Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json)
Hash identifier: p0xcmrYCiWmVt7nrV1CCTjhBadPB8BkDLKYkjpaP9XU=
Subject key identifier: 0C:79:D0:B8:AF:B3:31:58:73:D3:52:10:7A:44:A5:05:B3:D7:A6:0A
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019D97AACDA7709DB23506B99EAF354EAAD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
Manifest number: 1957
Signing time: Thu 16 Apr 2026 19:00:46 +0000
Manifest this update: Thu 16 Apr 2026 19:00:46 +0000
Manifest next update: Fri 17 Apr 2026 19:00:46 +0000
Files and hashes: 1: 1-dWfWWM2Q4bjUSimugWWfOBMll4.roa (hash: 9k9cnyjwgTflpSvsCNop1Tp//B4oTSziXJvJrKx7enw=)
2: 1if2l0vuSUyA8aKOlZRwZBTqr58.roa (hash: MYKlinKANRkkXALYuH4dNJZg3DMiY6cZlGtlrNDBss0=)
3: 6c9spiMI22fbQ_S_riFTxN6JTnQ.roa (hash: WySy31z3A7Sqe9phj35VMgqeabINWeNkJj5/iHanhck=)
4: 9QOoNpd76OPVl49TOCbIH5K-Xuc.roa (hash: iHslUv59RlEtWqhiDG50P5ptUXczZiGq5UnFqrvblIU=)
5: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: 2iVoWDvpypm37nvo7Jyzgc/pS/ik6CHoCqBRAaDL7t4=)
6: Xlo2dAjL9Nrixz0iYa0SAY5SYBc.roa (hash: Bg+pB+Sxi3uvjFsg12Ez9WbynlaVnSIe2mie+DFh+2c=)
7: ih0mxzFH0MUiJNPNZCziaJJuGMU.roa (hash: Xd9Xc8lt28a42B6a+zDM/Y1fYiUSVn12an9g9QH+NKk=)
8: oiD41d0i1VuwEQttPBFodXn6upI.roa (hash: uAOn8Pa9tipVHC9vk2BfHXqfrIzw8lI2qK4bQp5y4a8=)
9: wUIQuE5RAl6yjUP9k5UHyxLRIPw.roa (hash: NCMtFKefqHShmwgJRWPFU+3g5xSc9WX2hSElA5v9Foo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:cd:a7:70:9d:b2:35:06:b9:9e:af:35:4e:aa:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Apr 16 19:00:46 2026 GMT
Not After : Apr 17 19:00:46 2026 GMT
Subject: CN=0c79d0b8afb3315873d352107a44a505b3d7a60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e9:4d:53:89:20:49:ca:a0:9f:a4:6f:84:5f:
62:ef:d3:43:07:4b:88:7a:2d:50:c1:63:64:97:93:
30:59:50:2b:05:01:51:be:f9:4c:2a:5e:5d:c9:f3:
48:82:84:95:13:84:93:42:fa:69:19:6b:08:5b:01:
4c:b2:6e:3e:cf:a2:f9:af:73:af:a2:8b:0d:67:e7:
29:49:53:90:c1:3b:24:45:f5:e5:2e:9e:09:27:66:
54:ce:a1:c6:51:4c:0d:e5:9e:71:65:4e:f1:43:09:
66:a7:c2:e8:9d:48:40:1e:d5:86:00:ea:b5:25:12:
fb:fb:57:db:6e:dd:a1:88:72:ad:2f:3b:ef:81:6c:
41:19:56:51:33:29:7a:7d:22:8e:1f:88:8a:f5:24:
0e:77:cd:9d:51:dc:65:24:fa:1f:8e:a1:6d:33:65:
8a:8b:5d:4c:43:0d:61:dd:4c:32:ad:f7:61:73:4b:
2a:bb:b1:0f:10:12:64:b8:db:21:cd:40:9e:99:67:
dd:16:90:10:2e:67:95:44:9f:ea:76:7e:c4:aa:c3:
ce:6e:2a:38:96:d7:da:25:4c:50:2f:69:d7:c8:7c:
