Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft (raw, json)
Hash identifier: sjqMr0EeDWdma6toaJvTi5/R6pUVfEUGEEqK4C3dDyI=
Subject key identifier: 8E:23:E9:80:C5:16:4A:A1:AA:D2:18:4E:BC:95:15:8A:78:4B:B9:77
Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Certificate serial: 019D99993FF9FEFDEB1EA79D63E94BEF76E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
Manifest number: 0FE0
Signing time: Fri 17 Apr 2026 04:00:50 +0000
Manifest this update: Fri 17 Apr 2026 04:00:50 +0000
Manifest next update: Sat 18 Apr 2026 04:00:50 +0000
Files and hashes: 1: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl (hash: g8ukfI9kGBrZkk4co1yCLtlAkSIjgbROxuhSOUxHJOs=)
2: EbkZTFb2VFqMx2a_D6MlchqeqkI.roa (hash: hHzZ/zf777mCNzIX/f5moIT+5CBboFuObhSKwaqB7cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:3f:f9:fe:fd:eb:1e:a7:9d:63:e9:4b:ef:76:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Validity
Not Before: Apr 17 04:00:50 2026 GMT
Not After : Apr 18 04:00:50 2026 GMT
Subject: CN=8e23e980c5164aa1aad2184ebc95158a784bb977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:54:d5:b5:47:77:2b:c4:5e:75:f4:f7:9f:
7c:9c:ef:b0:db:4d:84:63:2d:d9:21:d4:9f:4a:d6:
eb:8c:93:75:62:bd:11:b5:a8:7e:21:ac:b3:b7:5b:
5d:08:d8:30:2c:a7:ac:89:8c:bc:9e:d7:96:3a:d1:
63:c1:11:83:c2:53:84:cc:16:2d:22:79:de:5a:64:
c6:31:f6:9e:92:8d:25:10:e3:3e:d5:47:3b:52:13:
13:f4:44:dd:dd:0f:ba:ce:c6:c4:80:84:6a:74:b3:
b8:c6:6d:d1:24:bb:e2:bb:70:8f:03:7b:43:8e:7b:
c7:d5:d3:b4:a4:53:26:4c:37:df:07:df:ea:a3:56:
a7:14:e2:ad:4a:2d:c8:ed:42:1a:ab:f1:79:b1:8d:
27:2f:e1:27:65:25:86:c8:e5:a4:2b:ba:ed:40:3c:
f8:61:f2:aa:8b:76:84:a4:49:d7:dc:8a:f9:c0:e1:
15:b6:13:f3:6a:28:5e:28:6b:da:90:18:46:cf:72:
51:a6:8c:b1:38:41:0e:26:27:8a:34:8a:aa:0c:50:
3c:58:68:c0:50:cf:49:49:1f:f7:d7:92:67:ad:56:
35:b5:af:3e:6c:6c:05:82:92:81:41:aa:03:a5:6e:
1a:d5:27:2f:45:5a:0b:e1:f7:16:75:c0:dc:5d:1a:
5b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:23:E9:80:C5:16:4A:A1:AA:D2:18:4E:BC:95:15:8A:78:4B:B9:77
X509v3 Authority Key Identifier:
keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1c:0e:4d:8f:a0:28:70:d4:44:b1:21:f7:30:5a:23:32:c5:
41:16:6c:bd:32:23:38:26:01:d7:92:dc:67:e1:08:5d:ba:f3:
bc:70:50:d5:3d:61:52:f2:0b:b7:92:cf:93:75:37:a8:fd:d8:
d2:27:df:00:79:3f:01:2e:50:58:57:8a:00:6e:c7:2a:29:98:
e5:b5:ca:61:e9:89:1b:6d:93:66:2b:b7:94:8e:45:19:d1:c9:
d6:af:db:9d:f1:48:1b:0f:7b:e8:cf:a8:e7:ba:a2:fb:66:88:
88:80:89:80:57:91:3b:1b:5a:e1:c9:fa:93:f5:77:25:5d:e1:
43:43:4a:8b:f7:69:d7:60:b0:09:e9:cd:3d:2c:b5:0a:64:96:
fa:97:a9:7f:27:cc:1c:b0:7e:01:1e:40:74:2a:60:4f:9e:19:
62:e6:b1:9a:d9:6e:68:5e:81:d1:ba:9f:8c:7c:df:7e:a3:3f:
5d:4b:cc:25:58:16:59:93:70:36:98:a9:75:ad:6f:33:0a:1b:
8d:78:df:76:ff:cd:9a:2f:b4:05:77:96:bc:b2:84:dc:f5:31:
89:f3:f0:c4:d0:6b:dc:fe:b4:5a:fa:25:b7:57:21:3a:36:fa:
4a:4a:f6:8a:e7:4f:9f:c2:a2:c3:74:0e:8e:77:3a:16:4d:2e:
3d:48:fa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:50 2026 by rpki-client