Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
File: 9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json)
Hash identifier: DAFfbBaAA34/Oup2GkVNWkFc3tDeDTP3qnpXlJCMB48=
Subject key identifier: 95:2D:C8:83:22:3A:40:03:9C:68:BF:5E:10:7B:F2:20:23:2F:21:C2
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial: 019D9DAD6432C9B210327EB94884DEC51F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 23:01:19 +0000
Manifest this update: Fri 17 Apr 2026 23:01:19 +0000
Manifest next update: Sat 18 Apr 2026 23:01:19 +0000
Files and hashes: 1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: I2If4g0CkpyblOq9grE4UcNVFjYCnjHCuL7LeCcGbms=)
2: pY5anUcF6nGQjRStvwUsfXfpPT4.roa (hash: ikRAmfOVAxrB8DLsnpaLa+mv7owmfzH47WnehifEhhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:64:32:c9:b2:10:32:7e:b9:48:84:de:c5:1f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Validity
Not Before: Apr 17 23:01:19 2026 GMT
Not After : Apr 18 23:01:19 2026 GMT
Subject: CN=952dc883223a40039c68bf5e107bf220232f21c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:d2:86:54:9a:aa:4a:02:4c:95:60:30:c7:
76:c8:ba:63:1e:7e:0d:a6:5a:7a:71:59:4f:f0:ed:
1f:f0:1d:38:a3:92:d8:7b:dc:ba:aa:28:19:71:63:
ac:ed:55:f3:3b:46:08:b4:16:4d:38:76:00:c6:71:
ad:68:66:d5:79:8d:0e:72:f2:79:51:61:27:f9:23:
40:cf:e0:4d:79:db:96:f8:51:67:dd:7b:81:3f:df:
4e:0c:d0:fe:95:40:28:78:1f:4f:e5:94:80:4d:f1:
78:4d:b9:81:89:42:f3:14:8e:21:1b:44:1e:8d:b3:
1b:7a:27:0f:c0:08:38:75:1e:af:60:db:f6:7b:ae:
7d:30:08:7c:a4:5a:4f:1e:75:70:2c:af:90:e6:4e:
af:8a:b7:4b:51:4b:ab:bb:7b:d1:61:be:6b:90:56:
a2:5f:63:0b:0b:f4:1f:57:6a:e3:4d:42:c0:20:7a:
37:c7:26:9a:b8:d2:75:91:a9:ae:0e:0a:93:6a:7c:
99:16:15:03:1b:24:d5:e8:ef:9e:a7:fd:6d:9c:04:
0a:37:5c:dc:72:1c:d5:a9:c9:d3:b5:f6:38:fe:d0:
f5:4c:aa:2b:41:ac:0f:d4:a4:a8:1d:32:b8:69:16:
9a:7b:20:de:99:6b:c9:cd:16:84:54:3b:27:cf:fc:
58:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2D:C8:83:22:3A:40:03:9C:68:BF:5E:10:7B:F2:20:23:2F:21:C2
X509v3 Authority Key Identifier:
keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8c:6d:af:0c:2d:22:99:15:80:8d:c8:5a:fa:cf:19:81:5c:
e6:d6:a9:22:d4:de:c7:f0:6a:00:5e:f0:d1:ed:75:21:12:85:
ed:46:00:a6:73:4f:67:e3:cb:40:8f:eb:b3:92:90:ba:7b:94:
9e:92:84:7e:24:ed:a8:a1:04:02:bb:87:06:65:d0:0b:46:10:
dd:07:d4:d8:ed:f7:f5:6e:03:f2:9e:f0:32:d8:f0:e1:85:69:
91:af:9a:e1:14:f3:8b:a1:66:0d:7f:6b:e3:89:19:83:35:db:
c8:27:30:1f:20:b1:18:66:cb:73:92:fb:7a:ce:91:ed:21:0e:
bf:24:c9:71:51:be:78:be:93:33:b0:7e:58:b7:94:16:6d:70:
fb:38:df:e5:2c:1a:81:d7:72:23:03:70:29:46:b5:04:cf:8d:
fa:0d:2c:30:0c:bd:89:08:99:7b:ae:f8:6d:b9:03:c9:68:f3:
56:ae:0e:19:a4:57:26:36:7f:41:31:cd:ca:85:52:c1:e9:17:
c4:6b:56:53:25:fa:68:3c:6d:83:1d:05:a8:1c:87:46:53:51:
b7:65:28:14:03:28:36:3f:6d:ba:eb:b5:2c:2e:0f:f2:fc:a8:
66:84:b4:1b:94:23:c1:39:e1:08:94:5f:2f:04:e1:33:b4:3a:
05:ae:fa:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2drWQyybIQMn65SITexR9lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NWU3NDIzZDNmN2IxYjJlN2FjYzFiYTFjZWUwMjQwYjdk
Njc5ZDYwHhcNMjYwNDE3MjMwMTE5WhcNMjYwNDE4MjMwMTE5WjAzMTEwLwYDVQQD
Eyg5NTJkYzg4MzIyM2E0MDAzOWM2OGJmNWUxMDdiZjIyMDIzMmYyMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL/ShlSaqkoCTJVgMMd2yLpjHn4N
plp6cVlP8O0f8B04o5LYe9y6qigZcWOs7VXzO0YItBZNOHYAxnGtaGbVeY0OcvJ5
UWEn+SNAz+BNeduW+FFn3XuBP99ODND+lUAoeB9P5ZSATfF4TbmBiULzFI4hG0Qe
jbMbeicPwAg4dR6vYNv2e659MAh8pFpPHnVwLK+Q5k6virdLUUuru3vRYb5rkFai
X2MLC/QfV2rjTULAIHo3xyaauNJ1kamuDgqTanyZFhUDGyTV6O+ep/1tnAQKN1zc
chzVqcnTtfY4/tD1TKorQawP1KSoHTK4aRaaeyDemWvJzRaEVDsnz/xYOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUtyIMiOkADnGi/XhB78iAjLyHCMB8GA1UdIwQY
MBaAFPZedCPT97Gy56zBuhzuAkC31nnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWw1MEk5UDNzYkxuck1HNkhPNENRTGZXZWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wMTMxNTMtYjYzYi00MDc0LWFjNWMt
ZjRkZDY2MzlmODc1LzEvOWw1MEk5UDNzYkxuck1HNkhPNENRTGZXZWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8wMTMxNTMtYjYzYi00MDc0LWFjNWMtZjRkZDY2MzlmODc1
LzEvOWw1MEk5UDNzYkxuck1HNkhPNENRTGZXZWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4xtrwwt
IpkVgI3IWvrPGYFc5tapItTex/BqAF7w0e11IRKF7UYApnNPZ+PLQI/rs5KQunuU
npKEfiTtqKEEAruHBmXQC0YQ3QfU2O339W4D8p7wMtjw4YVpka+a4RTzi6FmDX9r
44kZgzXbyCcwHyCxGGbLc5L7es6R7SEOvyTJcVG+eL6TM7B+WLeUFm1w+zjf5Swa
gddyIwNwKUa1BM+N+g0sMAy9iQiZe674bbkDyWjzVq4OGaRXJjZ/QTHNyoVSwekX
xGtWUyX6aDxtgx0FqByHRlNRt2UoFAMoNj9tuuu1LC4P8vyoZoS0G5QjwTnhCJRf
LwThM7Q6Ba768Q==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:14 2026 by rpki-client