Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
File: k9TErXMeRe0yCi84q3C3p7_36nk.mft (raw, json)
Hash identifier: P2Yach6ntHA5Ob6z7rIcVmAhW314lY6WWHNLHabQY40=
Subject key identifier: ED:FA:41:8D:7F:50:44:EB:EB:37:67:A7:46:20:21:D6:18:BF:9F:52
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 019D9999604BF7E06209EBF1D7C10CC94739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
Manifest number: 1184
Signing time: Fri 17 Apr 2026 04:00:58 +0000
Manifest this update: Fri 17 Apr 2026 04:00:58 +0000
Manifest next update: Sat 18 Apr 2026 04:00:58 +0000
Files and hashes: 1: iuwBL7EOrQa4HbLS-ENYqi2dlmg.roa (hash: l+IA0E4FLdunXgerhqHKPGiXveZnWwjczc5i6icbMxI=)
2: k9TErXMeRe0yCi84q3C3p7_36nk.crl (hash: 1OdoCAxb5JFVlKcWODpum+hox8/bDLVxcbPv606gIbs=)
3: lPKn0A-IXhdHwCClGsh4tcwcKys.roa (hash: r48MZGYcfxv5fZud0sCAUwlrU9Dsef9uT7Z4ZtLSoLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:60:4b:f7:e0:62:09:eb:f1:d7:c1:0c:c9:47:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: Apr 17 04:00:58 2026 GMT
Not After : Apr 18 04:00:58 2026 GMT
Subject: CN=edfa418d7f5044ebeb3767a7462021d618bf9f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:53:9a:e8:21:67:33:19:ee:f4:86:c9:77:
b7:7d:32:04:25:c1:d9:f6:1c:8b:2f:7b:42:a0:f7:
67:bf:31:78:3f:dd:c0:1b:aa:df:53:60:54:3d:95:
1c:39:22:3c:23:73:6c:66:a6:b1:5d:3e:35:78:7f:
26:7a:b4:c7:68:a9:38:3d:14:f9:20:40:c7:c0:c5:
fe:8a:51:81:c7:55:41:b9:5f:9b:3f:31:3d:3b:cd:
2d:37:13:6a:e2:de:66:ae:be:ac:82:88:3c:7c:bc:
5f:dd:27:84:fd:04:0c:b0:d8:ac:e8:54:24:91:a6:
6d:a8:a9:f8:95:65:93:b0:ff:cf:3f:18:35:7d:07:
5f:1a:c9:a5:ea:8d:a6:c8:c8:89:65:ca:f7:a3:e3:
44:67:fb:06:0c:c0:93:4f:67:77:c6:4e:d7:43:7a:
26:20:55:7e:5a:db:51:6f:06:e4:ca:af:15:43:57:
81:ea:ef:fb:63:4f:f5:c6:52:c6:bc:d3:74:44:8b:
61:a1:2e:d0:83:87:2c:4c:b4:94:94:51:d4:95:82:
f6:70:29:61:8a:92:6b:d2:c1:4f:c0:6c:38:b4:5c:
12:7d:23:84:4a:7c:c4:6f:10:24:dc:3b:70:3a:7a:
ab:a0:98:24:73:d1:8d:7c:93:18:87:10:96:95:3d:
53:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FA:41:8D:7F:50:44:EB:EB:37:67:A7:46:20:21:D6:18:BF:9F:52
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:91:66:c3:64:4a:23:04:95:3d:76:9e:55:09:5d:20:85:88:
f0:8c:1e:1c:75:81:99:4b:d3:c5:96:73:7a:ec:f1:fe:3b:79:
73:1d:af:57:60:6a:7a:4b:bf:d6:68:8f:8a:05:3d:34:56:61:
7b:6b:60:8f:e1:0d:cb:e8:f2:27:10:65:ff:3a:d2:6c:53:b8:
6d:61:4c:be:6a:ce:8e:07:34:df:b4:1c:ec:4d:f6:e8:3d:49:
43:ee:8f:2b:33:0b:1b:f9:e6:68:70:a4:ae:4d:fb:2e:86:8e:
65:d6:ca:2f:74:d8:b5:8f:7f:87:6a:a2:00:b2:33:c3:f7:f4:
9e:39:59:97:72:cd:e1:7f:d8:92:e9:b7:9f:3d:ba:66:3c:e9:
66:2a:74:45:3f:f4:65:60:9f:34:8d:86:c4:d4:d5:e8:e3:ff:
82:ff:fc:5a:aa:d6:b8:04:5d:c0:7b:ea:f7:71:33:d4:b9:68:
c1:95:cf:e6:58:84:47:59:84:50:d7:f3:25:ad:8d:04:5d:c5:
80:ab:6c:b1:c8:86:37:8f:01:ef:12:a6:bd:8b:d0:67:50:65:
b7:7c:a5:c1:2d:15:46:9e:b9:a6:42:85:2e:be:35:56:32:0d:
dc:79:2e:aa:58:66:dd:ea:d0:9f:18:20:e4:a0:71:cc:bf:e5:
fc:9c:4c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:44:31 2026 by rpki-client