Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
File: k9x15h5IPw1HkiHzynX8ciCWp-0.mft (raw, json)
Hash identifier: dO9axu79iShVvNUUeFUFkzjVDFXHFvXD90pSuEabE2o=
Subject key identifier: 4C:F3:43:88:16:22:84:C3:BB:52:36:90:11:57:6E:38:40:20:69:DC
Authority key identifier: 93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
Certificate issuer: /CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Certificate serial: 019D9C9A50CF60FF5BEE45764BF0ACB6514A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
Manifest number: 07A1
Signing time: Fri 17 Apr 2026 18:00:51 +0000
Manifest this update: Fri 17 Apr 2026 18:00:51 +0000
Manifest next update: Sat 18 Apr 2026 18:00:51 +0000
Files and hashes: 1: NtljOaIL1JwpiXLySyyvx4z_K-w.roa (hash: bTyr7ks2Z5N+mkb97LsrPJ8BXJjMNHN+ldTmfDHr8Xw=)
2: k9x15h5IPw1HkiHzynX8ciCWp-0.crl (hash: 35Lk324bNX97QXjYiabFGGUBrLBcETjUuU3BxRUtPjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:50:cf:60:ff:5b:ee:45:76:4b:f0:ac:b6:51:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Validity
Not Before: Apr 17 18:00:51 2026 GMT
Not After : Apr 18 18:00:51 2026 GMT
Subject: CN=4cf34388162284c3bb52369011576e38402069dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:59:ee:17:3a:5b:39:ce:ef:bb:33:d0:23:
46:14:b0:75:30:0e:ab:f2:59:91:ac:99:19:1f:1b:
34:3f:67:2e:03:72:f1:85:72:8c:36:51:6a:ac:1a:
b0:3a:13:b4:9f:71:6e:37:ed:29:3f:50:e3:23:6b:
d8:3b:e6:a8:b5:e2:8b:d1:ea:3a:02:c4:1f:d1:52:
3a:85:48:f8:42:80:6d:8c:b7:5a:d3:b0:91:6b:6c:
07:ff:38:ac:aa:d5:5b:e9:e5:e1:40:86:87:e1:bb:
51:8c:df:b7:da:58:98:5e:e6:23:d5:ab:f7:b2:18:
3c:01:52:25:95:fe:13:55:6c:6b:da:ff:49:72:42:
df:9c:41:6d:b3:6f:a1:ee:c5:d6:cf:49:34:09:90:
82:f7:84:75:3d:6d:c6:1e:1a:23:20:cb:64:24:a5:
09:1f:46:87:da:ce:e7:77:d8:f4:f8:a2:f2:60:f5:
b9:81:ed:da:c9:69:97:e2:39:4d:aa:2a:20:b8:f7:
f8:66:fc:51:e8:15:e6:ff:5a:2b:a2:6d:95:9c:60:
cc:0c:47:63:6d:6e:19:31:fd:8b:46:25:a7:93:d3:
32:cc:09:95:09:a6:44:73:40:4e:b4:4f:27:36:91:
e0:6b:5a:09:1c:d5:af:da:5d:89:40:e7:07:7c:ae:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F3:43:88:16:22:84:C3:BB:52:36:90:11:57:6E:38:40:20:69:DC
X509v3 Authority Key Identifier:
keyid:93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6e:14:93:2d:92:ed:e8:a6:d9:b1:71:d4:43:61:9d:13:c1:
20:b4:47:33:ba:60:ff:82:b7:f4:bd:bb:cc:ca:71:1f:12:d1:
14:01:d7:ae:93:2d:6e:d4:fc:6f:05:79:01:dd:c1:4b:9b:4f:
70:94:b4:e5:47:7f:56:9c:b0:0e:b5:13:de:c0:e2:c0:a0:b3:
73:8e:76:b7:78:e7:b0:ad:fb:0f:a8:1a:8e:ba:92:41:18:9f:
65:32:ee:19:97:90:b6:d2:0c:18:e6:93:8a:75:1a:05:e8:5b:
46:17:aa:48:50:f6:aa:75:f2:b7:0e:63:a7:20:7b:df:df:f2:
81:d7:8a:c5:2f:0a:bc:17:64:97:ae:9c:5e:83:b1:96:d7:37:
44:4d:0d:fb:b1:9e:3b:67:60:51:f1:5f:12:f4:98:ff:6b:5b:
6c:9f:6c:1f:cc:1d:bf:19:68:52:8e:5d:ef:24:c7:43:c2:e3:
28:75:d4:c6:17:97:ec:12:0b:58:33:59:6a:f6:8d:60:43:99:
c0:ee:d2:c3:8c:69:fc:a9:c3:c9:bc:cd:b8:63:67:86:d7:a1:
d7:a4:30:d9:73:54:b9:c6:a7:d3:63:4c:aa:f3:3d:4e:db:cc:
4a:30:ab:53:ce:48:93:85:46:e8:d4:8f:09:6a:fc:05:57:73:
a9:21:6f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:30:57 2026 by rpki-client