Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File: 9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier: MmYsTYyQ5/2moFpdSjBrSX7PRP/dajiB0nxoYAPYZJY=
Subject key identifier: 57:C1:E9:9C:96:34:F0:39:21:AE:82:67:6B:49:F4:C8:9B:41:92:3E
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer: /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial: 019D9C2CA2CF9A7690300E87FAB534C2893B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number: 0FA0
Signing time: Fri 17 Apr 2026 16:01:04 +0000
Manifest this update: Fri 17 Apr 2026 16:01:04 +0000
Manifest next update: Sat 18 Apr 2026 16:01:04 +0000
Files and hashes: 1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: Jec3CT5ecDaZO9WBZkJUpPdQUzK7RHjhQymVQrY6jJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:a2:cf:9a:76:90:30:0e:87:fa:b5:34:c2:89:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Validity
Not Before: Apr 17 16:01:04 2026 GMT
Not After : Apr 18 16:01:04 2026 GMT
Subject: CN=57c1e99c9634f03921ae82676b49f4c89b41923e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:ce:42:d3:53:ba:8d:96:c8:e2:77:e3:5b:
69:13:fd:53:7a:93:86:0e:81:e2:50:2c:91:d9:b4:
1d:44:a7:33:5a:29:4d:18:39:35:c5:3b:8c:a2:25:
71:e1:08:37:d8:5a:05:fb:6f:c7:1b:b6:60:b8:b9:
43:b0:05:0c:22:f3:20:8c:2d:48:22:80:ec:c9:b9:
d6:6e:fc:90:08:dc:2b:aa:3c:39:bc:55:83:83:3a:
57:7c:da:dc:10:14:df:09:47:70:8e:1e:d4:df:b4:
3d:ce:5e:cd:72:90:6b:6c:e5:31:92:e2:a3:36:fc:
34:b4:60:bc:6c:8a:dd:86:f8:b8:74:c9:8d:49:97:
77:8f:78:b5:d8:65:78:f8:7d:e7:b5:9d:f4:e7:89:
65:f2:a2:1d:88:4b:30:1a:34:25:49:b1:87:4d:d6:
42:d8:ef:27:b1:a7:16:92:4f:b9:3a:54:a9:ca:89:
ec:9a:24:21:5d:3d:3e:c1:4d:8f:fb:57:7f:bd:ce:
ba:ec:e8:7d:cb:61:a0:ff:52:85:e5:07:bb:1e:e0:
a7:cf:ef:71:37:64:bd:3d:56:29:99:0f:74:d3:7c:
4e:3f:34:3a:56:e5:d8:f4:a6:33:d2:22:f0:0c:68:
35:10:8a:21:47:ea:02:71:15:43:e4:32:32:75:0d:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C1:E9:9C:96:34:F0:39:21:AE:82:67:6B:49:F4:C8:9B:41:92:3E
X509v3 Authority Key Identifier:
keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0e:26:a9:d6:69:dc:de:0b:e1:d9:46:9f:ff:37:51:fb:77:
96:9a:a7:ca:92:96:43:9a:28:36:23:ed:13:b3:40:48:e7:a1:
ed:50:11:aa:b5:d9:19:e2:65:90:45:dd:2e:6a:e5:a5:b9:e3:
c5:aa:2e:45:82:03:b0:ed:2a:1b:28:72:44:61:c1:5a:31:34:
2b:85:f0:7f:37:9f:0a:85:fc:ae:31:2c:5c:66:73:e3:53:5e:
c8:c3:ea:d7:54:2e:dc:66:b1:d1:05:25:f3:28:57:82:6a:b9:
5b:a6:ac:75:13:5e:23:6c:e1:39:95:ed:96:6e:6c:39:9c:14:
1c:b4:65:9f:e2:f0:3c:4e:44:ed:08:fe:83:f2:81:d9:9b:5f:
8b:d7:5b:18:f1:a0:11:a6:f3:5e:38:ce:86:81:bb:42:2b:7a:
4e:1a:58:96:b0:15:a9:a1:05:57:15:88:4c:ed:9b:61:85:ac:
d5:62:7f:a8:e4:50:69:f3:67:8a:ce:4c:8a:6f:4d:21:5a:cf:
52:46:e5:0d:10:95:a8:07:78:e2:a2:07:fa:dc:00:56:71:74:
2d:6b:d2:8d:6e:b7:3c:3c:82:a4:7b:48:50:cf:e4:2d:ee:0b:
ef:b1:39:15:14:8a:51:fb:b1:05:8b:87:15:ff:08:b6:0d:6b:
c5:38:24:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLKLPmnaQMA6H+rU0wok7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1OGY4MGQyM2E5ZDhhZWQ0ZmUzMTFmNzIyMjA5Yzk1ZGE5
YWFkNDYwHhcNMjYwNDE3MTYwMTA0WhcNMjYwNDE4MTYwMTA0WjAzMTEwLwYDVQQD
Eyg1N2MxZTk5Yzk2MzRmMDM5MjFhZTgyNjc2YjQ5ZjRjODliNDE5MjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSzOQtNTuo2WyOJ341tpE/1TepOG
DoHiUCyR2bQdRKczWilNGDk1xTuMoiVx4Qg32FoF+2/HG7ZguLlDsAUMIvMgjC1I
IoDsybnWbvyQCNwrqjw5vFWDgzpXfNrcEBTfCUdwjh7U37Q9zl7NcpBrbOUxkuKj
Nvw0tGC8bIrdhvi4dMmNSZd3j3i12GV4+H3ntZ3054ll8qIdiEswGjQlSbGHTdZC
2O8nsacWkk+5OlSpyonsmiQhXT0+wU2P+1d/vc667Oh9y2Gg/1KF5Qe7HuCnz+9x
N2S9PVYpmQ9003xOPzQ6VuXY9KYz0iLwDGg1EIohR+oCcRVD5DIydQ3wOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfB6ZyWNPA5Ia6CZ2tJ9MibQZI+MB8GA1UdIwQY
MBaAFPWPgNI6nYrtT+MR9yIgnJXamq1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVktQTBqcWRpdTFQNHhIM0lpQ2NsZHFhclVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZGRhZjAtN2UwMy00NWMxLTgxMjkt
YjI3MmE3OTgwNmYxLzEvOVktQTBqcWRpdTFQNHhIM0lpQ2NsZHFhclVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ZGRhZjAtN2UwMy00NWMxLTgxMjktYjI3MmE3OTgwNmYx
LzEvOVktQTBqcWRpdTFQNHhIM0lpQ2NsZHFhclVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQ4mqdZp
3N4L4dlGn/83Uft3lpqnypKWQ5ooNiPtE7NASOeh7VARqrXZGeJlkEXdLmrlpbnj
xaouRYIDsO0qGyhyRGHBWjE0K4XwfzefCoX8rjEsXGZz41NeyMPq11Qu3Gax0QUl
8yhXgmq5W6asdRNeI2zhOZXtlm5sOZwUHLRln+LwPE5E7Qj+g/KB2Ztfi9dbGPGg
EabzXjjOhoG7Qit6ThpYlrAVqaEFVxWITO2bYYWs1WJ/qORQafNnis5Mim9NIVrP
UkblDRCVqAd44qIH+twAVnF0LWvSjW63PDyCpHtIUM/kLe4L77E5FRSKUfuxBYuH
Ff8Itg1rxTgkAw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:41:02 2026 by rpki-client