Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
File: E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft (raw, json)
Hash identifier: n8knF70eYH6xrNII0IWTfirD2vCSNGjHB+YZMrHj7KM=
Subject key identifier: 1D:3B:9F:2F:4F:09:B0:B5:F1:30:71:91:E8:98:F2:3C:FE:A9:02:91
Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
Certificate issuer: /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Certificate serial: 019D9A74BEA994E02DE179FFE9CE4211292D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 08:00:35 +0000
Manifest this update: Fri 17 Apr 2026 08:00:35 +0000
Manifest next update: Sat 18 Apr 2026 08:00:35 +0000
Files and hashes: 1: 8eoml7dYa0eoM9KDK5sW1rlposY.roa (hash: VOm0DAbeHrJJa6zbFFsa/wwwKrik//M4U5w54aGoMoQ=)
2: E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl (hash: oZumgcTWQjKCEgE8DTafRh3hLLm+i2vVbKIQzG3DprE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:be:a9:94:e0:2d:e1:79:ff:e9:ce:42:11:29:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Validity
Not Before: Apr 17 08:00:35 2026 GMT
Not After : Apr 18 08:00:35 2026 GMT
Subject: CN=1d3b9f2f4f09b0b5f1307191e898f23cfea90291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:86:76:62:ff:48:24:48:fd:46:9a:b4:ca:a5:
05:93:dd:fe:44:43:8b:cf:a4:65:a1:68:73:90:ab:
e5:44:b4:28:3c:56:dd:9f:6f:a3:47:f1:88:cf:0f:
c2:1c:51:dc:30:d1:d3:71:24:71:2f:38:76:fb:65:
43:2e:4f:38:3c:d5:31:7b:0a:a2:5d:f0:c8:e7:d0:
ee:a3:5f:8e:50:02:2c:97:6a:d7:a7:9c:95:c4:d6:
01:a4:71:a0:48:86:1c:bc:a1:63:c7:b9:73:91:d1:
60:2e:3b:b7:f1:ac:16:68:a1:1b:b4:3b:ef:15:77:
0b:c6:e9:53:90:f3:59:c2:c0:29:b3:9a:75:69:f3:
cc:72:83:9d:dc:29:c5:33:e9:7b:6a:1c:87:02:33:
4d:a9:60:df:2a:b6:b1:ee:91:a9:b4:cb:ec:0e:1f:
32:78:40:e3:6a:e6:be:b1:f7:02:2e:ec:ba:9c:af:
f5:15:9c:b8:90:2a:1d:66:38:af:43:61:77:c3:20:
69:f3:4e:6d:cb:67:2d:72:3a:fa:c5:94:8f:78:f0:
43:4f:6c:5f:02:2a:16:18:59:62:04:90:a3:33:0a:
be:9d:8f:88:b1:a0:41:02:b7:74:4a:a1:fd:ae:d5:
08:a0:3c:ff:24:3a:a5:dd:a0:f1:6c:03:1c:82:a2:
a4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3B:9F:2F:4F:09:B0:B5:F1:30:71:91:E8:98:F2:3C:FE:A9:02:91
X509v3 Authority Key Identifier:
keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f0:49:4d:bd:18:85:18:bb:d5:d7:d0:f8:21:f2:d9:61:0b:
a4:ef:a9:5e:b6:c2:b7:c6:a7:76:53:ab:2a:13:3d:64:96:97:
89:04:f4:8c:95:64:8c:eb:0a:6b:d6:78:eb:e5:15:21:82:56:
7d:7e:0a:27:b5:ae:d2:72:c9:6b:47:9b:7b:0c:36:18:93:aa:
30:37:6c:51:d0:8e:2f:c3:37:9d:f8:0f:d5:72:8c:b2:43:49:
5a:65:04:7c:4b:b3:31:7f:a7:3f:ef:31:b2:1e:9a:7a:04:ab:
00:17:67:7d:a8:21:c4:13:b3:8b:b1:8c:14:dd:d4:b5:ec:05:
0e:00:71:29:71:17:bd:3f:75:2b:c6:13:25:32:77:38:05:bd:
10:45:a4:49:94:9c:d7:d7:39:7e:e6:cf:a7:e1:6e:a8:40:38:
79:91:88:98:a7:22:7b:ec:90:05:a5:3a:8f:26:02:43:5d:03:
fb:94:32:02:5e:07:9f:b7:c4:73:0b:d4:0e:19:5c:ff:80:2c:
48:2b:f1:3c:ac:e2:57:ce:2a:4b:da:43:c2:47:bb:16:81:a1:
bb:ab:d4:bf:e1:5d:c2:1a:22:3b:47:87:1f:3c:73:d1:6b:f6:
4c:ca:c6:9e:fc:c9:b0:a9:22:06:06:ec:53:17:65:80:61:0e:
24:e1:76:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adL6plOAt4Xn/6c5CESktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZDYyMjIwNjQ4ZDZlZWU0MmFjOTJjMzk2YmYyZDFlODFh
ZTY1ZjcwHhcNMjYwNDE3MDgwMDM1WhcNMjYwNDE4MDgwMDM1WjAzMTEwLwYDVQQD
EygxZDNiOWYyZjRmMDliMGI1ZjEzMDcxOTFlODk4ZjIzY2ZlYTkwMjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YZ2Yv9IJEj9Rpq0yqUFk93+REOL
z6RloWhzkKvlRLQoPFbdn2+jR/GIzw/CHFHcMNHTcSRxLzh2+2VDLk84PNUxewqi
XfDI59Duo1+OUAIsl2rXp5yVxNYBpHGgSIYcvKFjx7lzkdFgLju38awWaKEbtDvv
FXcLxulTkPNZwsAps5p1afPMcoOd3CnFM+l7ahyHAjNNqWDfKrax7pGptMvsDh8y
eEDjaua+sfcCLuy6nK/1FZy4kCodZjivQ2F3wyBp805ty2ctcjr6xZSPePBDT2xf
AioWGFliBJCjMwq+nY+IsaBBArd0SqH9rtUIoDz/JDql3aDxbAMcgqKkhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB07ny9PCbC18TBxkeiY8jz+qQKRMB8GA1UdIwQY
MBaAFBPWIiBkjW7uQqySw5a/LR6BrmX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlZaUlHU05idTVDckpMRGxyOHRIb0d1WmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wYzI1OGEtNTIwMy00M2U2LTk2NzIt
ZmQ5Yzc0OTA2YmFhLzEvRTlZaUlHU05idTVDckpMRGxyOHRIb0d1WmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wYzI1OGEtNTIwMy00M2U2LTk2NzItZmQ5Yzc0OTA2YmFh
LzEvRTlZaUlHU05idTVDckpMRGxyOHRIb0d1WmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/BJTb0Y
hRi71dfQ+CHy2WELpO+pXrbCt8andlOrKhM9ZJaXiQT0jJVkjOsKa9Z46+UVIYJW
fX4KJ7Wu0nLJa0ebeww2GJOqMDdsUdCOL8M3nfgP1XKMskNJWmUEfEuzMX+nP+8x
sh6aegSrABdnfaghxBOzi7GMFN3UtewFDgBxKXEXvT91K8YTJTJ3OAW9EEWkSZSc
19c5fubPp+FuqEA4eZGImKcie+yQBaU6jyYCQ10D+5QyAl4Hn7fEcwvUDhlc/4As
SCvxPKziV84qS9pDwke7FoGhu6vUv+FdwhoiO0eHHzxz0Wv2TMrGnvzJsKkiBgbs
UxdlgGEOJOF2+A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:18:32 2026 by rpki-client