Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
File: f9GKakmRDMMx3JERSuWbcYXV8w0.mft (raw, json)
Hash identifier: /ahQ5N+cuxv3wqUka2BoOIHJrB5lTzzkwnsH8tXwyqg=
Subject key identifier: 08:3D:98:CD:05:FE:AC:25:E1:59:FD:8C:20:CE:A6:C3:1D:F2:9B:67
Authority key identifier: 7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
Certificate issuer: /CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Certificate serial: 019D9AE33459F2DF5666E1CD4464687CC925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 10:01:14 +0000
Manifest this update: Fri 17 Apr 2026 10:01:14 +0000
Manifest next update: Sat 18 Apr 2026 10:01:14 +0000
Files and hashes: 1: CYtuVU0sbWBUALYLU6zRKuDdNos.roa (hash: p/Z6mIOgkBgm2djYUHmco8dUrJgppMghuSCBMeA0BPY=)
2: f9GKakmRDMMx3JERSuWbcYXV8w0.crl (hash: ydZZJDAJofD5K1CXeNNp37/hs1MfGV+vHFNwzwqVGPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:34:59:f2:df:56:66:e1:cd:44:64:68:7c:c9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Validity
Not Before: Apr 17 10:01:14 2026 GMT
Not After : Apr 18 10:01:14 2026 GMT
Subject: CN=083d98cd05feac25e159fd8c20cea6c31df29b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:df:87:7c:17:cc:c9:84:d5:55:d6:19:10:
e5:93:d4:b3:e1:c2:be:f1:89:ef:44:41:9a:d0:af:
ac:b3:34:9f:ef:cc:ca:90:1b:46:3d:3d:f4:60:f8:
c4:75:ac:25:14:95:ca:e5:e0:44:da:93:da:d5:5b:
b9:cc:8a:ef:84:eb:2b:d1:13:50:1f:f9:70:2f:bd:
96:ca:75:3b:a8:e1:81:a7:d9:24:c4:76:dc:63:41:
46:1c:83:91:6c:75:5e:71:f3:26:e3:f5:f1:e6:31:
07:63:b8:e8:17:4d:d6:91:f2:57:50:e9:fb:db:31:
f1:d5:bf:20:83:c6:8c:f5:b8:e6:0c:6c:bc:f9:9d:
14:77:ed:41:cb:a5:e0:ba:da:9d:7a:51:0b:b4:f5:
8a:f2:e7:9d:82:8b:1b:2b:cf:26:34:8b:7a:4b:45:
0f:5e:86:96:e9:8d:29:05:1c:b7:55:1c:41:3f:c8:
cc:30:ba:41:b4:02:67:58:7b:9a:18:79:83:3a:69:
1b:21:4c:43:67:16:ef:a9:56:3c:53:32:cc:95:5a:
ed:65:16:5f:29:ff:78:6a:85:f1:76:4c:72:79:60:
59:b8:e4:86:2a:d9:86:3f:85:22:b4:e8:ed:c5:24:
8f:be:a2:a0:be:c1:55:31:9f:ac:2c:71:46:b7:11:
42:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3D:98:CD:05:FE:AC:25:E1:59:FD:8C:20:CE:A6:C3:1D:F2:9B:67
X509v3 Authority Key Identifier:
keyid:7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b9:2d:9a:4a:23:a3:d6:5d:1e:1d:3b:af:37:c5:02:70:4c:
ce:5c:97:db:db:7a:34:2a:a0:10:d4:9c:d0:91:6b:75:20:26:
4e:82:14:c0:06:21:b2:e7:60:28:c6:90:63:fe:4c:6e:ce:6e:
bc:a0:de:87:63:d5:be:e1:f5:00:0f:b5:2f:9d:01:af:33:17:
4f:1f:e7:26:36:18:88:c9:c0:cf:f4:40:3e:d0:e9:65:38:3a:
25:68:51:e3:34:0e:33:92:e8:ce:f4:bf:f3:ef:3d:89:38:5f:
b9:46:d9:83:53:2d:bc:9a:b9:c6:76:66:42:b3:e2:ef:3a:1f:
cb:eb:36:f8:02:f2:4a:9e:c5:b6:72:9e:1b:37:01:0d:83:79:
e9:94:4f:dc:ce:10:ca:c3:d9:00:d0:3b:74:9e:d9:f1:4f:7e:
ef:fb:af:63:c9:e0:72:51:50:44:59:f9:11:fd:70:c7:ad:51:
fd:da:62:71:b9:0e:1c:3e:0c:62:44:71:66:e3:1f:de:2f:56:
d0:a8:45:c8:6a:47:ae:3a:4c:fb:2e:fc:39:94:73:f1:8d:fd:
55:ca:f9:94:de:a3:8b:bd:ee:4f:94:c2:4c:a8:51:75:b0:f6:
6b:8d:bb:af:df:62:54:a9:03:1d:b2:99:83:80:ff:08:a8:b2:
36:35:c5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:34 2026 by rpki-client