Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
File: 9pRmi6ds9VDEE5wXMAFgB33OoFk.mft (raw, json)
Hash identifier: 89h0pAqIrWqBmf3ldq5XdoTPCnhZVr5DR46/ILsUg+M=
Subject key identifier: 57:F1:31:2E:1F:7F:CA:1C:C0:96:FC:AA:5A:43:A1:C9:0A:28:50:AA
Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Certificate issuer: /CN=f694668ba76cf550c4139c17300160077dcea059
Certificate serial: 019D99D0642AFCDD765E2C1F656D35D40D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
Manifest number: 123A
Signing time: Fri 17 Apr 2026 05:01:04 +0000
Manifest this update: Fri 17 Apr 2026 05:01:04 +0000
Manifest next update: Sat 18 Apr 2026 05:01:04 +0000
Files and hashes: 1: 9pRmi6ds9VDEE5wXMAFgB33OoFk.crl (hash: M3QNc2b9IhIfpzL8akHOGqgerKPeMEJfcrCWKn2HGA8=)
2: orL4sli2jaSeBff9va-I5ykDyO4.roa (hash: X71IZvpi5dNFJsBMRCrrWRzDFuE1IqQEepJ3uFR5Q4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:64:2a:fc:dd:76:5e:2c:1f:65:6d:35:d4:0d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f694668ba76cf550c4139c17300160077dcea059
Validity
Not Before: Apr 17 05:01:04 2026 GMT
Not After : Apr 18 05:01:04 2026 GMT
Subject: CN=57f1312e1f7fca1cc096fcaa5a43a1c90a2850aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:59:59:77:14:af:02:c9:57:8d:19:09:bf:
b1:15:ff:56:80:47:e7:ea:f7:2e:70:f8:3c:29:59:
a4:6e:6d:16:ab:5f:47:b4:62:37:ca:9c:95:f5:48:
0e:d3:5f:9d:c8:03:35:d9:39:c4:d7:f3:c7:13:b8:
43:db:63:1f:00:32:98:01:fd:21:df:db:a3:99:66:
10:ae:af:72:65:a3:05:7e:a2:c0:54:42:75:37:7a:
e7:80:1d:48:63:7d:ee:20:a6:34:28:71:d7:ab:94:
f1:09:d9:f0:c5:31:f2:75:6d:7d:fe:e2:dd:8e:f9:
3d:b5:90:c9:65:50:e0:d9:70:92:fa:a3:e8:17:f9:
87:a2:79:52:45:84:ea:6f:1a:0e:83:b6:08:5a:91:
8a:09:75:8c:c7:1c:27:3e:c6:0b:dd:41:88:82:ba:
74:c7:71:ae:32:21:39:59:12:95:b3:df:4d:6d:0f:
4f:37:90:80:2a:27:45:bf:1a:83:94:02:42:2a:d9:
43:6d:0e:eb:51:80:6f:c2:63:aa:99:10:a7:84:c4:
e9:c7:3b:8a:5e:4f:89:06:70:b2:a4:a4:86:7e:97:
d9:90:8d:0d:76:4b:9f:46:d4:7a:b7:82:b3:2d:47:
8c:8c:e6:a2:09:6a:30:fa:21:b8:57:0b:18:91:4b:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F1:31:2E:1F:7F:CA:1C:C0:96:FC:AA:5A:43:A1:C9:0A:28:50:AA
X509v3 Authority Key Identifier:
keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7b:84:d5:bd:8d:e3:d1:39:1a:35:25:de:56:d8:d9:3b:cc:
50:c9:6c:60:31:49:ec:a7:c7:c5:32:81:e1:77:56:7b:71:81:
65:6c:04:30:03:b9:71:0b:cd:b1:1d:f4:12:6b:99:43:44:4f:
97:ab:f9:25:44:92:55:e2:80:77:40:f7:0c:f2:fb:95:13:eb:
05:8a:af:35:cf:33:ef:30:18:41:06:44:fe:d8:b1:68:7e:73:
3d:48:8e:e4:cd:24:5d:92:38:ae:40:ef:ca:ea:0a:93:b5:64:
7d:09:04:ea:77:10:73:7a:88:af:ab:66:1d:02:e5:b8:42:3d:
22:af:3a:0c:38:7a:0c:3e:36:8c:cc:fd:9c:54:04:35:16:84:
81:56:72:2e:8e:9b:10:9a:45:fc:c0:c1:90:92:0e:53:fe:5d:
e9:6f:65:21:5e:8a:20:28:69:c3:6b:60:82:94:dd:99:9f:6f:
3c:67:7b:b2:e8:70:3b:2e:4c:92:8c:fa:16:7e:6f:5b:d3:ea:
ec:36:da:0e:60:4d:20:3d:8c:e1:b8:5f:ac:bc:ac:61:24:e7:
bd:7e:67:8c:2c:88:22:9e:0f:bd:d4:80:7f:52:20:bd:25:71:
35:54:ad:9a:35:c9:8d:1c:4f:d5:84:c9:bf:16:cb:18:85:d7:
de:e9:3b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:41:48 2026 by rpki-client