Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
File: 9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft (raw, json)
Hash identifier: cbirvxMFoEC03bmiH3F7eM3dpli4HJIsFjZnl/TYi3Q=
Subject key identifier: 4E:D7:05:7D:9C:A9:43:A4:AE:43:6A:42:7F:B5:16:25:65:94:A9:F6
Authority key identifier: F4:B2:51:1F:B0:74:F5:E1:65:85:35:BA:46:1E:45:80:DB:D8:41:37
Certificate issuer: /CN=f4b2511fb074f5e1658535ba461e4580dbd84137
Certificate serial: 019D9B879054E275BE2343B8B810BF80EF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
Manifest number: FF
Signing time: Fri 17 Apr 2026 13:00:45 +0000
Manifest this update: Fri 17 Apr 2026 13:00:45 +0000
Manifest next update: Sat 18 Apr 2026 13:00:45 +0000
Files and hashes: 1: 9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl (hash: lMEY+XNC2dUCrn4dOKJ/Zu+j3P1BH4q0iog1xqcdLkg=)
2: w4OPW1w1cwaWMj4uXqpkKkiEaKk.roa (hash: jUe+lcC4F+1K+YbOo4TiwqXw96cjr2eJwGRjPOVvNjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:90:54:e2:75:be:23:43:b8:b8:10:bf:80:ef:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b2511fb074f5e1658535ba461e4580dbd84137
Validity
Not Before: Apr 17 13:00:45 2026 GMT
Not After : Apr 18 13:00:45 2026 GMT
Subject: CN=4ed7057d9ca943a4ae436a427fb516256594a9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:33:90:09:9a:a3:36:d9:0b:98:90:95:72:
ac:04:34:55:f2:9d:64:9d:4b:e3:b3:e9:7a:e4:2d:
4d:05:66:09:68:5e:44:55:bf:df:ed:3b:1e:b5:84:
c7:a5:dc:65:6f:c5:16:30:1f:dc:7b:48:1e:57:b4:
3a:54:e0:58:42:be:23:50:3b:94:1b:2d:70:21:13:
eb:a9:cb:fc:fd:0d:6b:92:06:20:66:36:b7:41:1e:
41:ed:f7:fd:dd:0b:f1:9c:f1:89:80:4d:f6:51:9f:
80:3b:c9:c0:a0:ae:e7:40:fd:0c:f6:0e:17:18:63:
4e:58:86:1f:36:3f:fb:9d:63:cf:49:5e:12:5b:52:
39:da:37:7c:2b:79:81:cb:f4:5d:9c:fd:a6:d5:e0:
57:a8:60:2a:46:c6:41:f1:0f:7a:01:d0:7c:a5:2e:
ce:69:35:e9:df:1d:c1:ed:f2:67:8c:76:fb:82:cc:
03:71:d3:e5:95:2c:4b:b3:7f:70:82:fc:1f:17:99:
9d:d4:33:58:83:08:ac:2c:52:16:d8:10:41:8e:25:
25:68:45:20:05:bb:ea:0d:cb:9a:92:fe:98:45:b3:
ff:0a:11:69:43:7d:4b:db:4e:09:c0:1b:8a:fc:18:
1f:47:7b:e5:23:5b:71:7a:7d:84:b5:b3:f6:3f:58:
f8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D7:05:7D:9C:A9:43:A4:AE:43:6A:42:7F:B5:16:25:65:94:A9:F6
X509v3 Authority Key Identifier:
keyid:F4:B2:51:1F:B0:74:F5:E1:65:85:35:BA:46:1E:45:80:DB:D8:41:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:67:cd:36:4e:eb:07:03:65:f9:1d:bf:f1:80:08:12:2b:36:
b8:73:75:49:33:2a:83:6f:10:58:80:15:00:c0:d3:34:82:ef:
40:9a:8e:ea:c3:3d:e5:13:2f:1d:89:84:91:f4:66:0a:4e:cd:
57:bc:7f:aa:7f:ed:52:f5:c3:08:a2:a1:c4:0d:8d:a2:df:78:
79:4e:a2:43:7c:d0:6a:86:b6:9a:ce:cc:37:ca:bc:0a:e4:2b:
0d:fe:69:90:c5:5e:18:ce:fb:41:75:8d:d2:b9:27:18:fb:c2:
04:4d:6a:96:3f:d5:9c:f7:1e:8d:9e:9f:d0:65:6f:be:fc:fb:
4c:f4:a8:55:ce:34:24:d2:60:d0:2d:cc:38:36:45:69:bf:9d:
3e:22:1e:ba:d2:f8:f5:83:1a:17:b2:b8:4f:53:14:29:a3:19:
19:6b:98:8b:e4:05:e9:bb:17:c7:0f:33:fc:62:45:f0:cd:c5:
4e:77:dd:3c:be:f1:60:d7:42:46:30:b3:75:cf:54:4c:f1:41:
e5:ec:0e:d9:99:bb:1c:1c:6e:9e:92:7a:64:bb:f4:64:ff:20:
7d:d1:b9:41:92:3d:ca:57:ae:d7:cb:34:fc:24:cc:af:84:21:
48:6e:e8:76:ee:96:2d:4a:e9:f3:3a:17:8e:c6:4e:e2:04:b2:
7a:21:30:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:37:35 2026 by rpki-client