Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: fC/o8Ko8BNqdGHk8HCH1Bf1GaFMPY6cLdGIqulXepOo=
Subject key identifier: 59:EF:0F:3C:3C:00:0F:DE:64:56:43:91:76:D6:46:20:EC:DE:1E:2A
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 019D97AB2AE778B948ABAEA54063BDF3F75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 19:01:10 +0000
Manifest this update: Thu 16 Apr 2026 19:01:10 +0000
Manifest next update: Fri 17 Apr 2026 19:01:10 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: yPVi6n3+2mdUbLSXEQT7CsS5EUsLiGiC8JQgkAvZuJI=)
2: BqRJvB_nPRiPWuTGUs43OFgE1cg.roa (hash: CouaUfaCJlCnH6IGbuUpQJc4a6XZQ+ovYHzWhnqUp88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:ab:2a:e7:78:b9:48:ab:ae:a5:40:63:bd:f3:f7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Apr 16 19:01:10 2026 GMT
Not After : Apr 17 19:01:10 2026 GMT
Subject: CN=59ef0f3c3c000fde6456439176d64620ecde1e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:87:f6:bd:2c:79:72:1c:d4:54:7d:5a:8c:
2e:98:bb:e3:c0:13:33:64:9d:58:90:a3:38:13:45:
bf:be:02:14:3e:27:3d:8a:1a:4c:44:9e:38:aa:db:
2f:91:b9:2f:c6:fe:47:73:3f:8c:d1:88:c6:58:fc:
9e:96:0a:88:9f:48:52:b2:f4:92:ca:28:0a:94:63:
7d:c7:49:19:ff:00:95:3c:f7:bb:b8:58:85:b9:d4:
8c:17:82:6d:89:6b:4f:b4:32:9b:fa:5f:c6:1b:24:
ad:9a:88:ea:51:2a:12:28:a8:11:73:b1:c9:51:cd:
44:eb:a3:95:7d:b1:be:53:46:f1:6d:93:e4:b0:2b:
6a:6f:3b:ea:b1:64:62:f3:df:dc:42:f7:b1:76:9d:
3b:f0:27:46:36:77:60:ba:9f:c9:1d:88:2f:f6:c8:
6e:42:b4:30:de:7c:6c:59:bc:9f:eb:e4:9f:e0:11:
52:62:76:f4:65:27:b7:73:f5:5f:d4:2d:c1:51:4b:
c4:33:fc:f5:3e:cb:26:40:9b:c9:6b:51:49:15:15:
a1:0b:be:d8:be:c3:19:d1:93:7a:30:8c:f4:83:ca:
b3:31:87:b9:c7:34:99:dc:d9:1b:46:d2:ea:88:99:
39:86:ba:b8:a7:b3:83:e5:77:a7:c8:23:25:c7:e2:
24:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EF:0F:3C:3C:00:0F:DE:64:56:43:91:76:D6:46:20:EC:DE:1E:2A
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b4:30:c6:ad:fb:8f:c4:08:f6:71:60:d5:1b:59:72:f8:19:
62:d0:08:79:e3:d4:8b:0f:86:f2:e2:79:2d:4e:01:30:64:66:
8c:2b:9c:af:02:b1:ab:d6:fe:fc:78:d9:8c:0a:b6:ee:82:dc:
ab:a5:a3:60:f8:40:39:72:fa:64:66:bc:b7:d7:4e:7d:fb:4d:
83:23:30:9c:55:14:d6:a2:05:92:5e:b0:d0:0b:1b:4e:6d:cb:
ef:dd:c3:2d:6b:55:ea:a2:54:d4:42:ab:15:a4:c5:5e:bd:b6:
3d:35:b7:c1:e0:eb:70:ea:b3:3b:af:6e:40:f9:66:f9:13:9e:
13:06:ac:a4:49:6b:03:5f:b8:c6:42:25:f1:42:08:b9:8c:8f:
12:a4:cf:3b:a7:06:1a:18:39:4c:60:92:4d:5c:25:24:a0:69:
52:df:ba:1a:54:fe:c0:79:3a:47:06:8d:08:a7:a1:29:41:f6:
b7:87:f8:5f:e9:fe:a2:f3:70:42:ba:23:e3:93:9b:3d:a4:e4:
86:a6:52:48:da:8c:0c:42:56:ee:5c:13:48:42:82:45:90:3f:
f5:2d:2e:13:61:0a:23:0d:d9:79:6d:b3:08:6b:92:75:59:1b:
5a:73:57:ce:e3:2b:c2:e2:27:7c:cb:72:af:58:14:58:45:53:
37:a9:b3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:57 2026 by rpki-client