10:01:08 2026 GMT
Not After : Apr 18 10:01:08 2026 GMT
Subject: CN=c9d393338e1372955285bf41656bc7a5ba93f5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4e:de:02:7f:29:6f:0f:b7:21:5a:2b:7d:89:
08:10:71:8c:f9:44:3b:4b:2f:03:24:8b:ad:46:cc:
ed:95:f8:f3:57:12:12:29:c6:02:f0:40:fb:f4:15:
02:52:46:be:22:d5:46:3b:3d:44:10:f1:c1:86:68:
9e:4d:f7:a6:8e:c8:15:cd:0e:e6:4c:e1:68:ec:fc:
72:5e:04:99:77:2e:d7:36:3e:55:7f:3a:35:7f:7f:
2d:bd:5d:73:06:6a:f9:8f:5c:54:38:13:5c:ff:2a:
a3:53:a6:19:39:85:15:9b:97:c8:ef:90:4f:95:cb:
dc:f0:79:74:0c:a5:04:63:0e:cf:91:26:84:2e:35:
7e:6f:d4:6f:fc:ea:90:98:d6:a9:9a:ab:af:34:4a:
1b:47:1d:ea:55:eb:2d:c3:83:b6:2d:6b:9e:90:71:
07:a3:99:ba:2b:c6:97:c0:e2:33:58:d4:de:c7:4b:
45:8c:43:f6:c8:b4:9b:a4:2f:27:6c:04:14:4a:ca:
f6:98:df:8a:61:b2:0b:4c:e6:06:5f:5f:f6:32:86:
31:19:2d:d3:da:04:f3:35:1b:49:1a:2b:fa:da:a4:
ad:34:09:fa:b2:c3:8c:f7:26:fc:2c:87:2c:3f:2b:
48:2d:35:68:de:e3:b3:df:50:b1:19:ea:ce:ba:08:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D3:93:33:8E:13:72:95:52:85:BF:41:65:6B:C7:A5:BA:93:F5:CD
X509v3 Authority Key Identifier:
keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a2:87:21:1b:b3:47:61:e2:a2:4d:ed:13:0c:98:03:b4:8c:
93:e7:26:ad:d5:91:be:ef:bf:43:2b:d4:0d:11:ba:a7:8f:89:
6d:98:e1:98:88:66:9d:ee:17:85:e7:3e:b0:f8:67:fd:73:e4:
b5:f9:c5:2c:60:72:9c:0d:8c:fa:9b:e7:71:51:ca:08:e4:0f:
f8:ec:9d:7e:eb:e3:69:dd:33:e5:d6:ae:d2:15:ce:9a:4b:70:
9b:2e:aa:31:76:eb:63:42:00:02:d2:4b:2c:02:c0:d2:ff:35:
c7:73:29:8d:71:00:ae:0b:af:f8:01:8c:e1:dc:93:f8:3b:79:
c0:3a:58:a1:88:c3:27:a9:2d:45:0b:7c:f0:b0:36:2a:63:92:
b0:9f:1b:5a:60:59:9a:9d:f1:18:66:78:79:0e:18:74:56:bd:
65:1e:9b:6c:eb:5a:fd:97:b6:b8:17:6e:ce:dd:4e:ab:39:ea:
0b:34:5c:ae:f8:f6:14:6c:a6:c8:96:4c:90:74:6d:c3:bf:a3:
35:3e:cf:9b:14:5e:0d:00:ce:bd:33:42:bc:16:1f:54:37:42:
3d:36:1f:d3:a6:68:02:05:35:ed:29:4b:d8:c2:23:b4:47:f0:
aa:34:b3:3b:18:ca:e3:a4:a2:8e:da:29:21:c0:a0:c6:20:c2:
b6:f4:47:ee
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2a4x3q4MRfLf4AATbt4QlpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDMyOTY4YWFhYTkxOWM1Mjc5MWZmYjA3ZjkzNDM2Yjc0
ZmQ1MDgwHhcNMjYwNDE3MTAwMTA4WhcNMjYwNDE4MTAwMTA4WjAzMTEwLwYDVQQD
EyhjOWQzOTMzMzhlMTM3Mjk1NTI4NWJmNDE2NTZiYzdhNWJhOTNmNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk07eAn8pbw+3IVorfYkIEHGM+UQ7
Sy8DJIutRsztlfjzVxISKcYC8ED79BUCUka+ItVGOz1EEPHBhmieTfemjsgVzQ7m
TOFo7PxyXgSZdy7XNj5Vfzo1f38tvV1zBmr5j1xUOBNc/yqjU6YZOYUVm5fI75BP
lcvc8Hl0DKUEYw7PkSaELjV+b9Rv/OqQmNapmquvNEobRx3qVestw4O2LWuekHEH
o5m6K8aXwOIzWNTex0tFjEP2yLSbpC8nbAQUSsr2mN+KYbILTOYGX1/2MoYxGS3T
2gTzNRtJGiv62qStNAn6ssOM9yb8LIcsPytILTVo3uOz31CxGerOugjvKwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMnTkzOOE3KVUoW/QWVrx6W6k/XNMB8GA1UdIwQY
MBaAFPvTKWiqqpGcUnkf+wf5NDa3T9UIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05TXBhS3Fxa1p4U2VSXzdCX2swTnJkUDFRZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNzIzYjE1LWZhYWMtNDFmZi1hMWFh
LTg4NzM5ZTMzNTA1My8xLzEtOU1wYUtxcWtaeFNlUl83Ql9rME5yZFAxUWcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2EwLzcyM2IxNS1mYWFjLTQxZmYtYTFhYS04ODczOWUzMzUw
NTMvMS8xLTlNcGFLcXFrWnhTZVJfN0JfazBOcmRQMVFnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6KH
IRuzR2Hiok3tEwyYA7SMk+cmrdWRvu+/QyvUDRG6p4+JbZjhmIhmne4Xhec+sPhn
/XPktfnFLGBynA2M+pvncVHKCOQP+Oydfuvjad0z5dau0hXOmktwmy6qMXbrY0IA
AtJLLALA0v81x3MpjXEArguv+AGM4dyT+Dt5wDpYoYjDJ6ktRQt88LA2KmOSsJ8b
WmBZmp3xGGZ4eQ4YdFa9ZR6bbOta/Ze2uBduzt1OqznqCzRcrvj2FGymyJZMkHRt
w7+jNT7PmxReDQDOvTNCvBYfVDdCPTYf06ZoAgU17SlL2MIjtEfwqjSzOxjK46Si
jtopIcCgxiDCtvRH7g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:22 2026 by rpki-client