Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
File: 4mi9DSXlWsGkKoTCo7nIkINh1uE.mft (raw, json)
Hash identifier: +JB8H9GH/Ygh3AWkE9Ey31M/gjjfJ0n5ZNcuoyXaQb0=
Subject key identifier: 62:BD:78:ED:78:8A:D9:46:B2:E7:42:89:EE:6A:4E:9B:CA:08:2B:3E
Authority key identifier: E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
Certificate issuer: /CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Certificate serial: 019D9C634A46D429EC733AB624754FF36E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
Manifest number: 9B
Signing time: Fri 17 Apr 2026 17:00:45 +0000
Manifest this update: Fri 17 Apr 2026 17:00:45 +0000
Manifest next update: Sat 18 Apr 2026 17:00:45 +0000
Files and hashes: 1: 4mi9DSXlWsGkKoTCo7nIkINh1uE.crl (hash: mGicoXu6WwToLpH6aDubCILuCrR152Jasc2N7nzh6GA=)
2: JQH3U3cXJOwqHLIl-7Bwky7-HLY.roa (hash: SJWNpyd0W8U00MUBSeKEN8/PPIQ0TFlfn5di0BSI3Hg=)
3: K0Bz8gUXJ1GAp68K0LjDByi_SVk.roa (hash: CPs5nAdCCsQDzUUAym9dDL0dv2iUIo+oUoQLSVCUp9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:4a:46:d4:29:ec:73:3a:b6:24:75:4f:f3:6e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Validity
Not Before: Apr 17 17:00:45 2026 GMT
Not After : Apr 18 17:00:45 2026 GMT
Subject: CN=62bd78ed788ad946b2e74289ee6a4e9bca082b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:9e:84:c2:3f:c0:58:72:4f:c8:03:a5:9e:
c0:9a:f4:6c:50:69:2e:e3:6e:9a:79:a6:d1:3f:f1:
13:03:00:cd:e6:3c:c1:ab:f2:ab:76:69:e3:b3:83:
74:bf:13:8e:80:c6:e7:8c:a3:35:79:40:a6:33:15:
44:d7:96:a2:02:49:18:c9:26:ef:be:ca:9b:e3:b2:
7a:28:80:a9:2b:5b:54:39:8a:20:4b:75:9a:b7:37:
06:95:05:e6:fc:b2:dd:b7:65:01:71:a2:6f:2b:89:
e8:10:c6:3b:d5:0d:ac:93:cb:9f:e6:35:2d:13:ce:
9c:c4:9e:c9:d8:a7:4a:28:e5:c1:ec:56:a6:ee:9e:
d4:b9:47:b2:75:22:84:df:47:76:0f:c7:70:02:86:
73:e4:81:0c:66:18:db:96:2d:06:c5:4d:4d:91:19:
b5:b1:7e:99:ff:7c:55:9d:ea:3d:58:b0:ac:27:07:
c3:85:5d:0d:09:11:05:ca:31:a0:b4:90:0c:18:bd:
d6:0d:82:0b:5d:d2:0f:86:b9:b6:c5:b5:48:e9:1a:
0a:19:e6:ea:04:90:75:ae:8f:3a:b6:81:94:ac:b8:
2d:c7:64:19:24:7a:7d:be:31:7a:f0:f3:00:70:bd:
d8:0a:51:33:1f:e9:e2:88:7e:a6:7a:5c:0b:b5:c2:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BD:78:ED:78:8A:D9:46:B2:E7:42:89:EE:6A:4E:9B:CA:08:2B:3E
X509v3 Authority Key Identifier:
keyid:E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c4:3d:6e:d9:72:07:eb:d5:a3:a1:2a:77:6b:c1:28:94:d2:
8b:50:1a:14:c9:a7:25:71:5b:21:19:68:1e:5d:80:5b:7a:7e:
da:bc:e4:eb:b5:bc:50:2e:fa:e7:1f:01:05:61:41:7b:02:e6:
07:7c:c4:e7:08:39:8b:0f:ab:f1:19:ff:df:c4:bd:a9:87:6e:
42:4f:e5:3f:26:61:e0:7f:5d:ab:0d:2a:98:86:6a:a5:35:30:
c9:14:8e:32:6a:0f:fc:0d:af:19:a8:3b:71:d5:47:74:13:0a:
44:4c:a3:13:28:34:dd:fb:b8:6a:16:f5:9a:c4:68:4e:27:37:
ad:e3:30:33:b8:c7:04:a7:3b:57:8b:b4:de:fd:35:d1:11:fe:
08:32:67:49:b1:82:e3:1d:7c:fd:56:21:21:24:e4:e2:8f:a4:
0d:01:e6:42:2f:da:4f:f3:9c:08:fd:a5:02:37:c5:41:f3:62:
b4:3a:11:81:30:fe:aa:72:e2:c3:e6:50:f7:64:e9:4a:98:a7:
05:0d:0a:a8:92:3d:08:ec:d3:86:d5:6e:cf:2a:cf:d2:19:f8:
66:56:e9:45:74:83:9c:b0:89:c2:d2:66:fc:ea:92:6d:74:b3:
96:3a:3c:4e:9e:c8:56:bf:45:72:17:51:f1:3b:5c:90:0e:16:
3c:b7:48:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:00:42 2026 by rpki-client