Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File: 9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier: mYMMq4HBwxiF4gQigiXlGJn21H7A7CS+Ap69hggEQ6o=
Subject key identifier: 72:52:2E:A6:73:1A:F8:D2:E2:84:C4:73:E0:4C:9A:20:82:95:90:2A
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer: /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial: 019D9AAC3F72C198C166299B1A8F6E6FF879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number: 085C
Signing time: Fri 17 Apr 2026 09:01:12 +0000
Manifest this update: Fri 17 Apr 2026 09:01:12 +0000
Manifest next update: Sat 18 Apr 2026 09:01:12 +0000
Files and hashes: 1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: dc7yqTm6TfMaDVdhtE26jOMzVm3RUx/n16mgHAS8oIE=)
2: bOWNnQQVbM5f-UYg-QV5mDSs02I.roa (hash: ZHzPwAfR/0qTdqa3UIdlS72kIIMUcV3Y09FsBOM1tW0=)
3: c3mRC2zskUzL_6AdndC0KZP1S14.roa (hash: BCkPN8vUy3sfeplOO5KxZSim29zaECBgi+38mZOABLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:3f:72:c1:98:c1:66:29:9b:1a:8f:6e:6f:f8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f566016d878230128b58e279d661c195e6399588
Validity
Not Before: Apr 17 09:01:12 2026 GMT
Not After : Apr 18 09:01:12 2026 GMT
Subject: CN=72522ea6731af8d2e284c473e04c9a208295902a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cd:8b:c5:77:b9:02:ec:84:9a:f0:5c:dc:b5:
ea:ba:ab:e5:93:da:ba:bc:01:91:bf:5e:0c:ad:82:
c7:14:74:0d:37:f6:d2:2d:8a:d3:6b:fa:de:a8:1b:
08:0c:fe:ee:f9:0d:d6:c9:b7:9b:6a:b2:bd:5b:c1:
1e:8a:b9:89:d7:52:3e:dd:2c:61:55:d8:0c:b6:1b:
67:f3:01:2b:9e:af:b9:07:c0:74:44:a2:2f:f3:91:
84:93:56:d3:1e:1f:1c:ea:ec:2f:ae:a5:20:36:26:
c4:c6:ce:fb:47:d0:e8:e3:42:e3:11:c3:08:44:49:
a4:4b:f4:7a:95:ed:3b:28:8d:31:96:8f:fe:35:96:
c5:ea:30:d8:55:98:49:ad:67:4c:e5:f9:63:33:f2:
38:a1:7f:2e:f2:7e:75:c4:e5:96:d1:bf:65:8e:89:
cc:0f:23:93:0f:39:a8:54:e8:d3:2f:98:25:58:64:
d1:71:ff:fb:69:74:04:29:5c:ed:f9:8f:40:1d:a2:
81:4a:e3:52:74:9e:20:6d:cd:28:e4:99:c1:a7:5c:
ae:1a:20:83:16:08:de:33:af:a9:f9:40:fa:1b:7f:
1e:33:f1:de:fb:2c:0b:72:cc:7c:c8:20:c2:36:0d:
a4:31:e1:73:1c:5d:0b:3e:37:9d:56:23:42:1a:f7:
e8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:52:2E:A6:73:1A:F8:D2:E2:84:C4:73:E0:4C:9A:20:82:95:90:2A
X509v3 Authority Key Identifier:
keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b1:96:10:fc:0f:f1:4c:29:63:e7:88:a2:07:aa:12:a9:8b:
f9:40:b2:e9:d5:cb:e4:86:37:b0:04:6f:6a:ca:b6:87:d1:5e:
34:07:24:f1:fc:35:bd:d6:3a:d2:70:ec:6f:5e:fb:1c:07:e7:
61:cf:b5:82:05:e0:dd:b8:cc:f9:9a:e8:e8:84:0c:21:61:d8:
33:04:f7:12:24:ea:bb:65:14:ac:1b:16:86:36:34:14:85:68:
9b:54:5e:ca:d4:0a:9a:07:d7:34:25:d9:e6:59:48:87:94:38:
7c:a8:71:06:58:a6:f4:aa:46:72:e9:d9:fb:98:e4:fa:d2:9f:
d1:02:59:52:25:a4:1d:f6:4b:1b:5b:d1:91:97:8e:1d:29:3e:
a5:36:02:84:8b:d3:c6:50:86:0d:6b:3e:09:ab:3b:77:5a:41:
ed:bf:cd:43:3b:80:a2:a9:ba:ce:ab:e2:d3:b8:03:d0:76:e8:
ff:d9:04:e3:e1:9a:18:e3:e3:7a:40:cf:b9:4c:7d:b7:6b:e6:
48:94:8d:53:94:0f:28:02:39:00:c9:f6:d9:f9:12:0c:47:3f:
36:3e:2f:69:bd:0c:99:86:97:34:70:5e:47:6f:e5:36:ec:94:
70:d9:e5:19:83:7c:e1:b8:d0:ed:16:53:f8:3c:8d:a1:63:c8:
eb:bb:70:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:55:30 2026 by rpki-client