Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier: kxICPNo1PRdSA0H75lF6gdyOQsSXTM8D+cZBVW8kki4=
Subject key identifier: 0F:7E:91:6A:3C:A4:47:BD:4A:AA:AC:FD:AE:22:AE:C5:F1:F1:B7:13
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial: 019D98BDBDD291245DDE3C39C6909C1DDA8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number: 0D92
Signing time: Fri 17 Apr 2026 00:01:04 +0000
Manifest this update: Fri 17 Apr 2026 00:01:04 +0000
Manifest next update: Sat 18 Apr 2026 00:01:04 +0000
Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: UDMa73SbQ07Jx+Wy8AsPDITHGcNEpZnL7jpuIazPhr0=)
2: xhDUoIsJaJCqOA6VTkyeMee_Z9s.roa (hash: bDCv1HCZJO4EbMKAw0lf46zS80bqNn1qKkmrw6hFSH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:bd:d2:91:24:5d:de:3c:39:c6:90:9c:1d:da:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Validity
Not Before: Apr 17 00:01:04 2026 GMT
Not After : Apr 18 00:01:04 2026 GMT
Subject: CN=0f7e916a3ca447bd4aaaacfdae22aec5f1f1b713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:14:aa:e9:a7:6d:77:46:f0:24:b5:c2:d2:
97:f0:8b:50:9c:41:4f:84:66:3a:e5:e1:49:19:5f:
9d:83:22:b6:17:8e:cc:a7:01:27:f9:4c:69:0b:e0:
97:54:81:e9:bb:2c:4a:17:6d:a2:e9:8b:e9:46:7a:
a6:fc:fa:e5:5c:1b:f1:da:e6:a4:88:b4:48:4d:ed:
db:48:9e:59:a0:7c:28:bd:4c:da:d1:c1:ca:11:f9:
af:c5:6b:80:cb:b7:ce:27:5a:8d:6d:79:bd:22:da:
f8:44:0f:cd:f1:39:64:3b:99:e0:4b:7f:3b:d2:12:
16:b2:e7:01:be:eb:bb:6c:43:fe:b4:f8:8e:51:23:
24:ff:f8:f3:3f:db:b6:1c:2c:71:c4:58:8b:bd:eb:
28:dc:e9:4f:f6:a0:a4:5a:c8:97:f1:05:12:27:53:
0d:5a:1b:13:db:c8:72:e5:57:de:5c:4b:cc:ba:18:
1d:51:b9:99:d6:80:2d:cc:da:fd:19:1a:1d:2c:08:
23:92:d8:cc:92:2c:80:c8:5f:25:c1:5a:59:7b:d7:
c9:0d:29:a1:84:3d:72:0a:5f:1f:58:fe:83:11:27:
67:da:be:90:c7:ee:2b:3f:fe:11:88:68:03:2c:08:
02:1f:d6:2a:32:fe:e4:7d:88:9e:c8:89:08:55:ba:
16:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7E:91:6A:3C:A4:47:BD:4A:AA:AC:FD:AE:22:AE:C5:F1:F1:B7:13
X509v3 Authority Key Identifier:
keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:96:ba:35:34:1b:a7:57:7a:a9:30:1c:75:8d:d5:77:ae:1e:
8f:0b:3e:83:0a:d8:c2:eb:bb:d3:79:fe:9a:16:3f:e6:d5:99:
f0:71:08:ef:f4:a8:0b:bb:a6:e5:13:93:3c:72:b6:4a:50:98:
23:e1:3e:47:57:39:c1:0a:0f:47:f7:e2:94:c8:8d:17:94:58:
7b:8c:ea:77:a1:f9:ff:da:66:7e:48:80:d4:5f:92:a2:c8:10:
25:d0:94:e2:b7:cb:24:28:07:45:bc:16:1b:96:a8:08:47:3d:
b3:3a:68:6c:0d:73:b0:a5:89:fe:f6:e1:bf:5f:02:29:c9:09:
6e:a5:d1:dc:22:52:ae:f4:14:82:60:4e:fa:97:27:8a:d7:68:
11:e7:8c:e6:7a:ff:d6:45:79:de:4f:8d:56:de:45:87:d2:cf:
a8:6c:70:03:af:62:31:1b:b0:0a:61:a7:10:b3:99:e9:1c:16:
7b:3a:6c:d1:17:7a:06:d9:98:b0:81:d1:75:29:ac:5f:4a:39:
cb:d4:5e:c9:8a:31:db:9e:34:17:12:57:26:c7:91:3a:6a:3f:
f9:01:9d:7f:e8:ce:24:ec:d9:34:f4:b3:0a:55:26:0f:9c:82:
64:64:c3:77:44:50:ec:8e:1b:39:89:4e:e3:98:99:f9:99:60:
9c:c9:cc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:38:40 2026 by rpki-client