
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
File: 9VW6bis9tVIdvHBipYwW3aG58i0.mft (raw, json)
Hash identifier: g3Fxd7OMumBWcNeZ9wZ7ivAqs6whob4xDXyS0gpeXcA=
Subject key identifier: 92:A4:08:6D:86:2E:88:B6:28:B6:3F:DE:32:FE:56:A4:8B:40:31:56
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 019D98BD1C5A1680D68AA88EAC3C1DFA568E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
Manifest number: 0682
Signing time: Fri 17 Apr 2026 00:00:23 +0000
Manifest this update: Fri 17 Apr 2026 00:00:23 +0000
Manifest next update: Sat 18 Apr 2026 00:00:23 +0000
Files and hashes: 1: 9VW6bis9tVIdvHBipYwW3aG58i0.crl (hash: 8u2oSLIjPYWfhpflHynmaI4doshkt9gq3ZlvCzeTAl0=)
2: cyWhzyh3zLHJFuzJ5qvmESBkuxg.roa (hash: nSoHpM2xTBolqQJtZsO8W8SsMxuMlo/mxOm1BoRL8ec=)
3: zlPMF36fK507KHhaEr_DLJ54RXA.roa (hash: kLxUmeXAHI9feHJRDQlAlUFvp1o7+yM0NCeSQpcomMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:1c:5a:16:80:d6:8a:a8:8e:ac:3c:1d:fa:56:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: Apr 17 00:00:23 2026 GMT
Not After : Apr 18 00:00:23 2026 GMT
Subject: CN=92a4086d862e88b628b63fde32fe56a48b403156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:b0:92:25:98:3b:46:62:fb:dc:fa:4d:59:
8c:61:3f:e7:a9:bf:74:c8:15:46:5b:40:1e:65:2f:
29:80:69:ba:2d:1b:a2:c4:a3:55:81:f8:5c:68:56:
bc:5f:6c:46:1e:05:e6:81:9e:3f:78:af:65:40:a9:
40:be:9f:3f:47:87:9d:07:10:bb:3b:a2:f9:6d:ec:
cd:6c:1b:a2:d0:d3:96:65:a5:84:ce:db:c5:49:a0:
a8:45:01:4e:43:dc:82:13:1d:9f:3e:ae:9a:6b:75:
58:92:9b:1a:bd:fd:cc:fe:ab:25:35:ba:ce:04:92:
18:0d:42:24:65:c2:28:08:24:83:75:e7:57:3f:7e:
e0:86:a6:09:4c:c4:44:95:86:82:5a:d3:8e:10:28:
72:0e:d2:f5:3f:42:ec:ac:4d:b6:c5:14:d3:06:46:
e0:19:09:1c:f9:fe:85:4d:84:b7:8f:57:bc:e5:b6:
42:b3:46:c6:67:88:39:3a:28:d2:e2:2b:2e:c3:05:
ee:24:f5:09:22:db:7f:39:1f:e2:b7:7a:e2:bb:c7:
8d:ee:d0:24:f4:9b:38:b7:9e:f7:59:9f:ae:05:81:
65:bb:56:98:38:38:28:45:9b:58:17:40:34:eb:81:
7a:67:a5:23:46:c7:ff:87:c4:2c:7e:b3:e9:0a:fc:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A4:08:6D:86:2E:88:B6:28:B6:3F:DE:32:FE:56:A4:8B:40:31:56
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:00:60:86:1d:c9:c6:f8:36:f2:03:38:ef:a7:e1:e7:21:d3:
e2:83:98:1d:90:63:66:37:ba:7c:ca:cf:ef:ca:22:d8:da:5b:
c7:89:68:a2:3a:38:7f:9a:9f:2f:c6:5d:77:4a:1d:f2:e3:ad:
80:6c:0f:1a:e5:a9:f3:ea:f0:8a:2e:1b:44:7d:9f:63:3c:13:
ee:ee:94:33:21:80:5f:2b:c8:18:91:4b:cd:a1:d7:0a:8f:12:
71:f8:b6:b3:ed:18:1f:51:8e:eb:92:b0:59:da:be:81:24:a4:
b3:ad:2b:bd:b7:da:43:80:ec:ec:90:12:5d:81:32:27:94:64:
3e:53:aa:86:f7:0a:81:1b:f4:d2:5b:0d:22:6e:d7:60:6e:eb:
dc:49:33:dd:91:01:48:d4:d7:25:19:b3:2e:d2:32:b3:7d:e2:
84:44:19:5d:55:83:62:48:4a:c5:b8:ee:67:fc:e4:56:c9:75:
17:08:2c:6f:d0:b9:aa:f5:ad:1f:7f:c7:29:a4:a1:78:35:f5:
e5:87:e7:c1:a1:b9:1c:10:6f:a8:77:d9:3a:74:f7:d4:12:43:
fc:70:ba:c9:dd:40:e1:85:22:40:84:25:24:a4:a7:a7:46:ec:
4d:6f:79:ba:8a:6d:25:17:a9:72:1f:5f:11:7d:11:10:d0:ad:
fe:58:b6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:49 2026 by rpki-client