Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
File: 9RMq2BqEohEhxQRHsgidzl5LI4o.mft (raw, json)
Hash identifier: RelsivdYoirxML997FBzoG/y4O3Bf6nK4V23tOfb4WU=
Subject key identifier: 97:80:08:79:11:15:0E:D5:11:E4:A6:A5:E8:2E:60:0A:E7:D6:F8:1E
Authority key identifier: F5:13:2A:D8:1A:84:A2:11:21:C5:04:47:B2:08:9D:CE:5E:4B:23:8A
Certificate issuer: /CN=f5132ad81a84a21121c50447b2089dce5e4b238a
Certificate serial: 019DA4F9231D2E4BB021F3849F2D52392DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
Manifest number: 0E
Signing time: Sun 19 Apr 2026 09:01:23 +0000
Manifest this update: Sun 19 Apr 2026 09:01:23 +0000
Manifest next update: Mon 20 Apr 2026 09:01:23 +0000
Files and hashes: 1: 810BVakNXZc-eZCkm84wPbkx0zw.roa (hash: 4W7QJcIB5zQfI2eP/65KAZgZifjdrkX8vzWfoESNuGg=)
2: 9RMq2BqEohEhxQRHsgidzl5LI4o.crl (hash: yn6iAfzbAV5UmfFtZXLqU/fM4ud5ot4TCJniFyjuudU=)
3: T7Q4ZInr7nmTwTSXGOP2lYQS6SE.roa (hash: Y1/e/IgPvhokjR0rrttCkxlf/wWiyXtQnZX5Qj+ssXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:23:1d:2e:4b:b0:21:f3:84:9f:2d:52:39:2d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5132ad81a84a21121c50447b2089dce5e4b238a
Validity
Not Before: Apr 19 09:01:23 2026 GMT
Not After : Apr 20 09:01:23 2026 GMT
Subject: CN=9780087911150ed511e4a6a5e82e600ae7d6f81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c9:14:57:9d:49:4f:7e:28:4c:45:2d:aa:7e:
d2:d0:0d:04:3e:05:7e:87:4e:a0:1b:8c:9c:db:c5:
7a:40:8a:31:2d:48:07:8e:83:a6:1d:da:dd:e2:d2:
e4:23:1b:d8:b3:50:76:ff:45:a6:ec:64:6e:10:cb:
7a:e4:0d:ed:16:e4:fa:77:ba:ca:f5:41:3a:f1:01:
dc:45:c5:9a:05:cc:12:8b:44:28:9a:6a:9b:20:e9:
0f:83:c6:df:c0:c3:e3:c8:8e:d8:90:ed:a1:11:bb:
5e:23:de:8d:03:b0:aa:0c:57:19:bf:df:29:36:0f:
6e:d0:6f:55:2d:cb:58:b5:5e:26:53:5f:58:58:39:
bd:6a:12:80:e4:3a:55:22:53:f3:12:d3:85:e0:41:
7d:8d:9f:30:28:8d:4c:a8:25:16:31:8c:4e:26:86:
89:67:ff:58:93:f2:fe:c6:45:08:23:5d:7f:f7:8f:
e7:43:fb:5d:c6:fd:84:35:89:fa:fc:0e:1a:ce:cb:
7d:ca:b0:0b:98:7f:6b:59:c4:c4:0e:34:13:3b:d3:
fd:83:0c:ed:d5:c5:c5:b2:c2:e6:b4:89:76:ed:22:
49:5f:0d:43:6b:a9:ce:0b:af:1e:82:c6:ff:50:41:
99:76:b7:08:32:87:01:94:74:aa:b2:21:6a:2b:40:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:80:08:79:11:15:0E:D5:11:E4:A6:A5:E8:2E:60:0A:E7:D6:F8:1E
X509v3 Authority Key Identifier:
keyid:F5:13:2A:D8:1A:84:A2:11:21:C5:04:47:B2:08:9D:CE:5E:4B:23:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9d:2c:12:4f:0f:d9:d1:54:ce:6b:41:40:6d:af:2b:4c:a9:
4b:e1:4c:02:6d:f6:7a:82:3f:d3:b8:e3:c9:d8:3a:6b:fa:d5:
6b:29:5b:08:cc:18:98:1e:7d:8b:37:27:dd:05:38:ac:18:ef:
8d:17:5b:de:cd:e1:27:d6:6a:a3:2e:9a:5b:8e:f5:a9:96:5e:
04:58:1b:94:e7:51:a9:25:1f:0f:74:6f:80:17:cb:fc:36:c6:
4e:03:b7:83:dd:b3:db:9f:7f:d1:e3:03:6b:77:4c:d0:0c:f3:
c1:a5:81:e6:94:26:a4:bf:a8:a6:62:e0:89:90:ac:de:ae:cc:
da:33:b0:8e:0f:d7:b0:81:58:48:6d:3d:be:56:c6:03:69:5d:
21:a1:2d:0d:1d:ea:0f:42:cf:01:35:65:b4:19:0e:56:cc:c9:
14:8f:25:42:f4:8a:6b:77:38:bb:f3:7b:e7:29:f1:e8:32:be:
7e:28:3b:56:15:0d:5c:40:6f:28:d7:db:54:1e:2c:00:c8:58:
56:7d:2e:39:e4:37:e3:f0:16:0f:c6:23:7a:4e:26:82:f5:16:
cb:a1:15:4b:3b:49:9c:9f:bc:c8:b6:08:71:e6:96:1c:47:99:
23:db:f8:6b:a5:3a:19:cd:c7:e1:35:8e:31:cd:7e:8b:92:6c:
c3:de:4a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:19:25 2026 by rpki-client