Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
File: 9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json)
Hash identifier: W8CXFyG9dDGCO/BZJ1nfO7zlmIJRrwMmFpyvjjHyuM4=
Subject key identifier: BD:59:B4:4A:3B:C3:2F:00:3A:B1:7C:F0:DA:32:58:D5:5A:32:88:3E
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Certificate issuer: /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial: 019D98F43F01840978F93B9080D50313C181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 01:00:36 +0000
Manifest this update: Fri 17 Apr 2026 01:00:36 +0000
Manifest next update: Sat 18 Apr 2026 01:00:36 +0000
Files and hashes: 1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: ff9qB/gi0E6i8ThgfJqO95DkYrQZ3t0CWi1bbTLcJCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:3f:01:84:09:78:f9:3b:90:80:d5:03:13:c1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Validity
Not Before: Apr 17 01:00:36 2026 GMT
Not After : Apr 18 01:00:36 2026 GMT
Subject: CN=bd59b44a3bc32f003ab17cf0da3258d55a32883e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:9e:58:1d:ea:2b:95:14:28:44:b8:c8:65:
c0:47:7e:30:70:08:1b:cb:39:19:98:4c:d8:90:82:
67:74:c6:1e:48:0b:d1:6c:22:2d:8a:83:6a:f4:39:
fe:0c:bf:68:f6:c4:6d:d9:44:65:e4:59:1f:34:33:
48:65:88:b0:a8:03:e6:d9:a9:1e:1d:6f:44:79:9f:
7f:b2:de:71:29:98:82:18:74:aa:87:c2:9a:6a:f5:
db:2c:22:27:04:11:0e:5e:4f:32:14:e9:66:c7:c7:
5d:81:ff:0e:4e:56:22:e1:ae:a6:81:33:93:99:e9:
4a:36:a6:08:4f:50:2f:a6:1b:94:92:b4:98:01:b2:
70:b8:43:ed:9a:02:85:fa:29:7f:29:0e:f6:3c:80:
7c:96:d7:80:09:54:8e:49:86:7d:09:62:f8:e6:2c:
e2:52:50:55:ca:b3:17:39:cb:a3:92:a1:b6:80:db:
ab:af:43:7f:7a:1e:c0:59:d2:32:7b:c4:dd:a8:7d:
34:c6:a7:84:2b:3f:cc:97:cd:5c:ad:0a:88:30:6b:
bb:1f:f9:f8:db:cc:6d:01:26:53:4c:7c:39:a7:43:
db:d5:15:c5:31:0c:59:91:5a:2c:78:a5:72:13:e0:
51:be:86:61:e2:d5:ec:2e:d6:bd:2a:f9:24:18:f3:
94:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:59:B4:4A:3B:C3:2F:00:3A:B1:7C:F0:DA:32:58:D5:5A:32:88:3E
X509v3 Authority Key Identifier:
keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:95:4d:13:56:b8:97:e1:0c:68:7e:8d:82:1e:16:20:b9:a2:
b6:86:8c:0f:45:ad:2b:1b:d9:2c:9c:04:ae:3a:a1:a7:1a:7a:
38:47:c4:88:d4:1b:3d:5c:be:f2:3e:eb:6b:cf:15:b2:fe:a8:
04:8f:d5:a3:bd:c3:ce:84:ff:96:c8:c9:a5:85:da:cf:9f:1c:
57:a6:75:e5:69:90:bc:cf:28:ab:8e:93:ce:c7:99:c4:2e:b0:
5e:b6:54:83:c6:da:23:13:ea:05:85:71:c6:63:d2:ff:12:5b:
94:dd:31:fb:e7:f3:d5:7f:b7:59:8e:c3:54:e0:14:0e:e0:b9:
fb:74:99:ef:5f:a9:f7:6c:25:f9:94:0f:3b:72:af:71:d1:78:
26:9f:50:33:09:a5:89:72:f5:d3:3c:ed:47:75:46:c3:fb:52:
cb:ec:78:32:fe:05:1a:16:d4:44:c4:59:e9:b1:d2:1c:61:64:
18:8e:7e:dd:a8:2e:0c:82:19:f6:17:a8:36:db:81:23:ad:6d:
5d:ad:63:38:4d:96:18:d6:42:4f:8e:d6:f8:1e:eb:17:46:bc:
53:4c:e1:2f:37:b4:4d:30:77:99:ec:40:a0:16:a9:6a:85:09:
c5:5a:c4:f6:e4:28:c0:8f:0f:60:f7:30:ab:af:5c:ec:e6:5a:
c1:b9:b4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:59 2026 by rpki-client