90:2a:9f:1b:dc:0c:45:a4:a9:e4:16:fc:f6:bc:41:
c7:91:ec:71:82:d8:13:22:ef:49:44:ad:b0:48:65:
6a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:79:D0:B8:AF:B3:31:58:73:D3:52:10:7A:44:A5:05:B3:D7:A6:0A
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:40:fe:67:29:2e:dd:53:e9:16:4a:0e:55:5d:e0:88:6b:df:
b5:8b:3e:36:12:88:49:10:8b:db:19:41:f9:ba:a5:84:85:d7:
28:bd:48:c6:ec:1e:5f:7f:85:70:64:24:90:8a:61:5c:14:65:
63:4e:7a:04:b9:e0:6b:f8:1c:19:8e:04:72:8b:e6:78:ce:27:
15:ed:3d:2c:f1:7a:fc:c2:c0:b4:08:cc:de:ab:e4:35:7c:ba:
63:d5:ac:97:c7:0a:7c:ca:0a:4b:99:5b:96:50:19:b6:94:95:
50:8d:77:82:94:59:53:a7:bb:99:8f:b4:cb:ae:3a:2e:82:a0:
4c:e7:1a:b2:6d:4d:3b:cd:44:11:bb:92:48:29:c1:46:aa:86:
8d:08:a3:9d:44:f1:d5:31:fb:00:c4:c3:ec:ad:3e:9b:76:d8:
0d:21:eb:62:b8:bd:8e:7b:f4:b0:7a:ba:9e:81:14:ec:0b:8e:
82:e2:52:be:9d:0c:cc:0c:9c:b2:78:3b:f6:fb:c5:85:4b:4c:
10:9f:bc:6b:1f:13:9b:52:d5:b9:a1:36:74:74:88:86:1b:ae:
87:d3:93:8d:59:9d:c0:1e:3f:ae:c0:98:5a:3b:b3:cb:85:63:
a1:b0:36:f6:59:8d:6c:ed:0b:de:43:6e:15:d6:39:46:d8:a3:
57:1e:07:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Xqs2ncJ2yNQa5nq81TqrVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3
NTJhZTcwHhcNMjYwNDE2MTkwMDQ2WhcNMjYwNDE3MTkwMDQ2WjAzMTEwLwYDVQQD
EygwYzc5ZDBiOGFmYjMzMTU4NzNkMzUyMTA3YTQ0YTUwNWIzZDdhNjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlelNU4kgScqgn6RvhF9i79NDB0uI
ei1QwWNkl5MwWVArBQFRvvlMKl5dyfNIgoSVE4STQvppGWsIWwFMsm4+z6L5r3Ov
oosNZ+cpSVOQwTskRfXlLp4JJ2ZUzqHGUUwN5Z5xZU7xQwlmp8LonUhAHtWGAOq1
JRL7+1fbbt2hiHKtLzvvgWxBGVZRMyl6fSKOH4iK9SQOd82dUdxlJPofjqFtM2WK
i11MQw1h3Uwyrfdhc0squ7EPEBJkuNshzUCemWfdFpAQLmeVRJ/qdn7EqsPObio4
ltfaJUxQL2nXyHyQKp8b3AxFpKnkFvz2vEHHkexxgtgTIu9JRK2wSGVqIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAx50LivszFYc9NSEHpEpQWz16YKMB8GA1UdIwQY
MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt
MmI5MjBiZGUzOTkwLzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw
LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakD+Zyku
3VPpFkoOVV3giGvftYs+NhKISRCL2xlB+bqlhIXXKL1IxuweX3+FcGQkkIphXBRl
Y056BLnga/gcGY4EcovmeM4nFe09LPF6/MLAtAjM3qvkNXy6Y9Wsl8cKfMoKS5lb
llAZtpSVUI13gpRZU6e7mY+0y646LoKgTOcasm1NO81EEbuSSCnBRqqGjQijnUTx
1TH7AMTD7K0+m3bYDSHrYri9jnv0sHq6noEU7AuOguJSvp0MzAycsng79vvFhUtM
EJ+8ax8Tm1LVuaE2dHSIhhuuh9OTjVmdwB4/rsCYWjuzy4VjobA29lmNbO0L3kNu
FdY5RtijVx4Hrw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:55 2026 by rpki-client