Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
File: 9XpIEqFZ72qekpcudXKtZi1yIVo.mft (raw, json)
Hash identifier: zgv4YNkS/4C1nG5MimTtnSppZ9YZSvDw15OAuUCj/qE=
Subject key identifier: 1F:D0:4C:50:D6:2C:C0:A3:FE:2F:AF:C3:26:70:7A:A8:6A:9E:F6:FE
Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Certificate serial: 019D9AAC0E6EBF2F4DFCB6149FA7680C9A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
Manifest number: 11B3
Signing time: Fri 17 Apr 2026 09:01:00 +0000
Manifest this update: Fri 17 Apr 2026 09:01:00 +0000
Manifest next update: Sat 18 Apr 2026 09:01:00 +0000
Files and hashes: 1: 9XpIEqFZ72qekpcudXKtZi1yIVo.crl (hash: voic+u4UPdkoT9KPnapwwFzIeXWHcJOWzwJvtyR1aOQ=)
2: lKVJdRF0hE9bPtqV3XlzvhT3Iqs.roa (hash: GeIEq9ieMXhGCkHBVtks0M5q4Jm8CcNNhR3YdczhVxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:0e:6e:bf:2f:4d:fc:b6:14:9f:a7:68:0c:9a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Validity
Not Before: Apr 17 09:01:00 2026 GMT
Not After : Apr 18 09:01:00 2026 GMT
Subject: CN=1fd04c50d62cc0a3fe2fafc326707aa86a9ef6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:33:e3:77:44:28:13:d9:6c:85:55:e9:2d:
65:e3:6a:f6:7b:60:1e:76:40:5a:13:c6:c0:6e:6c:
75:b1:d1:00:6f:60:37:8c:84:45:11:e4:91:34:9f:
10:73:a5:9a:6e:bc:24:6c:d2:71:4a:b0:cf:a6:54:
cd:e5:a1:01:3b:0e:0f:19:00:f0:a2:20:96:13:16:
2c:3b:5e:4e:ad:82:df:c3:b0:a7:3e:03:20:a3:4f:
06:d5:2c:3b:a4:24:b7:c2:0d:91:62:ed:cb:7a:51:
03:e4:13:65:8b:61:5b:00:09:49:e3:71:b3:82:9c:
d8:45:1f:fc:55:49:5b:f2:44:bd:55:53:0a:12:c4:
f7:7a:f5:07:ac:77:eb:b2:13:12:e3:d5:6e:84:4d:
aa:0a:8b:01:b2:55:c1:b2:b0:73:67:ef:46:63:da:
5b:68:cb:8c:e2:13:21:e2:bd:8a:2c:f2:28:1a:c6:
70:21:2c:ac:9a:e7:e4:d8:4d:fb:a6:96:31:88:5b:
94:b5:74:f0:64:09:9b:ec:7b:dd:59:e2:8e:bd:5a:
0e:78:e4:3e:4c:1e:a3:cf:5f:ab:bc:f3:2b:21:a6:
6a:e9:b5:d6:2b:17:52:95:1f:59:57:ba:b2:3e:54:
39:84:38:99:60:14:9a:99:43:a4:dc:40:b2:9d:93:
73:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D0:4C:50:D6:2C:C0:A3:FE:2F:AF:C3:26:70:7A:A8:6A:9E:F6:FE
X509v3 Authority Key Identifier:
keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:62:76:90:45:01:76:2d:7c:f4:f1:ba:c0:31:92:a0:7f:bc:
87:6e:76:75:ef:1b:db:ec:1c:96:85:d5:58:1c:4c:4d:a9:4d:
08:33:5b:2d:e4:d7:86:b8:ef:8d:e0:57:90:34:41:7d:0f:90:
d0:27:80:c5:70:c6:ae:9d:96:3f:a4:08:e6:b9:c2:88:4d:e5:
9f:32:f9:e6:6e:7f:95:c5:9e:fc:e8:83:ef:4b:95:4d:22:5a:
d4:3b:1d:83:62:90:d3:50:ab:57:19:c0:72:28:3d:cf:62:04:
6c:78:61:e4:f8:e8:48:df:04:39:0f:ff:db:83:c3:43:85:b4:
d5:28:2d:43:82:03:42:3e:cf:33:ca:e2:26:a0:fb:e0:0f:83:
c6:05:7d:f3:3d:bb:4f:f4:ca:90:d9:8f:d9:1c:81:ea:ca:44:
34:fb:62:68:db:f4:ff:0f:88:1c:39:d0:42:27:29:37:0e:51:
85:fd:b1:71:89:35:da:7a:4f:a3:0f:f5:4a:2f:1a:ab:20:7d:
fe:8d:e3:3c:36:04:88:5e:48:01:fc:5a:87:f2:2d:91:c9:49:
a5:34:38:17:ea:1f:e7:f8:ff:e1:5e:85:0a:1e:62:03:39:62:
08:bd:24:f5:63:39:3b:c3:90:a2:d1:2c:58:97:38:58:f9:6f:
0b:30:6c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:26:21 2026 by rpki-client