Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File: 9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier: dHL33O8RWMOVH6ZmlSYhbQEZ5eOja+H4Y9LFz5ioyzw=
Subject key identifier: E3:E6:BA:56:C3:67:10:56:00:75:01:8A:76:78:0D:13:47:42:BE:6B
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer: /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial: 019DA3787CBD1438B32788B9C318B8B660C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number: 0DA9
Signing time: Sun 19 Apr 2026 02:01:15 +0000
Manifest this update: Sun 19 Apr 2026 02:01:15 +0000
Manifest next update: Mon 20 Apr 2026 02:01:15 +0000
Files and hashes: 1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: uQHVJ0grT5AS5GnldAHT4jZ5EtFMGbmD6UbVv+W1oPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:7c:bd:14:38:b3:27:88:b9:c3:18:b8:b6:60:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Validity
Not Before: Apr 19 02:01:15 2026 GMT
Not After : Apr 20 02:01:15 2026 GMT
Subject: CN=e3e6ba56c36710560075018a76780d134742be6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f7:1e:33:2d:31:21:98:f5:7c:26:d5:6b:ae:
60:7c:13:6b:58:53:32:d8:9d:68:fd:94:d9:26:76:
60:64:52:f4:1b:c0:41:8f:69:3a:e5:80:09:55:d1:
c9:81:33:6a:3e:9e:c6:e9:26:89:39:80:8e:b3:8f:
01:84:ec:f7:ad:53:9e:e8:5d:c9:0e:6f:e7:14:55:
a9:07:10:12:20:fd:ed:e8:74:23:57:ff:96:78:d2:
82:1a:c0:a1:d2:b0:59:ab:2e:86:18:2c:2e:83:df:
7e:3d:b9:5c:2f:9f:77:e6:72:ce:6b:07:2c:cd:1f:
a4:01:e9:b3:2a:36:75:64:da:aa:eb:f7:a4:6e:e0:
75:36:10:b4:9e:d8:cb:b2:9c:3b:35:37:ac:7b:53:
24:c3:c4:11:5b:10:a4:f9:74:bb:ef:9f:cd:1a:a0:
bf:2b:46:cf:33:1b:95:1d:e6:2e:97:bb:c6:4f:f2:
78:75:a3:dc:15:1c:7e:62:bf:8e:32:d0:0f:22:0b:
4e:dd:03:7f:49:4f:a2:6a:e8:2c:62:00:1c:5c:b9:
5a:f2:0e:db:10:9f:aa:9c:2d:53:8f:7c:09:23:f9:
87:75:30:06:db:e6:13:f0:93:50:4c:c4:66:b3:37:
b7:ab:bd:27:d2:2e:d9:4e:48:d1:fb:29:51:1a:9e:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E6:BA:56:C3:67:10:56:00:75:01:8A:76:78:0D:13:47:42:BE:6B
X509v3 Authority Key Identifier:
keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:aa:27:3f:00:44:c8:84:37:a5:ac:af:3d:9e:7a:98:8c:51:
46:5d:ab:ac:9f:68:8c:67:dd:40:44:ed:b8:11:d8:a9:d0:f9:
f8:0c:00:6b:9c:cb:21:fd:71:a0:8e:e9:68:17:a0:50:a7:ca:
99:e3:a8:e4:89:36:74:79:32:39:84:58:4e:7a:a8:33:a6:96:
3f:f0:9f:bf:70:4d:d1:c8:f6:69:0e:27:91:0c:71:8e:23:de:
62:df:a9:05:54:3c:42:fa:d3:f5:e0:29:8c:50:d9:f6:05:ed:
f7:86:35:80:69:90:17:be:51:f5:77:17:75:8a:9e:3c:65:15:
7e:3e:5f:a4:0d:d5:90:f0:af:31:13:f7:58:c4:81:74:2e:11:
2d:65:2a:29:88:59:67:92:5f:e0:45:a5:d8:ae:97:58:51:f9:
02:bb:62:e8:1d:0c:16:6a:ec:2c:d4:64:f9:2e:bd:86:46:a8:
f4:f6:c0:1d:23:86:15:92:66:9a:ed:48:8e:fd:00:22:86:02:
0c:29:1c:62:ea:bb:6b:dc:fc:7a:11:08:97:3c:07:1f:62:3b:
a5:48:15:e3:20:f7:1c:fd:f3:43:cc:1f:13:e0:d5:42:6a:51:
b4:06:83:12:d6:3c:22:e3:82:85:30:e7:e6:30:fa:db:1f:9b:
17:a6:75:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:26 2026 by rpki-client