Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
File: i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft (raw, json)
Hash identifier: 0wedTCYNwcyUNFAxdbfe69XOIHSInQnqGvrKuLWsuYA=
Subject key identifier: 2C:AA:BA:EB:7E:CF:EF:F7:BA:7B:B3:E0:F1:61:52:B6:76:36:F9:8A
Authority key identifier: 8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
Certificate issuer: /CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Certificate serial: 019D9B87CC2A62EF4CB6D9E09839A4694997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 13:01:01 +0000
Manifest this update: Fri 17 Apr 2026 13:01:01 +0000
Manifest next update: Sat 18 Apr 2026 13:01:01 +0000
Files and hashes: 1: ReFoU0vqMdItTbwZ4tOM7bCmAhg.roa (hash: AuLdH8lMRAM53ImTxBSwBIPLZa61IiJ7LX4/1Usrvg0=)
2: i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl (hash: mb6Ch61BKv9REeShU0CpiOEvDYSsPp6/1ogQKiMPNlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:cc:2a:62:ef:4c:b6:d9:e0:98:39:a4:69:49:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Validity
Not Before: Apr 17 13:01:01 2026 GMT
Not After : Apr 18 13:01:01 2026 GMT
Subject: CN=2caabaeb7ecfeff7ba7bb3e0f16152b67636f98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:67:d3:b5:ad:35:c4:5d:58:e0:ba:28:b5:
52:15:ef:d5:14:15:c3:7b:52:7d:25:1c:b9:cb:63:
2c:cf:ae:d4:03:68:21:70:a1:8f:ff:fd:98:5d:41:
ae:81:1f:27:e8:4a:56:e5:e4:21:f3:19:26:72:fa:
69:d1:e6:f0:a4:99:97:cf:8f:0c:bb:d2:a5:04:36:
d8:c1:a7:b0:4b:ca:ac:98:43:7a:ed:f2:b4:7e:e6:
1e:51:53:d8:13:22:e7:bc:91:b2:06:33:a3:6b:4c:
cf:a1:e0:da:a6:c1:27:35:4d:a8:e9:0f:af:e1:17:
c4:33:96:b8:52:3a:0a:da:e1:ef:3f:a8:18:ba:db:
8c:0d:01:4a:a3:1c:4c:e4:a7:6d:bd:43:d7:70:85:
e7:6e:71:90:62:9c:dc:6f:50:62:d6:cf:6e:84:81:
6e:8d:26:6a:79:9b:2e:2f:96:d1:d4:00:b6:ef:32:
b3:b4:92:5f:c1:14:86:68:41:28:61:d4:08:56:12:
3e:e5:9f:22:33:c4:bd:3f:da:0d:a5:05:dc:97:d1:
d6:f8:d4:6a:c0:a1:2c:77:c7:15:ec:da:6d:b7:ab:
ca:a8:56:bc:af:10:05:d7:4d:00:91:14:be:49:af:
fb:f1:44:ee:cf:26:8f:92:02:a1:bc:a6:31:1a:a3:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AA:BA:EB:7E:CF:EF:F7:BA:7B:B3:E0:F1:61:52:B6:76:36:F9:8A
X509v3 Authority Key Identifier:
keyid:8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:66:d7:b5:a8:9d:14:77:a8:c4:af:e7:9c:63:bd:a2:2c:44:
88:06:ed:bd:00:bd:66:5e:41:27:f8:1c:8a:4f:d1:2b:14:6c:
