Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
File: 9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json)
Hash identifier: vnIwgOjL45TznBHtBhwH1mK3Sq2Nn/IfqYFsznnUB2M=
Subject key identifier: AF:8E:9E:B8:1C:84:B9:4D:3C:92:A3:B0:72:F5:03:FF:5C:B2:6A:C2
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Certificate issuer: /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial: 019D996259FDA7150CF668E3A204E0E0EF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:00:52 +0000
Manifest this update: Fri 17 Apr 2026 03:00:52 +0000
Manifest next update: Sat 18 Apr 2026 03:00:52 +0000
Files and hashes: 1: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: 2aLd+uogq6Mqo6R+5jzh0G02wikvdgw4P+NyBY9aPCA=)
2: JuwdF3pXKULgX8rdBkYwVawnKUg.roa (hash: J6niK53xMmSAm4XjHsm9sqSbekhWgzfMokxnfXFEmFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:59:fd:a7:15:0c:f6:68:e3:a2:04:e0:e0:ef:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Validity
Not Before: Apr 17 03:00:52 2026 GMT
Not After : Apr 18 03:00:52 2026 GMT
Subject: CN=af8e9eb81c84b94d3c92a3b072f503ff5cb26ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:49:28:35:3f:ce:a5:88:ec:02:e8:61:80:f0:
c4:db:bf:1e:19:12:15:d8:11:b6:af:8a:45:f7:32:
ed:49:a6:c9:f5:15:75:8e:58:b9:b8:05:f7:94:27:
ad:df:d7:7d:7b:a4:b7:ad:67:aa:f0:ee:f7:bf:83:
2d:8b:63:70:db:e6:b9:97:c6:88:fb:c0:04:f2:35:
77:3e:9c:88:22:30:7f:aa:ab:67:4f:66:0f:6c:76:
ab:5e:3e:71:9c:9c:98:f3:4e:0e:af:93:bf:cc:3d:
98:9f:3b:b2:bd:ff:2f:57:67:40:83:df:68:33:81:
b3:d8:02:d5:90:cc:9e:05:ad:49:18:72:a8:76:78:
11:fb:b5:30:c6:b7:ee:50:c7:24:9e:4e:b9:96:60:
d0:91:9f:bb:bb:11:fd:ac:3a:76:f7:89:0c:90:e7:
b8:8c:e4:a3:d4:1f:62:17:33:f4:9f:36:e0:e1:fe:
ca:88:44:50:b9:31:9c:19:22:12:6a:74:58:c6:a7:
d0:c4:c8:73:bd:2e:b4:f4:11:cc:ca:9e:56:88:34:
20:b5:d2:12:fd:8e:13:0b:8e:01:4d:60:f5:3c:f1:
8c:8d:de:81:cf:95:53:32:e0:14:c1:af:c5:5c:1a:
a4:c0:06:00:b5:6e:64:9c:4b:77:db:ee:cf:16:f2:
f7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8E:9E:B8:1C:84:B9:4D:3C:92:A3:B0:72:F5:03:FF:5C:B2:6A:C2
X509v3 Authority Key Identifier:
keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:14:3f:24:80:ec:0a:2a:62:75:4e:cf:be:c6:62:6f:fb:18:
0f:48:56:cd:bf:3b:f7:3e:dc:60:e8:07:f0:8f:6c:a6:d7:89:
29:bf:aa:be:7d:c1:11:7b:cb:89:aa:9e:ed:d5:26:96:e7:09:
cb:e1:b9:f6:b5:be:5b:7a:20:74:47:20:0c:f0:0f:9e:12:a2:
f3:39:5f:e1:0b:d4:d2:5e:8f:73:4f:61:14:09:06:16:13:3a:
ee:d5:c2:b9:9d:71:c7:5b:47:23:24:1c:ba:c5:7e:15:ff:b9:
6a:7e:fb:3e:eb:e1:f5:20:3a:07:fd:1d:79:37:73:7b:1e:4d:
2e:b3:79:16:fb:02:b6:94:9b:f5:24:17:da:8d:53:39:63:41:
95:b4:d8:35:cb:92:2b:6a:20:4c:d6:8b:eb:b1:3c:7c:64:b2:
32:22:00:be:70:f8:56:fb:9c:63:5c:11:d8:db:05:e1:f6:5c:
bb:51:c8:8c:78:92:41:26:25:b9:6b:8c:02:80:24:51:73:6b:
9c:a5:e4:bc:60:b7:49:85:91:da:64:ee:a2:5f:e3:f8:7a:6f:
ac:ca:7b:a1:a9:40:66:b3:25:34:7c:2d:74:9c:a7:56:ff:77:
8f:6a:df:48:67:ab:34:54:76:b0:84:53:4f:83:2b:fc:28:31:
d6:32:26:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:21 2026 by rpki-client