Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
File: 9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json)
Hash identifier: 98zlR1TsO83XgtGDvbg1kxqLIMkvoTB7xkEeCvAxqro=
Subject key identifier: 23:3A:38:A4:C3:D0:11:F6:F9:84:86:BA:4E:4C:2E:5A:07:20:7B:D4
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 019D9818C9D8D752F7777F1FB8B5FFE7EFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
Manifest number: 18E1
Signing time: Thu 16 Apr 2026 21:00:54 +0000
Manifest this update: Thu 16 Apr 2026 21:00:54 +0000
Manifest next update: Fri 17 Apr 2026 21:00:54 +0000
Files and hashes: 1: 8fe7vh9jlC7sRb2AcledmmwLoTI.roa (hash: XpslvQuy8ogh+8d35d9QaAhjHcrSzIzGG1EtFja7tAo=)
2: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: jWsAtXpVag7NgCustg4YMmpfs1hFZldY7BGbc9ueRKc=)
3: NAbtLA5jwad0igEO1tIb0mz4PCI.roa (hash: u3KlDFQPcuHgV+Z5lSXOh8N+/wFpSNZpgTa7rn0TEJs=)
4: VUzs5PHBwv_IZAQ0YfQuuthXe9o.roa (hash: VhBI1T/5AecSPfuyckIzymKWt28IdtuZyGt1Fke7X9o=)
5: caVc06HNLW27H40D2ZS_Rm7EWak.roa (hash: fii3aeyQKBbFgN7LjEGw9LVQBRaholnm8HqVAqTYdaM=)
6: jXiR7XjXhvI9XgVtJlQtRoEQEuY.roa (hash: KVbYTEO9c7jfQrSlpqs7ND4XndUrbw5w4184ONdqawM=)
7: xqtPQpmSw8BM5RyqcwITHIfXLSc.roa (hash: hGp4Jg8lf+rbg8QFIZWOCXC5lP9F5Y5cQtGXi8sQzqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:c9:d8:d7:52:f7:77:7f:1f:b8:b5:ff:e7:ef:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: Apr 16 21:00:54 2026 GMT
Not After : Apr 17 21:00:54 2026 GMT
Subject: CN=233a38a4c3d011f6f98486ba4e4c2e5a07207bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:d3:6e:82:71:e0:45:9b:2c:ef:dd:94:cb:
14:cd:de:2f:00:6d:d6:95:94:79:4a:a6:b2:5e:69:
39:cf:61:da:13:20:e9:4a:52:c5:cf:80:19:ee:ae:
7c:af:43:1b:0b:32:4c:7f:cf:86:f0:cc:1a:40:97:
17:b5:56:df:75:3c:ae:80:24:15:1e:72:2a:b6:e2:
79:e7:fc:f1:c1:39:b2:c7:46:06:c9:71:01:80:85:
1b:cb:85:2e:5d:8b:f1:9f:4d:47:e8:49:19:55:b0:
c7:cc:f1:7e:c8:9a:62:7a:1a:85:61:8d:2e:e8:33:
f8:7d:38:57:0c:ee:4f:27:a1:d1:40:ee:15:46:b8:
6c:11:34:23:2d:8c:4c:39:fe:f1:96:9b:2d:64:88:
1a:25:ba:90:73:2d:b1:ec:b4:ab:d0:3a:36:52:9a:
7a:4c:4f:b9:32:2b:7b:71:47:27:0e:5c:bc:7c:30:
a4:93:8c:24:7a:d9:3f:8d:89:00:00:e8:c3:ec:b0:
d9:2a:a0:60:36:65:29:1f:13:ec:a2:b8:0a:53:eb:
b0:df:c0:f4:b2:3e:c3:bb:7b:36:12:6e:51:83:84:
d0:46:fc:95:4f:27:e9:1e:93:07:de:00:f9:0d:41:
7d:80:65:af:1d:27:93:96:09:8c:92:22:e9:87:1e:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3A:38:A4:C3:D0:11:F6:F9:84:86:BA:4E:4C:2E:5A:07:20:7B:D4
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c9:70:f0:11:64:87:f3:75:27:33:76:87:e9:49:38:b3:13:
ca:97:cc:70:58:69:93:3b:de:85:e2:f8:2c:32:8f:59:45:df:
f7:e6:32:06:24:dc:55:cb:69:6d:33:ce:40:5a:b0:e4:92:0a:
37:d2:1f:ca:b4:eb:af:e1:ec:3a:c2:76:26:c3:e1:fb:2b:e7:
bd:5a:80:16:f2:f8:d7:37:65:98:0e:9b:87:2b:0f:d0:b8:8b:
cb:7d:88:38:67:00:49:ab:7c:1d:40:d7:3b:9a:6f:48:c4:a6:
a9:7b:e1:7d:9b:71:48:39:ef:d9:c2:5e:1d:24:0b:6c:8c:ca:
37:e7:df:b2:51:85:32:a0:83:43:be:95:8f:00:3f:7a:c2:c2:
dc:f8:c1:4f:67:18:f5:56:d3:0e:04:d6:d2:6a:4d:c4:1a:4e:
17:29:20:92:38:0a:b2:17:13:a5:41:4c:d1:be:a0:88:70:f6:
84:1e:f1:34:f7:46:78:0b:a6:48:14:9c:ff:5c:d1:b3:cc:cd:
de:0e:fe:a4:ce:5e:e8:3e:1c:29:ff:9b:d5:a9:41:03:52:84:
af:82:d9:97:8b:c2:58:69:b3:96:0a:c4:7c:e2:3e:5d:1c:d9:
f7:f3:20:64:1b:65:23:59:27:c1:d1:e2:ec:80:6d:4e:df:21:
ee:9f:5a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:08 2026 by rpki-client