Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
File: 9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json)
Hash identifier: CGvznmqEkK/ef+1qQrplNA+153/G0zzSm0NZCla4FM8=
Subject key identifier: 71:C5:26:63:6D:C0:2C:01:46:56:4A:15:82:56:7F:FB:A3:E3:12:7A
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial: 019D9C2D12A9C7DBA1DD6AE4109518E6F884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 16:01:32 +0000
Manifest this update: Fri 17 Apr 2026 16:01:32 +0000
Manifest next update: Sat 18 Apr 2026 16:01:32 +0000
Files and hashes: 1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: L0iw/VezWI+P4UzixCp/331CbddHmKbI7bkeKdwujDE=)
2: smlZ7JTHvm4P3nZNzZsryZ_yA5A.roa (hash: +VBNM06YqR+uhNJp3b1HBKPNStgs2sJGwRLlTNxj+ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:12:a9:c7:db:a1:dd:6a:e4:10:95:18:e6:f8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Validity
Not Before: Apr 17 16:01:32 2026 GMT
Not After : Apr 18 16:01:32 2026 GMT
Subject: CN=71c526636dc02c0146564a1582567ffba3e3127a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:67:9f:b4:7a:67:7e:63:46:99:14:15:ec:
30:81:4f:e1:22:18:34:59:11:74:9c:1d:7f:b2:1b:
18:bb:c9:a6:1e:13:34:98:41:b0:4f:31:02:b0:d5:
00:8d:c8:c7:7b:1f:b8:ed:71:34:7f:67:0c:44:34:
40:a4:45:23:7b:fc:d9:16:c4:a4:f3:73:ce:e8:63:
3a:5d:46:a4:e9:ae:15:c1:b6:a6:e3:4f:73:3d:eb:
b4:e3:fb:4d:ed:b0:7b:d4:68:67:dc:de:28:f8:03:
bc:85:a7:f8:d3:d6:39:c3:e0:92:dd:fe:00:e4:59:
89:26:d9:84:96:18:48:db:f1:af:20:a1:5d:0f:c1:
e8:b1:31:b3:76:47:23:8d:fe:5d:a3:38:ae:6c:a8:
0c:a8:37:93:f4:6a:b5:cf:f8:ee:fa:10:07:7f:d1:
9c:24:d2:60:8d:8b:93:25:aa:1d:e6:b6:a5:15:0a:
68:c0:9b:e8:8e:d9:22:5e:2c:41:8b:5f:fd:3f:2b:
a2:9d:3a:3f:b9:d6:52:83:52:5b:d5:c4:f6:3e:ee:
57:3e:45:e2:1c:e5:de:3e:42:a6:56:65:c9:ef:fe:
67:dc:ab:aa:cc:8c:52:b3:a7:d8:3d:60:9c:32:2b:
af:3f:e4:a8:47:d1:6b:cf:79:4b:88:2f:ea:97:8f:
0a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C5:26:63:6D:C0:2C:01:46:56:4A:15:82:56:7F:FB:A3:E3:12:7A
X509v3 Authority Key Identifier:
keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3a:fe:09:11:6d:85:96:f8:fc:8f:1b:18:d4:ab:ff:b2:18:
2b:43:f5:1d:12:80:c9:37:4e:ed:37:a9:68:ce:e3:6e:2f:4f:
fb:7f:b2:7b:8e:5d:13:cb:5a:f1:32:81:28:ef:55:b2:43:58:
5c:d3:dc:1c:e5:99:fd:10:b3:46:48:4d:af:4a:54:a2:11:ea:
ca:bb:6e:6a:7d:de:54:74:cb:2c:a5:be:2c:25:54:53:99:9f:
15:7f:30:2d:3e:b5:6c:4d:d7:25:ce:d1:75:ff:d8:32:b6:7d:
a5:f1:14:3c:78:87:30:89:48:1b:84:d4:56:d3:5f:19:3f:ad:
76:78:0e:41:ef:e8:08:a0:9a:f6:00:c1:9f:3a:27:cf:61:08:
9f:89:a8:71:46:a3:a8:f8:6e:16:a9:18:c6:a2:33:bd:d6:7e:
bc:f6:ea:fe:2f:d9:21:0c:84:51:5a:26:ba:90:94:aa:72:17:
c5:ca:d6:10:44:29:80:6f:21:4b:5a:69:47:96:27:f4:d6:2c:
9d:82:58:b1:21:40:61:b9:85:43:29:60:a2:c0:6a:c3:e7:35:
c7:bb:91:f1:74:fe:a8:65:cd:ac:24:08:0c:53:b9:8d:1b:3d:
5a:ce:13:b6:be:56:af:0c:8f:0c:15:97:f3:5e:28:2d:98:6a:
f5:6f:7a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:45:49 2026 by rpki-client