Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
File: iD9yYGUAJrlzoYp_PplY0yHs4ds.mft (raw, json)
Hash identifier: IrlH66D1LhqYD8/ImJekoO0n7r/6Km7n2ToNoI2d7A0=
Subject key identifier: 13:13:D1:C9:82:CE:6C:6F:88:7A:13:81:7F:16:D5:B5:71:EC:2E:84
Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db
Certificate serial: 019D9A3E9E05C25A45A8985B70A2587A46A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
Manifest number: 030C
Signing time: Fri 17 Apr 2026 07:01:27 +0000
Manifest this update: Fri 17 Apr 2026 07:01:27 +0000
Manifest next update: Sat 18 Apr 2026 07:01:27 +0000
Files and hashes: 1: _nHQVX4gUfRcsyUXq5yHaGKdYhU.roa (hash: R3LVcKNvDMfvVqa7EK825MNQi2hSPcfWJhILpOzo+sU=)
2: bZGmBUJyBwx1sWA4_0env9myjwE.roa (hash: 4tsqiBWMFE9lEeiy6ibqGVOqXOKllflXzZwV282QLH8=)
3: iD9yYGUAJrlzoYp_PplY0yHs4ds.crl (hash: jbcsT7Epbc/ORFQ8Lj355rZ5St6NpmTO7TvAjzYCvI4=)
4: yWPZuql0MvhSm3JMA1hMhAx0qW8.roa (hash: 2i2jlPPD7IE9jQ4n5YA8j4oeQ4N7jBY19i7lQ4cGyLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:9e:05:c2:5a:45:a8:98:5b:70:a2:58:7a:46:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db
Validity
Not Before: Apr 17 07:01:27 2026 GMT
Not After : Apr 18 07:01:27 2026 GMT
Subject: CN=1313d1c982ce6c6f887a13817f16d5b571ec2e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:38:68:63:70:fe:43:5d:b1:69:c9:29:08:eb:
15:a0:01:3c:3a:4f:ff:c0:29:a2:7b:87:c4:91:5b:
fd:ab:68:e6:c8:ba:77:4c:bb:87:a1:dd:9a:1a:f2:
78:02:f5:39:bc:6f:00:67:4b:9e:17:83:5a:12:4a:
74:43:c2:c5:13:1f:38:83:2f:37:4d:f9:6b:f4:08:
50:99:10:3e:18:0e:54:54:4f:a1:c4:27:c0:81:52:
e1:22:34:f0:09:3d:d9:ea:3a:8f:57:d7:28:7f:5c:
2c:93:24:cb:e7:55:8d:05:07:08:f2:ff:1b:23:bc:
ea:93:1a:45:5d:ca:a0:73:1e:e6:c5:cb:15:b5:ca:
82:ee:57:ca:26:4e:0b:d7:4a:93:a1:bc:23:20:83:
ca:e0:c6:b4:3f:c5:1d:a8:f9:ef:d3:db:1a:61:01:
7c:30:e5:2a:d5:c8:87:57:0b:3e:6d:68:da:89:01:
80:f0:ee:99:b1:d0:25:d9:6e:66:32:b6:d2:b2:f1:
c0:fd:8c:c6:5b:68:2a:31:b3:43:b8:c0:84:1c:0b:
5c:70:64:29:61:2c:70:24:0a:ef:b8:4e:14:44:6c:
b3:24:fa:b9:0b:b7:28:f6:5a:e4:42:0e:d2:f4:32:
29:cf:97:c5:c4:5d:db:f6:fe:60:a9:ab:f3:28:bd:
56:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:13:D1:C9:82:CE:6C:6F:88:7A:13:81:7F:16:D5:B5:71:EC:2E:84
X509v3 Authority Key Identifier:
keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5b:b1:f7:6e:22:e8:d5:b3:11:79:a5:e6:72:45:7d:5f:9c:
38:f3:72:6d:a0:3f:b8:f8:4f:65:e5:bc:01:d7:c5:09:63:59:
dc:5a:c6:69:b1:9f:d4:a8:93:37:90:ce:5d:31:4d:e3:1d:b8:
08:0d:64:32:50:e5:14:8a:d3:05:ca:fe:f0:12:61:2f:c5:a0:
47:b6:21:e4:2a:60:3e:7c:79:76:09:b5:ce:d6:35:f7:86:40:
25:e8:38:0e:eb:86:37:d9:cd:d4:a6:81:46:b3:6a:ca:23:77:
cb:4b:23:e5:9e:05:9d:16:72:42:c1:e0:72:1d:00:7b:0a:1f:
1c:da:ac:4b:4e:37:b9:b5:bd:ab:d5:c1:8b:52:50:7f:99:82:
0f:1f:7b:bb:40:12:12:6b:0b:42:ad:1e:72:af:9d:98:dd:b5:
87:c5:ab:67:bb:b1:03:d1:2f:df:c8:bb:7f:44:1e:ee:58:46:
be:94:19:82:66:8d:73:6f:1c:a6:da:29:ac:a1:cd:84:a7:4b:
40:9e:6e:21:3a:ac:b3:dd:bb:ff:fb:30:03:a7:6c:65:5f:21:
a0:b0:ed:63:9a:85:77:1d:2b:84:e2:a0:d1:b4:39:09:f5:b9:
e3:93:0e:86:ac:36:1c:bd:bb:23:45:5c:d2:ac:ea:29:3a:6d:
a6:43:88:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:07 2026 by rpki-client