Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
File: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft (raw, json)
Hash identifier: MMvNcOBrnvTtfiFpvMi6bMiG5BYFRrotjs26/oub1P8=
Subject key identifier: 6E:8A:7C:AC:C9:35:43:70:B0:A7:44:2B:1D:A5:42:88:72:08:A8:E6
Authority key identifier: F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
Certificate issuer: /CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Certificate serial: 019D9B50E3671BABFCD0891B2B9AA391714D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
Manifest number: 04DA
Signing time: Fri 17 Apr 2026 12:01:02 +0000
Manifest this update: Fri 17 Apr 2026 12:01:02 +0000
Manifest next update: Sat 18 Apr 2026 12:01:02 +0000
Files and hashes: 1: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl (hash: RI8UW82lF3H5rVZ+sts1uJcyWMvv6Rv+mPoADLXBr58=)
2: uNoepfaXDI1VoCnimpxHCf9Ihpc.roa (hash: Y1lvrGMwjV5DGLBf//Ugh3tArJ+z6zA+0q1mFnD1D78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:e3:67:1b:ab:fc:d0:89:1b:2b:9a:a3:91:71:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Validity
Not Before: Apr 17 12:01:02 2026 GMT
Not After : Apr 18 12:01:02 2026 GMT
Subject: CN=6e8a7cacc9354370b0a7442b1da542887208a8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:ce:57:00:4d:5d:f2:7f:6c:8f:06:59:9e:
8d:ee:ee:ea:0e:b2:30:72:98:98:ad:d4:6d:b4:2c:
0d:01:e7:04:e3:6b:9e:a8:01:07:36:e9:9c:30:b0:
81:fd:94:9d:5d:ec:ba:4c:f8:05:a3:fb:5a:88:59:
5b:a1:52:1f:70:8f:b7:48:72:ab:e6:68:e7:b7:48:
6e:8f:c5:3e:66:1a:96:cf:8f:53:4a:2f:f2:b6:76:
dd:6a:56:ba:63:82:0a:fe:39:b0:68:a4:52:22:7c:
9b:53:f4:75:0b:42:6c:5e:4a:3e:ee:e2:57:69:94:
fc:25:01:4e:70:4e:64:cf:d3:3c:b3:84:50:bd:45:
b2:bd:90:a1:2c:d3:0b:bb:61:79:17:f2:76:cc:7d:
88:b8:19:f0:55:9d:83:39:6c:7f:64:64:04:47:68:
c4:38:32:d4:8f:b0:50:28:b3:63:33:82:35:ab:4d:
54:e5:7b:35:2a:59:36:ad:9c:2e:86:8d:0d:13:d0:
45:a9:4a:91:23:e6:62:e5:ce:4e:b5:e2:15:d9:2e:
2e:17:51:7f:b4:23:9e:c9:8d:fa:5b:9b:c5:4c:d9:
2d:72:39:36:df:9b:10:38:87:6e:80:0a:31:d1:1a:
8b:f7:f1:5b:22:16:af:47:f4:43:16:be:9e:0b:7e:
33:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8A:7C:AC:C9:35:43:70:B0:A7:44:2B:1D:A5:42:88:72:08:A8:E6
X509v3 Authority Key Identifier:
keyid:F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:92:52:b2:5f:b9:90:94:09:b2:2c:95:46:5d:f8:35:7a:fb:
fd:90:39:92:4b:6c:17:39:53:c4:ad:27:0a:7e:3b:38:08:83:
53:2f:31:8a:13:6b:f4:e9:c8:36:1f:5f:8e:18:b4:78:61:73:
56:73:a1:98:82:8d:78:f2:80:97:1e:54:99:45:e1:01:50:ce:
7b:d0:ec:70:12:96:c9:ce:bc:ae:7e:f9:f7:73:af:ae:47:c4:
74:42:8f:0a:06:93:86:b4:9b:03:4e:a8:41:02:9e:3e:88:c8:
ca:ae:c0:0f:02:0c:41:4b:25:ac:c7:21:6c:67:33:4d:70:2b:
07:f5:87:63:25:29:52:fe:c6:ed:35:ad:7e:f4:fa:5c:24:94:
bc:99:89:8d:1c:4b:d6:bb:15:54:49:d7:f5:ec:b4:fc:54:28:
ff:a1:70:30:7a:27:55:41:e8:e4:17:fd:cb:5b:3d:8b:3f:2a:
c8:b2:14:2c:54:e7:81:a4:ed:3a:80:1f:24:bd:23:8b:a5:69:
f9:ab:f1:98:7c:5e:29:4b:3b:b3:19:8e:45:f2:22:0a:5e:f1:
4c:fa:c5:22:bf:49:5e:25:51:c1:15:e9:97:51:d2:91:2d:dd:
68:3f:b6:18:2a:51:82:f2:59:8a:67:03:91:59:df:f7:09:72:
b7:db:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:03:32 2026 by rpki-client