Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: IDef0nOuQm0HXo3GfC3DeSM4Chzb10Ta5Wr49GLUaok=
Subject key identifier: E1:3F:C7:0D:15:02:6A:04:37:74:E5:42:37:D2:65:3F:CE:29:E8:FE
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 019D9962330A886BD3D0EB42AE51442186E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 0866
Signing time: Fri 17 Apr 2026 03:00:42 +0000
Manifest this update: Fri 17 Apr 2026 03:00:42 +0000
Manifest next update: Sat 18 Apr 2026 03:00:42 +0000
Files and hashes: 1: 1r95LK4HWizqALUZJhEWO2mRfys.roa (hash: a7n3lQCzMluTfryIIH6MTnQ1x4Z9vPgOFoHPe0ckSs8=)
2: 2nwagyLqxJwRqLdgTLA7_n4lSs8.roa (hash: 4fgPknlaVUuj1rnAi5TgALYEc9dAtHGP5otC5r0jNlo=)
3: 6N3xoZPe2eQVbNsjIZFngGfa3VM.roa (hash: tFoFVqeUGxu4Apov92KrkjVc4GER0DpKn92wl0890bo=)
4: 7MPluVravo2Zg570yKX0YG2N3n8.roa (hash: 1uXMPGhv4RMa4aedR0mQyuAIi9Pi5joQGyAwvqPRBLA=)
5: D4d_4pxCPjZEGl90vALx44fXxu8.roa (hash: nJq9NCViYi/1CQ0r2u9R6OYAeLLC1B3FaJoObbBwLb8=)
6: EXs9LISjCQhWAd2HiIWm-im5__w.roa (hash: n4sN98ePnVDPSJNxRYiTwCAYAV7AFkIT151+9zv8WsM=)
7: XiJSnqUnbwsKfWxUtA9oWKzznIk.roa (hash: il5+2Wom7vPDCFPGBRmCP1wr3fGf4op2yuM4yZALCHs=)
8: ZoZb90LpJA9Ip-2MHkdgs69BJlw.roa (hash: Vsdm6rW7baX27WeKyLbDvpzx2QoVqvnpUMNu9ywBMO4=)
9: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: xql7uQu7kq9Orq6v4oy9RSwJYa8mI4ynKpsBQ39B9OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:33:0a:88:6b:d3:d0:eb:42:ae:51:44:21:86:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Apr 17 03:00:42 2026 GMT
Not After : Apr 18 03:00:42 2026 GMT
Subject: CN=e13fc70d15026a043774e54237d2653fce29e8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:a2:7e:16:7a:52:88:43:3e:0d:d9:fc:78:
a9:42:9a:a8:b2:a7:92:ad:2d:a7:8f:47:9c:5b:92:
86:02:b2:30:e5:83:04:5b:95:86:e6:b6:73:58:dd:
c7:a4:29:8d:00:8f:48:9b:82:cc:23:ce:70:fc:b5:
d2:e2:03:20:61:ab:27:3d:c7:ad:48:93:1f:21:80:
6b:36:ca:07:ca:36:3e:73:b7:34:e5:e5:1d:c3:42:
a7:97:21:8a:e9:d2:92:08:d0:a7:3f:b3:76:e8:0b:
25:bf:67:ea:67:b5:6f:16:d4:b7:9f:8d:11:67:30:
8e:a8:32:41:f6:02:6d:e5:99:48:0c:56:c3:17:f0:
dc:af:46:1c:34:6a:b1:75:05:43:1c:f8:32:ce:90:
9e:0f:78:c6:fc:b0:a5:82:58:fc:96:4c:89:38:5d:
67:29:35:f2:8b:fb:4c:b0:ab:03:36:c2:6d:9a:33:
db:2f:ef:ad:8d:88:c7:e6:b7:8f:a4:20:eb:5a:df:
fe:3c:1e:82:90:ce:ac:ee:d7:66:c6:91:a3:fe:0e:
35:93:32:b6:6c:56:da:ad:d3:40:80:d3:cf:6a:1a:
83:d4:0b:71:2a:b8:5f:13:a5:3f:c3:df:88:a2:21:
bb:90:3f:a5:eb:75:c6:21:37:15:33:d2:75:4e:ef:
14:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3F:C7:0D:15:02:6A:04:37:74:E5:42:37:D2:65:3F:CE:29:E8:FE
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:57:3b:e4:c2:31:54:ea:82:7c:d5:08:9a:27:a6:32:0c:ff:
9b:ba:e4:75:de:83:26:4c:fc:67:8a:a1:cb:f9:7a:c1:55:54:
6c:34:7b:0c:4f:5f:ea:4a:e0:78:f9:87:63:67:65:22:8e:33:
6e:ae:c8:d8:98:db:2a:a5:88:8e:f7:d6:ca:89:2c:74:42:56:
8f:a0:cc:92:7b:fe:58:66:87:c3:b5:2e:98:4b:b3:28:a3:9e:
0b:d4:e8:61:05:c7:de:8b:a0:b4:00:34:c9:49:e2:a2:6e:62:
c4:e7:c5:5c:d5:5e:0e:4b:8d:52:5d:a2:87:87:bf:93:b3:a0:
45:c9:98:32:3c:8c:72:e1:6f:ca:ba:1d:48:0d:36:8b:16:59:
6c:1d:ee:99:56:ea:2a:44:1d:af:21:d6:98:8c:d7:d7:50:f0:
9d:6a:5e:43:1a:ea:67:d0:e6:81:5a:8a:c0:b1:cf:f6:f7:06:
38:61:08:e3:07:04:fd:dd:3c:cc:5e:f5:de:28:9e:94:36:65:
6c:6f:b1:1a:c3:27:f5:9b:ca:c6:b3:c5:5b:fb:e8:62:c0:59:
17:65:f8:eb:72:fc:3e:1f:be:ba:8d:49:df:c3:9c:83:bc:d5:
0c:81:fe:2e:55:c8:5e:4f:32:e3:64:6f:93:9d:7d:61:6f:77:
b1:db:77:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:37 2026 by rpki-client