Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
File: h9tx9pGbDvmO78mWSSiodRAjagM.mft (raw, json)
Hash identifier: IoRudRBhh85MaEnNO2SvqZfZ2sc16IMc/2iR1APyWCs=
Subject key identifier: DB:AB:4E:DE:DB:F9:7E:81:24:B5:58:CA:97:88:B0:8F:D6:82:5D:46
Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
Certificate issuer: /CN=87db71f6919b0ef98eefc9964928a87510236a03
Certificate serial: 019D992BA235C5F4C57E4D5182308324DEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
Manifest number: 0D75
Signing time: Fri 17 Apr 2026 02:01:06 +0000
Manifest this update: Fri 17 Apr 2026 02:01:06 +0000
Manifest next update: Sat 18 Apr 2026 02:01:06 +0000
Files and hashes: 1: h9tx9pGbDvmO78mWSSiodRAjagM.crl (hash: fiwHcmAHjWNBOpoF1sT8PYx4YJ67umIXJl6sSKCjpbQ=)
2: ptikDTRhjTNxZI8dkI54eJbGFTA.roa (hash: 3SdSmJMo+FOvr1IMdnku5tDe7K6GsQTnPIBl17tgA08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:a2:35:c5:f4:c5:7e:4d:51:82:30:83:24:de:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03
Validity
Not Before: Apr 17 02:01:06 2026 GMT
Not After : Apr 18 02:01:06 2026 GMT
Subject: CN=dbab4ededbf97e8124b558ca9788b08fd6825d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:91:cf:26:f4:d4:2d:ce:b0:50:b4:9e:15:
9b:15:75:49:97:86:4e:c4:17:e2:4f:14:5a:00:5e:
da:b5:7b:2a:5f:55:06:9f:bd:c6:2e:ef:56:c3:32:
8e:0e:04:67:b2:05:3f:87:de:04:4b:81:07:c4:94:
ad:2d:f4:63:40:ac:f7:d0:01:63:87:44:7e:5c:3e:
ff:a1:e8:35:92:01:ca:09:1b:fd:9b:bc:f1:f3:2f:
c0:09:5e:fb:03:c8:43:24:b0:02:53:8e:18:3c:7e:
ce:c1:e7:0c:0e:fa:6b:64:1a:1b:f0:5c:8f:48:7a:
70:f1:48:98:61:3d:4c:fa:cb:17:68:fb:43:c6:92:
2b:82:e2:22:b2:d5:2e:e2:fc:53:da:a2:4c:be:34:
ee:3a:5d:e7:2f:04:79:c3:d1:72:37:84:bc:b1:de:
84:97:19:67:ef:b3:a9:fc:02:90:0d:07:60:21:70:
4e:77:21:12:21:c2:47:4e:0c:80:0b:79:3a:ef:9f:
de:f0:06:3c:93:86:6d:7b:94:54:d0:52:84:d9:2c:
e3:8b:f0:57:c2:90:f3:66:6d:9b:70:3c:78:15:f3:
b5:db:85:74:8a:bd:0d:ee:53:c4:f7:4d:6f:23:5a:
4a:85:52:36:c6:11:16:b7:3f:2f:7b:eb:3e:ee:04:
f7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AB:4E:DE:DB:F9:7E:81:24:B5:58:CA:97:88:B0:8F:D6:82:5D:46
X509v3 Authority Key Identifier:
keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1e:f6:55:b4:41:8a:08:d7:7f:9c:84:2d:ad:e0:f0:1d:6c:
34:a4:f9:dc:36:81:84:8e:40:cb:4d:9a:5e:41:d0:53:6f:32:
03:57:2b:f4:39:6c:59:d0:55:74:de:7f:e0:e3:25:9a:30:8d:
7a:c0:8f:b0:3a:dc:93:bd:c5:14:55:6b:5a:f0:8f:03:3b:3c:
da:a5:ec:e6:4d:61:2f:4c:68:b3:fa:a2:42:d2:7a:46:d3:72:
83:de:a2:13:03:ae:ea:f6:62:fe:28:66:9f:61:58:3d:19:35:
f4:1d:f9:36:ee:9f:4b:72:24:3e:e4:2c:10:d0:fd:0d:3d:fa:
d0:44:8f:12:18:c7:28:f3:42:83:c0:87:25:01:17:a0:b7:d4:
94:e4:f6:72:f0:df:ae:41:d3:b6:1d:e9:ed:45:27:81:b6:38:
a3:e4:6a:e2:b7:3f:62:08:b5:ad:1f:2e:1e:e8:9b:4d:2a:17:
cf:09:43:40:21:1f:26:ee:69:16:89:6b:10:6a:81:7f:6b:51:
72:1a:69:a7:76:e8:79:48:71:f3:81:a5:64:0c:4f:07:83:0e:
11:f9:77:20:d6:de:a1:63:14:c2:30:e4:9e:6e:c2:ac:fc:12:
32:a2:7b:db:0d:51:ec:8a:00:4a:2b:7f:37:3e:0f:f2:d3:a5:
2d:01:3d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:00 2026 by rpki-client