Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
File: _9YayMVuOP32EjgDbHNUcnADRjE.mft (raw, json)
Hash identifier: GCtSLe9oQr6t9UrmkaJVGrPUNoJZ4X4UrLPeW0TCuDo=
Subject key identifier: 88:0F:43:D6:65:74:AB:11:D0:F2:9E:82:28:56:0C:91:A5:57:28:45
Authority key identifier: FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
Certificate issuer: /CN=ffd61ac8c56e38fdf61238036c73547270034631
Certificate serial: 019DA3AF2D950B07424114C4FD05DDDFD7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 03:00:59 +0000
Manifest this update: Sun 19 Apr 2026 03:00:59 +0000
Manifest next update: Mon 20 Apr 2026 03:00:59 +0000
Files and hashes: 1: _9YayMVuOP32EjgDbHNUcnADRjE.crl (hash: xqC14td6yT4t1gTBik67/BlTibwgmG8+G5Bfn1C5Vgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:2d:95:0b:07:42:41:14:c4:fd:05:dd:df:d7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd61ac8c56e38fdf61238036c73547270034631
Validity
Not Before: Apr 19 03:00:59 2026 GMT
Not After : Apr 20 03:00:59 2026 GMT
Subject: CN=880f43d66574ab11d0f29e8228560c91a5572845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:cd:6d:a6:46:55:29:b9:c8:4f:44:7f:1c:
3f:40:48:a4:22:52:39:7b:ef:b6:52:43:04:51:95:
82:40:cb:77:f1:d3:19:7d:d0:b9:44:0e:4a:17:1a:
dd:a1:aa:46:33:fd:68:3b:24:1b:5d:0e:e8:85:fd:
0c:d6:f3:94:6d:fe:21:3b:92:ae:71:27:45:47:88:
58:0c:46:18:6b:b3:5c:ff:a2:f3:ba:21:20:cb:57:
47:9a:1d:54:ef:20:a2:95:dd:91:d5:6f:20:b2:c5:
ca:18:ae:24:e0:7c:1c:c9:8b:db:0c:19:60:eb:3c:
68:45:9c:a6:46:af:da:be:a1:e9:13:fa:45:93:32:
bc:05:36:98:9f:89:a9:49:00:c0:84:7d:9c:52:03:
b8:00:e4:7e:ec:b1:ca:07:d5:d2:6f:60:4a:51:19:
44:7e:91:d0:f5:76:41:59:90:62:9a:68:8e:d1:67:
44:ea:cb:55:0b:94:ac:d6:68:f5:6d:46:bf:d6:53:
5a:f6:0b:92:84:76:14:16:50:b6:49:f0:7c:3e:69:
1f:8c:54:e1:3b:85:a5:ce:68:80:b5:8c:47:c9:84:
3a:4e:7b:58:6c:1f:01:2f:61:29:5c:cf:b5:b1:c6:
e9:66:dd:bc:b9:1c:3a:6f:e6:51:96:dc:e0:ce:aa:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0F:43:D6:65:74:AB:11:D0:F2:9E:82:28:56:0C:91:A5:57:28:45
X509v3 Authority Key Identifier:
keyid:FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:20:40:ec:ff:be:3d:d2:21:ab:17:1f:6c:fa:54:e2:11:55:
30:12:16:e9:1b:b5:3b:eb:7c:85:51:fe:5e:ec:de:5a:66:d8:
09:0c:93:63:10:5e:66:9e:05:12:81:b4:9d:aa:08:87:25:dc:
34:49:69:b3:0b:c0:e8:0c:db:d8:57:f3:c0:86:af:5b:b7:13:
8c:94:9e:cd:a6:e3:0d:47:f5:1c:6b:5c:4b:2e:78:b1:34:1a:
16:dc:e2:49:b3:4f:ab:9b:a4:8a:36:25:2d:c8:75:ab:29:39:
ad:a3:41:c4:db:97:a8:e3:61:8b:9a:c4:4b:c8:fa:40:36:03:
e5:66:6f:e2:c5:4a:ec:ea:1d:e8:41:03:e6:2c:01:fe:4f:c1:
bd:fd:ab:fc:c7:52:89:63:53:8a:af:97:05:2d:c2:d0:29:e5:
9d:c1:53:89:50:2f:70:c8:89:92:3b:be:8c:d0:c6:f8:8e:80:
e4:7e:84:b1:cb:f3:c2:f6:c3:17:36:e9:95:4c:d3:ff:b3:f6:
cf:f1:80:fb:3b:d6:0a:6d:e7:a2:bf:53:d8:e6:0f:ac:ec:e5:
6b:7b:98:f1:46:9f:cc:c4:08:54:a8:9b:88:2f:dd:9c:14:54:
83:ed:e1:db:a3:f2:46:c6:66:91:45:7a:b0:bc:55:51:14:93:
1c:52:a8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:04:24 2026 by rpki-client