Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: pXbcmSQdX34XX1rut68mp5sCgK1JN+9Ajpd4/nl1lyU=
Subject key identifier: 97:3E:7F:D9:16:AA:06:3D:66:FC:89:A8:1B:09:FD:DD:77:39:63:57
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 019D97AAB4D662963CFB181B5B584AEB1D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 0BD0
Signing time: Thu 16 Apr 2026 19:00:40 +0000
Manifest this update: Thu 16 Apr 2026 19:00:40 +0000
Manifest next update: Fri 17 Apr 2026 19:00:40 +0000
Files and hashes: 1: 4C1BpphaktIg8MA2zeClb4YsyU4.roa (hash: imbIDYBoq85nxOoVD1lZJskVrwlvW9PzNxybvG5zr1Y=)
2: VTOF1mAuOAY_-tLdNMoe_pcrjMQ.roa (hash: jtjYRNSSBZQBAMWJxgI/LVkURXr1s2BmDS5NjL+Hzks=)
3: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: uYT6nuX65D7grc/g4Qp0+r8qn5KgfCY0bLTT1+yO4Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:b4:d6:62:96:3c:fb:18:1b:5b:58:4a:eb:1d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Apr 16 19:00:40 2026 GMT
Not After : Apr 17 19:00:40 2026 GMT
Subject: CN=973e7fd916aa063d66fc89a81b09fddd77396357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:40:7d:d9:fe:e7:b2:a1:4d:81:bc:03:c7:e2:
d2:4b:78:f5:20:78:da:1f:f7:1e:03:06:57:ac:7a:
e6:35:0e:02:d9:5f:0e:7e:d4:b0:8a:bf:83:2c:2d:
97:16:c1:4b:16:c4:3f:8e:a7:9f:60:88:a4:a8:ce:
b8:26:ad:3c:f1:4c:1c:59:bc:93:88:9b:b7:8d:70:
a9:3b:e0:d0:46:3c:ab:0f:d2:12:36:05:a8:17:27:
07:14:17:17:e5:e7:e1:e3:ca:3f:6f:dc:ca:60:4e:
c6:b0:b6:5d:2b:d3:e6:47:cd:47:7d:80:9d:35:dd:
29:dd:00:7f:e2:b3:12:9b:6e:d2:4a:83:5b:3f:ec:
90:7f:f0:49:f4:bb:c9:f9:80:08:16:2f:c3:5f:68:
b2:cf:8f:3d:16:da:b7:13:2f:47:bd:66:45:4e:0e:
29:be:33:18:c2:d6:c6:45:fe:e5:56:2e:b1:a5:6d:
e5:22:1f:1d:e9:9d:ed:31:21:dd:37:34:18:11:5d:
8f:af:ea:41:1d:05:74:dd:c2:c8:38:87:3f:72:d8:
95:5c:f0:80:59:7e:ec:6b:38:c6:ca:5f:2d:a3:a1:
0d:a5:b9:19:e4:2c:a9:68:5a:3e:e5:83:be:66:78:
3f:08:c7:c6:8f:c7:97:48:dd:21:76:66:86:89:b9:
4e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3E:7F:D9:16:AA:06:3D:66:FC:89:A8:1B:09:FD:DD:77:39:63:57
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:49:1d:34:8b:e8:90:66:e1:40:e3:07:3a:6e:c6:69:68:7f:
2e:78:78:3c:98:79:52:a2:e7:e7:4e:a8:9d:12:01:27:0f:90:
04:29:92:de:58:b0:d0:4a:10:c0:ca:85:3f:f4:21:c7:7b:6e:
a3:7c:db:a6:7a:54:72:00:48:18:76:a2:b0:0c:20:86:a8:64:
b0:5e:ea:8c:24:da:e8:ee:b1:f7:42:25:1c:92:b9:ea:f2:89:
a5:79:16:e7:39:8d:16:2d:81:ee:0c:f7:d2:8c:9e:70:8b:0f:
fe:af:83:59:d2:44:66:fd:5b:11:75:c2:03:29:1c:c4:16:f3:
cf:d2:1d:e6:5e:5d:93:74:49:54:ed:1f:82:7e:e6:a0:e1:15:
33:d5:4e:4d:f2:54:89:4d:31:55:06:3a:d4:62:7f:7f:cf:a7:
e3:e4:3f:5b:14:65:56:7e:a8:7f:98:f9:6a:34:c6:92:12:1b:
7f:71:dd:bb:e7:06:4d:b1:a4:7c:61:0d:57:21:01:e4:74:a1:
5f:8e:25:a7:c8:5d:92:6b:ce:65:93:16:ad:15:c0:33:67:e5:
9d:fc:17:86:19:76:0c:1c:33:96:74:c3:bc:48:be:77:65:3f:
eb:7a:94:84:fd:27:4e:7e:62:5a:a6:11:93:b7:e3:b1:00:1a:
e2:91:1c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:01 2026 by rpki-client