Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
File: 9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json)
Hash identifier: 4CDavxGENpgB1bQhb/s1In7+gW0gIKU8UuAzRGTdO70=
Subject key identifier: 1F:90:6E:BA:56:8D:A8:EB:1D:14:8A:BA:5A:32:0E:85:7D:D4:5E:2F
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial: 019DA41CD406F3BFADEA08C4B1CEF5633F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 05:00:45 +0000
Manifest this update: Sun 19 Apr 2026 05:00:45 +0000
Manifest next update: Mon 20 Apr 2026 05:00:45 +0000
Files and hashes: 1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: hpDNiHLLPXW+Ar+QEHUuT2lt0IpUJ1p5xhzYDJ1tgWA=)
2: CvAwcxB4NQhTMik421cY6D4GJSQ.roa (hash: bDEysHdEoYRzyx+ZtQs8J1SFqsQ1uvog9sHvqZgzUSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:d4:06:f3:bf:ad:ea:08:c4:b1:ce:f5:63:3f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Validity
Not Before: Apr 19 05:00:45 2026 GMT
Not After : Apr 20 05:00:45 2026 GMT
Subject: CN=1f906eba568da8eb1d148aba5a320e857dd45e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:73:21:da:89:13:f4:2a:28:c0:c1:11:b3:fa:
ce:f1:fc:24:57:9b:3b:12:b0:a2:7b:38:91:6d:bb:
9f:d5:f8:34:bd:f2:db:50:01:a4:3d:8c:99:2c:eb:
27:6e:9d:59:d5:56:e1:01:aa:ac:4a:d8:07:36:1a:
85:54:8c:f5:93:95:e4:bd:b4:c3:d4:60:6f:35:34:
97:ce:a2:8c:7a:25:0b:a4:f5:97:5f:fc:15:26:21:
df:71:1f:f6:86:2f:e2:80:cf:d8:cc:b3:b7:e7:f4:
4a:72:02:fd:a8:4e:03:07:51:6f:a2:ef:5f:27:a2:
56:d1:3a:6c:35:3e:1b:bd:6e:b8:27:06:f7:28:87:
49:53:ae:5d:34:0e:dc:20:43:20:0a:4f:b1:20:3d:
9a:88:3e:fc:c5:94:c3:51:2c:39:7a:f0:ce:9d:5f:
c8:25:bb:4c:ee:e1:1f:e9:59:9d:0e:5a:28:96:ce:
8b:5e:b6:05:2e:eb:16:40:2f:9c:1a:22:90:93:5b:
5b:dd:0f:1e:60:7d:98:25:e9:9f:00:22:00:16:0f:
ea:1c:f4:7c:7c:54:da:cb:6e:eb:22:75:66:a6:3a:
84:65:69:cd:af:c1:b0:f0:61:bd:f9:83:5b:4a:3f:
5c:21:1a:62:f8:37:58:0d:e5:eb:7f:69:4f:ab:1d:
f6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:90:6E:BA:56:8D:A8:EB:1D:14:8A:BA:5A:32:0E:85:7D:D4:5E:2F
X509v3 Authority Key Identifier:
keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fb:a9:e2:fb:6f:cc:06:8c:86:23:80:1e:08:42:0d:56:48:
f4:24:e9:e0:51:5f:5f:b6:d7:90:2b:64:0a:24:1e:07:e3:86:
4a:d4:8e:54:08:7e:9f:c0:6e:00:f8:4a:4e:11:29:27:52:bc:
79:bc:2e:3f:fa:7e:75:f6:c1:8d:9c:2e:f6:5f:81:b3:df:10:
ee:83:38:71:66:ab:57:42:29:98:28:91:36:48:01:2d:93:e8:
72:e6:b3:31:86:44:fc:61:0a:49:9e:88:bb:81:75:3a:d8:73:
4e:78:42:8d:54:1a:7f:4a:2f:7e:42:d9:67:2a:1f:cc:3d:4e:
d1:d0:66:db:12:7c:a9:8b:c5:6b:8f:6b:55:86:d1:7a:6a:3d:
cd:2b:88:83:2e:07:89:9e:2c:41:2b:7d:64:8b:58:0f:cc:1e:
a1:8e:44:c0:9a:68:4d:5d:32:81:44:52:d9:c8:51:a4:5e:1b:
31:ee:0f:3a:cd:33:1b:e5:58:10:d2:55:db:06:67:1c:d7:12:
11:9d:fa:ba:cc:9c:7a:ba:e9:30:37:64:44:36:c1:61:28:9e:
88:72:3d:14:8d:31:b4:70:84:19:b7:20:7c:0a:74:b8:b3:9d:
a3:96:35:a4:93:62:63:3e:7e:c6:ee:89:d3:3a:39:64:8a:b2:
3b:fa:02:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:12 2026 by rpki-client