Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
File: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft (raw, json)
Hash identifier: iqZF3hNIBS5jN3xS1uBAKlrpwF2lzYiSmPeEwL51qcE=
Subject key identifier: DB:D4:98:C1:D8:D6:90:EA:A6:F3:B1:86:4F:5B:08:D4:18:87:C0:19
Authority key identifier: F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
Certificate issuer: /CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Certificate serial: 019D9B50A8ACA291BA217A9C3330BFFCCF36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
Manifest number: 0FA2
Signing time: Fri 17 Apr 2026 12:00:47 +0000
Manifest this update: Fri 17 Apr 2026 12:00:47 +0000
Manifest next update: Sat 18 Apr 2026 12:00:47 +0000
Files and hashes: 1: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl (hash: Rk2rptSLg8hjw++04mgTn+gSt12tmHL9IVhyd4b/V/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:a8:ac:a2:91:ba:21:7a:9c:33:30:bf:fc:cf:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Validity
Not Before: Apr 17 12:00:47 2026 GMT
Not After : Apr 18 12:00:47 2026 GMT
Subject: CN=dbd498c1d8d690eaa6f3b1864f5b08d41887c019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b9:7f:d7:71:90:71:e5:55:ad:c3:4d:29:d1:
c4:12:6d:f0:cb:b2:7e:63:ca:93:25:66:3c:09:86:
b1:0c:ca:10:12:57:81:c8:c8:f6:03:af:8b:87:e5:
f5:ce:f0:00:98:cd:ea:28:30:e5:6b:40:3e:90:59:
a7:03:36:d4:00:f7:0e:96:23:36:89:f3:78:27:e2:
9d:08:bb:5d:8e:1a:bb:53:7f:ee:17:0f:a6:cf:d5:
63:64:b5:69:0c:45:34:f1:3d:8c:52:a7:ef:bf:8b:
bc:9e:b2:62:72:5b:c6:f8:e9:08:7a:3b:81:af:5a:
78:5c:8f:ae:81:d6:e4:14:d6:57:6e:e1:b9:74:b9:
7a:7f:28:c0:ae:a8:fc:ae:2f:2a:f5:ad:0f:f9:be:
ea:3b:34:5e:d0:9e:ad:e5:20:8e:e6:2c:53:14:64:
14:9d:04:04:73:0c:e8:75:09:37:32:00:38:08:cb:
f5:04:ed:9d:36:59:01:77:7e:ec:4d:78:c8:53:a0:
49:6b:77:6a:55:1a:03:8f:67:da:b8:2e:b3:f1:3c:
a2:dd:a3:f6:cd:52:28:a0:e3:f4:66:43:49:1d:41:
0b:e8:ec:81:84:0c:f1:29:5c:dc:24:ad:c5:03:23:
64:9d:50:89:56:70:82:ab:2b:6f:a5:bd:fc:3a:03:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D4:98:C1:D8:D6:90:EA:A6:F3:B1:86:4F:5B:08:D4:18:87:C0:19
X509v3 Authority Key Identifier:
keyid:F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ad:1e:e1:4a:24:62:65:e1:47:40:98:7f:00:3e:07:f4:58:
04:84:e2:0e:0e:f9:af:47:e8:31:37:e4:8b:f8:cd:11:08:71:
7c:23:d0:45:c3:3b:b3:70:13:d4:78:55:80:6e:a4:34:ee:e2:
cf:16:12:14:11:fc:0a:f0:13:ac:a2:d8:1c:51:23:2d:00:66:
e8:f3:ee:f8:53:11:03:c3:3e:ae:9e:46:47:0b:1a:a4:2c:f5:
cc:e1:72:0d:e6:7f:55:36:89:79:a8:3c:e4:7a:63:7d:41:c2:
85:cb:47:63:9a:61:ff:9d:f4:ac:79:1a:b6:e1:df:c6:13:10:
f3:94:75:38:14:24:af:31:0b:cc:2d:19:0b:07:30:34:f7:34:
12:22:66:d6:c6:c7:83:5f:30:f9:a4:3d:21:67:c5:50:9a:6a:
8b:f3:e1:cd:72:3b:d8:fc:37:22:8e:6c:39:98:a0:b7:ba:70:
82:01:6a:58:cf:70:29:40:58:42:92:0a:e3:50:61:04:b4:a5:
4c:cb:fc:18:7f:e9:a7:62:08:cd:6c:3c:d6:17:4f:78:5f:02:
06:a8:06:64:3b:4a:d6:e6:a7:7b:19:bf:4e:40:a6:13:6b:b5:
18:0f:1f:d4:20:8a:5b:8f:e2:b9:b3:fb:ef:87:70:28:9b:d5:
84:83:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:50 2026 by rpki-client