Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
File: 9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json)
Hash identifier: wK1JkQso4i2vl5X69LByup+7CcQQxhW8GL/2vrYOt20=
Subject key identifier: 8B:88:19:C2:A9:56:85:66:98:38:40:CF:7D:C0:B4:70:87:27:20:A4
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 019D9BBEEEAF16B2F86AF269893361C72DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 14:01:14 +0000
Manifest this update: Fri 17 Apr 2026 14:01:14 +0000
Manifest next update: Sat 18 Apr 2026 14:01:14 +0000
Files and hashes: 1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: jX8kdbZsB0j3BHEXk0JwcggxngnScN2KogVeZ3+uIXg=)
2: mGKvGN6mzAi9Xi9OgEnQnIpovsQ.roa (hash: AZAga0gvOyoyk29F5YS9oe0dyqX933PqnZoBR7aFkQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:ee:af:16:b2:f8:6a:f2:69:89:33:61:c7:2d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: Apr 17 14:01:14 2026 GMT
Not After : Apr 18 14:01:14 2026 GMT
Subject: CN=8b8819c2a9568566983840cf7dc0b470872720a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:c2:cb:9d:71:d0:52:94:98:87:1a:b1:b5:
8a:5c:7d:a8:78:4b:77:64:ad:c9:d9:9b:2d:9d:26:
8c:81:a0:1d:a3:4d:af:34:e0:b9:0b:e8:82:26:5f:
12:0f:45:e8:42:d3:3f:52:3d:02:ee:35:1b:95:20:
0a:29:a0:37:6d:6e:53:2c:60:c0:ea:30:68:7d:88:
29:0b:c1:15:d2:ce:a7:e3:6a:6f:9d:d1:f8:f0:a2:
0c:e2:fe:c6:e7:5f:6a:b1:78:c7:76:97:02:fd:9b:
47:6d:d2:99:c2:be:a0:14:c0:71:88:35:bf:d1:27:
f7:2b:85:66:e8:cc:ca:d2:94:40:ef:fa:33:54:47:
2e:4f:22:cf:58:bf:c7:cb:82:72:05:23:0b:ac:a7:
7a:9f:cb:46:83:9d:15:32:72:48:70:97:80:49:4c:
54:aa:2c:25:79:07:fa:32:ad:9d:68:7e:a1:78:5a:
aa:9c:ba:56:cc:7b:eb:4b:2f:55:2e:8c:1f:a9:6a:
69:a7:1e:7b:69:ba:7d:69:ef:8c:05:df:c4:93:a5:
6a:ff:75:54:09:ee:03:fc:10:35:f6:76:e4:b4:80:
9f:5e:d1:b0:53:d5:d0:8a:85:89:97:9d:4b:d0:57:
21:e6:15:be:b6:89:82:ba:3e:0a:b1:3b:c6:8d:57:
36:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:88:19:C2:A9:56:85:66:98:38:40:CF:7D:C0:B4:70:87:27:20:A4
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:47:e4:8c:69:61:7d:0a:10:c3:06:c8:d1:7f:e4:61:52:2c:
21:26:56:51:5d:f1:ce:90:d1:84:d5:3c:da:58:ed:f8:0e:ce:
32:ee:c8:bb:46:ab:28:bc:d0:aa:7c:86:07:17:3b:92:63:30:
70:8f:06:2d:fa:2f:c5:7e:42:e5:37:43:2a:2c:92:87:c6:e0:
1c:04:b9:5e:91:77:82:ab:c3:76:36:68:8d:43:f3:75:34:55:
a3:b3:a4:da:5f:33:6a:b0:bb:97:f4:9d:8e:d8:62:c4:95:4e:
a7:01:06:6c:d5:b3:1f:d1:e0:9e:0e:8a:d8:c2:06:2f:fa:42:
4a:39:fe:ff:0f:75:d7:f1:85:3b:26:46:d4:b9:44:f7:62:5e:
82:02:61:45:bf:6d:60:3c:c3:98:4f:f8:9f:d4:a8:80:bd:1b:
6d:0b:91:98:2a:0c:67:13:c2:14:7a:3f:3e:79:cd:60:ba:6c:
8b:ca:fe:fd:94:e0:08:b9:de:68:3d:0f:47:d8:ef:75:07:7a:
c8:12:ca:0a:7e:6a:bb:b2:a8:24:a4:8e:7e:cc:29:57:8c:74:
24:b8:b3:cd:43:86:dd:83:f8:43:04:aa:d7:55:14:e0:44:d6:
5f:ec:24:4e:69:fb:df:4a:a6:bf:b4:a6:a3:ce:d6:15:2d:26:
8d:e0:4f:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvu6vFrL4avJpiTNhxy3HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzIzMjVkMmQyMTk3NDY2OWM0ODhmOWViYWE2YmJiOTJj
ZDVmZWQwHhcNMjYwNDE3MTQwMTE0WhcNMjYwNDE4MTQwMTE0WjAzMTEwLwYDVQQD
Eyg4Yjg4MTljMmE5NTY4NTY2OTgzODQwY2Y3ZGMwYjQ3MDg3MjcyMGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkvCy51x0FKUmIcasbWKXH2oeEt3
ZK3J2ZstnSaMgaAdo02vNOC5C+iCJl8SD0XoQtM/Uj0C7jUblSAKKaA3bW5TLGDA
6jBofYgpC8EV0s6n42pvndH48KIM4v7G519qsXjHdpcC/ZtHbdKZwr6gFMBxiDW/
0Sf3K4Vm6MzK0pRA7/ozVEcuTyLPWL/Hy4JyBSMLrKd6n8tGg50VMnJIcJeASUxU
qiwleQf6Mq2daH6heFqqnLpWzHvrSy9VLowfqWpppx57abp9ae+MBd/Ek6Vq/3VU
Ce4D/BA19nbktICfXtGwU9XQioWJl51L0Fch5hW+tomCuj4KsTvGjVc2jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuIGcKpVoVmmDhAz33AtHCHJyCkMB8GA1UdIwQY
MBaAFPVyMl0tIZdGacSI+euqa7uSzV/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhJeVhTMGhsMFpweElqNTY2cHJ1NUxOWC0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hYzAzODUtMjA5MC00NzA0LThlMDEt
M2U2MmU5ZTc4OTA2LzEvOVhJeVhTMGhsMFpweElqNTY2cHJ1NUxOWC0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hYzAzODUtMjA5MC00NzA0LThlMDEtM2U2MmU5ZTc4OTA2
LzEvOVhJeVhTMGhsMFpweElqNTY2cHJ1NUxOWC0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0fkjGlh
fQoQwwbI0X/kYVIsISZWUV3xzpDRhNU82ljt+A7OMu7Iu0arKLzQqnyGBxc7kmMw
cI8GLfovxX5C5TdDKiySh8bgHAS5XpF3gqvDdjZojUPzdTRVo7Ok2l8zarC7l/Sd
jthixJVOpwEGbNWzH9Hgng6K2MIGL/pCSjn+/w911/GFOyZG1LlE92JeggJhRb9t
YDzDmE/4n9SogL0bbQuRmCoMZxPCFHo/PnnNYLpsi8r+/ZTgCLneaD0PR9jvdQd6
yBLKCn5qu7KoJKSOfswpV4x0JLizzUOG3YP4QwSq11UU4ETWX+wkTmn730qmv7Sm
o87WFS0mjeBPRQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:09:09 2026 by rpki-client