Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier: kTEorglwnYG2+a34DoyDm0c4OsL0ZgyujTJNvLiq81c=
Subject key identifier: 2B:EF:C1:CB:C7:B9:E6:16:4A:85:69:AA:5E:B3:4D:8B:64:9D:28:39
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial: 019D98F486407F35F4AD0F5ACBAE1364790B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number: 0E8A
Signing time: Fri 17 Apr 2026 01:00:55 +0000
Manifest this update: Fri 17 Apr 2026 01:00:55 +0000
Manifest next update: Sat 18 Apr 2026 01:00:55 +0000
Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: Js7ylhb7OY2im186kUwlPVtyJ6HAHEUJ6dCuVmcinBQ=)
2: I3Cwe_JfIHDw-5FguYkJbkBPot8.roa (hash: NhXNbLKSK6Zii6NTvjleq3atjNt9Qq9hOl62FzoteKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:86:40:7f:35:f4:ad:0f:5a:cb:ae:13:64:79:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Validity
Not Before: Apr 17 01:00:55 2026 GMT
Not After : Apr 18 01:00:55 2026 GMT
Subject: CN=2befc1cbc7b9e6164a8569aa5eb34d8b649d2839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:57:63:e5:6a:61:0e:81:da:b5:ea:2c:e1:56:
33:08:1e:b5:94:3a:4b:61:2f:cc:be:fa:30:49:e0:
d4:df:d8:b2:f1:3b:86:43:fb:a6:24:d3:58:48:09:
c2:1a:ad:04:11:cd:ca:0e:3d:fa:2d:82:31:08:3b:
0f:86:fe:c6:f3:da:12:f8:33:72:38:f5:1a:31:d9:
2a:a9:bd:c9:6a:28:32:f7:91:68:9f:63:c8:8d:bf:
1e:a1:22:d5:82:17:27:13:62:a3:b9:fc:29:98:0a:
b8:97:f5:27:f0:95:39:f7:90:87:0e:99:84:31:8d:
0f:96:1f:61:92:ea:5e:40:5f:e1:14:3e:e5:d7:f1:
ee:89:1a:60:fb:26:04:c3:47:81:3d:7f:da:46:cf:
17:43:a7:00:d8:13:8b:c2:a9:f8:b2:d3:db:ea:20:
43:8f:65:2e:37:07:80:ce:0c:85:98:60:ae:45:16:
9c:13:84:b9:1e:5a:a3:3d:c7:67:1b:50:8d:07:30:
9d:9f:7d:cb:33:b5:51:71:3a:25:75:5d:cd:a8:32:
f9:76:70:8e:57:5c:5e:fe:31:46:13:38:6e:10:31:
e5:81:24:ae:0e:ae:a1:e8:8f:23:0e:00:74:e4:d5:
f5:24:3f:7e:27:28:23:bb:49:5b:db:49:fe:8a:ba:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EF:C1:CB:C7:B9:E6:16:4A:85:69:AA:5E:B3:4D:8B:64:9D:28:39
X509v3 Authority Key Identifier:
keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6b:7a:87:ef:de:72:e8:45:72:66:6d:d7:cc:a9:61:58:41:
c0:16:99:e5:ad:c2:49:54:b7:90:10:28:f9:25:1a:71:f8:f4:
64:31:1b:32:27:a7:e2:20:5f:a1:ba:a8:e5:33:e3:98:09:38:
29:cc:bb:93:b1:54:5c:c4:ae:01:f3:bc:a7:76:b0:ea:1a:99:
ae:0b:de:37:93:89:5d:ed:e2:15:6c:d2:3c:ea:2a:9c:f7:b0:
6c:35:39:45:63:ae:5a:79:d0:dc:95:be:6b:5f:80:8b:c3:6d:
d6:b9:a4:3c:1e:1e:fc:06:ca:fd:8c:30:9b:ad:bf:36:e1:90:
c5:ef:d3:18:cd:7c:0e:82:44:8c:f8:8b:04:8f:60:b5:d6:a9:
65:05:52:dd:3e:39:0e:f6:41:d1:6e:ae:5c:56:2f:39:c1:21:
72:18:42:9c:b3:b7:e2:db:7d:62:69:23:64:75:04:32:8c:63:
f0:dc:68:e1:55:9f:30:ac:4e:f5:8b:86:1b:12:49:64:9a:f8:
56:a1:d4:07:97:2a:79:57:ee:8a:9d:1c:9b:a9:d3:84:fb:45:
c7:1d:d4:01:52:c4:22:06:72:15:d9:95:34:62:3e:fa:8e:8c:
84:9b:20:3b:00:52:e7:4d:ae:46:8b:8b:6f:3f:c2:aa:db:16:
40:59:49:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:53 2026 by rpki-client