Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
File: 9vSDrNiLUfXUf1d_EBtUV3heDts.mft (raw, json)
Hash identifier: M5Z4DXyux6WLd7t/uxP2ZznAgaUP8L9FO/nFib34Yk4=
Subject key identifier: C2:14:8C:8F:0E:AE:17:22:42:BA:F9:A5:E6:1F:A7:32:45:C5:A4:5D
Authority key identifier: F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB
Certificate issuer: /CN=f6f483acd88b51f5d47f577f101b5457785e0edb
Certificate serial: 019DA4F93A4F8CCBA5FA0E0B66D8B15088F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
Manifest number: 0109
Signing time: Sun 19 Apr 2026 09:01:29 +0000
Manifest this update: Sun 19 Apr 2026 09:01:29 +0000
Manifest next update: Mon 20 Apr 2026 09:01:29 +0000
Files and hashes: 1: 9vSDrNiLUfXUf1d_EBtUV3heDts.crl (hash: /g93j/wkG5rF0Gc6pyq5VT67tlsn0CIkCI8gvTx7mq4=)
2: h9dclcnj73gGMmqKRNemWaDpAK4.roa (hash: mJuahx80L+X55SPmqYQeNyVRCkJnTbE2MlO0Pta3IEU=)
3: tTIiXNFmVwT5T0hHiGKIodMu4-0.roa (hash: 1Yst/9/lTuLJaVKmnwJPraD68CwcsXf9gsuFNgo7ggI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:3a:4f:8c:cb:a5:fa:0e:0b:66:d8:b1:50:88:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f483acd88b51f5d47f577f101b5457785e0edb
Validity
Not Before: Apr 19 09:01:29 2026 GMT
Not After : Apr 20 09:01:29 2026 GMT
Subject: CN=c2148c8f0eae172242baf9a5e61fa73245c5a45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:dc:b9:2c:3b:e1:2b:9b:ef:a1:ff:1f:64:
3c:d0:28:7b:4c:32:78:c7:e8:00:69:50:f8:91:9b:
00:ed:fe:48:05:53:20:cf:19:78:e0:0a:62:7e:e6:
ed:58:1a:70:d3:d8:cc:3f:12:f1:ad:4b:81:dd:cc:
54:f0:7f:26:2c:6f:53:03:5d:89:c3:67:ab:1a:62:
b6:09:58:10:2d:35:c6:4c:f5:a9:24:5e:54:b1:bd:
3a:57:7c:c2:9f:07:39:ad:83:14:d9:a3:6b:a9:f9:
bb:dd:1d:72:8a:16:44:f4:90:73:f8:3a:62:5f:cf:
24:48:d9:3b:8a:55:e8:16:b9:2f:40:3f:4b:4b:df:
55:b9:4e:20:78:ce:50:cd:bb:9b:65:e3:6b:80:78:
06:c2:65:f4:1a:2f:ce:76:ef:57:76:91:9f:53:af:
14:e1:b2:c5:36:af:cf:68:e9:1e:91:6c:c2:e9:c0:
fb:7c:d1:ab:c3:f5:32:a7:88:b6:26:f6:f2:2a:4f:
84:74:31:58:36:84:a8:3c:32:df:4d:80:8b:9c:12:
ef:26:dc:c4:13:d5:fb:b2:7e:f9:c4:c6:cc:bf:05:
97:80:e1:a0:f4:31:7b:66:fc:d5:28:57:e3:5a:ec:
f1:25:73:2e:4f:27:4b:a8:1d:8a:f9:74:35:6b:9c:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:14:8C:8F:0E:AE:17:22:42:BA:F9:A5:E6:1F:A7:32:45:C5:A4:5D
X509v3 Authority Key Identifier:
keyid:F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:10:a1:9b:00:41:ef:6d:4f:be:b4:d6:28:61:d3:78:86:be:
0a:23:4d:b4:14:2a:7e:0e:d5:e5:ee:84:30:62:31:f9:12:08:
f1:7f:0a:58:85:47:53:2a:56:f5:ef:91:75:08:06:fa:3f:70:
30:36:bf:7a:a9:01:22:9b:7f:03:bc:04:32:76:d6:c5:90:9e:
b2:46:c5:0d:ed:98:3b:a7:07:89:50:ca:5c:46:2c:ae:05:c6:
ba:e7:8d:4c:25:c7:e8:f2:74:c2:09:43:b0:55:6c:87:49:cc:
64:84:dc:0c:6c:17:46:49:34:3b:2d:02:7c:39:20:cd:f4:2d:
7e:22:18:a3:cb:84:f6:c7:7f:e1:f7:ad:b2:8f:a6:88:81:34:
b3:e8:d7:d5:ff:5a:26:d1:60:bd:87:44:b0:1f:7f:31:b0:88:
1e:47:b7:81:6b:45:bd:51:15:62:83:f1:d9:92:88:44:f1:68:
19:a9:ad:31:61:72:3e:c0:72:60:64:be:71:63:a3:f8:59:f7:
32:99:6d:c1:ac:c7:ff:3f:8e:65:1c:6f:d4:3f:9f:66:05:a5:
31:36:61:ef:8e:81:78:d9:52:d1:a5:22:6f:2b:4c:e5:fa:ae:
b2:67:67:3b:ae:a4:b0:77:ec:0d:63:ee:09:96:72:ef:d3:58:
29:26:93:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:42:32 2026 by rpki-client