e3:9f:6b:5e:a5:b8:13:82:24:7d:45:4b:d9:44:a6:ab:27:fd:
25:7e:a2:f7:a3:a9:40:38:78:38:ec:25:5d:1a:56:75:64:ed:
6c:0d:0f:8a:3f:ff:c7:bc:d1:d5:24:d3:82:a1:f6:95:08:64:
39:c1:55:d6:a3:e8:22:36:5f:ea:77:47:ef:43:a0:bf:6b:05:
7c:f7:73:e8:00:af:f8:54:24:ca:0b:f5:de:37:6c:e6:30:08:
f9:a5:41:e6:63:d5:3d:ee:b3:27:87:47:b5:61:b4:4c:66:e2:
ed:7f:d5:61:4b:0d:b9:64:35:22:80:df:74:69:45:d4:ca:4b:
04:29:ab:73:a9:7b:9a:b4:b6:3d:1e:1d:47:0e:31:4b:4c:07:
a9:91:90:44:3e:94:52:7d:b9:3f:00:10:d4:99:f1:50:a5:4f:
25:9d:0c:0e:ef:79:0e:1e:78:94:e5:82:11:e7:29:c8:1d:41:
95:08:f1:e0:04:af:cb:11:e6:bf:76:7a:f3:15:19:69:d5:57:
ef:17:9c:d7:2d:87:8a:3c:b2:53:1f:22:db:9d:6e:a5:83:46:
96:72:73:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh8wqYu9MttngmDmkaUmXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGM1M2NjMjI2M2Y2ZmRlYTE3MGQzMjgyYTIwYjhlNzE2
MDczODYwHhcNMjYwNDE3MTMwMTAxWhcNMjYwNDE4MTMwMTAxWjAzMTEwLwYDVQQD
EygyY2FhYmFlYjdlY2ZlZmY3YmE3YmIzZTBmMTYxNTJiNjc2MzZmOThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBtn07WtNcRdWOC6KLVSFe/VFBXD
e1J9JRy5y2Msz67UA2ghcKGP//2YXUGugR8n6EpW5eQh8xkmcvpp0ebwpJmXz48M
u9KlBDbYwaewS8qsmEN67fK0fuYeUVPYEyLnvJGyBjOja0zPoeDapsEnNU2o6Q+v
4RfEM5a4UjoK2uHvP6gYutuMDQFKoxxM5KdtvUPXcIXnbnGQYpzcb1Bi1s9uhIFu
jSZqeZsuL5bR1AC27zKztJJfwRSGaEEoYdQIVhI+5Z8iM8S9P9oNpQXcl9HW+NRq
wKEsd8cV7Nptt6vKqFa8rxAF100AkRS+Sa/78UTuzyaPkgKhvKYxGqOc7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyquut+z+/3unuz4PFhUrZ2NvmKMB8GA1UdIwQY
MBaAFIvcU8wiY/b96hcNMoKiC45xYHOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTl4VHpDSmo5djNxRncweWdxSUxqbkZnYzRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzc0MmYtMWQ3MC00ZjMxLWE5Y2Et
N2FjYjIxYmE3NzNmLzEvaTl4VHpDSmo5djNxRncweWdxSUxqbkZnYzRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yMzc0MmYtMWQ3MC00ZjMxLWE5Y2EtN2FjYjIxYmE3NzNm
LzEvaTl4VHpDSmo5djNxRncweWdxSUxqbkZnYzRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWbXtaid
FHeoxK/nnGO9oixEiAbtvQC9Zl5BJ/gcik/RKxRs459rXqW4E4IkfUVL2USmqyf9
JX6i96OpQDh4OOwlXRpWdWTtbA0Pij//x7zR1STTgqH2lQhkOcFV1qPoIjZf6ndH
70Ogv2sFfPdz6ACv+FQkygv13jds5jAI+aVB5mPVPe6zJ4dHtWG0TGbi7X/VYUsN
uWQ1IoDfdGlF1MpLBCmrc6l7mrS2PR4dRw4xS0wHqZGQRD6UUn25PwAQ1JnxUKVP
JZ0MDu95Dh54lOWCEecpyB1BlQjx4ASvyxHmv3Z68xUZadVX7xec1y2HijyyUx8i
251upYNGlnJzcA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:07:55 2026 by rpki-client