Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
File: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft (raw, json)
Hash identifier: LqFutBppS85DQ+fSFnnz9KvRecQNzYXt2Z8SPmlMYHU=
Subject key identifier: 05:65:67:3D:1D:23:91:59:E8:2F:41:A1:F3:72:E5:5F:50:70:8C:E7
Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
Certificate issuer: /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Certificate serial: 019D98F4732BF9DCAA8FCF0F97B04038BDBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
Manifest number: 13C8
Signing time: Fri 17 Apr 2026 01:00:50 +0000
Manifest this update: Fri 17 Apr 2026 01:00:50 +0000
Manifest next update: Sat 18 Apr 2026 01:00:50 +0000
Files and hashes: 1: 0mgkR8Oatppf6KwkGwCdocguoA0.roa (hash: xBRpWZu5TH9MlFJBVgXYiAXfSpweoxy68K+P+8afR20=)
2: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl (hash: ioiqPno0cH9M54YtdrxVhKSppbRy5sQ5wUge+rHV5Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:73:2b:f9:dc:aa:8f:cf:0f:97:b0:40:38:bd:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Validity
Not Before: Apr 17 01:00:50 2026 GMT
Not After : Apr 18 01:00:50 2026 GMT
Subject: CN=0565673d1d239159e82f41a1f372e55f50708ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:83:ca:85:72:24:d0:8f:42:b4:e5:f7:34:
d4:02:21:ca:d2:ae:3f:2f:a8:c2:4b:74:e3:0e:66:
16:c3:58:1d:c4:8b:ff:f4:a6:38:b7:37:dd:de:de:
a2:0a:68:69:29:e0:f0:3d:eb:70:32:bb:8c:fc:bf:
84:0c:4e:e1:55:a6:46:e3:64:ab:ac:66:cd:a8:3b:
30:57:e2:63:61:4d:62:9c:b6:ae:ea:9e:7e:b7:c6:
79:88:ce:fd:8c:a3:1d:d5:5e:fd:18:72:2a:ef:40:
d0:d6:59:65:bc:b4:f2:45:98:9a:12:b0:7a:dd:d4:
68:62:0b:ed:ed:15:35:28:c2:46:5f:4a:61:df:91:
b7:47:36:a7:00:53:57:0f:8b:88:1c:3d:8b:bd:01:
46:4c:a0:f0:e1:0c:cc:36:ee:73:63:10:5a:2b:e0:
fe:f3:a9:64:84:c2:a4:49:ae:df:fa:b5:07:23:64:
e7:af:54:fa:47:eb:0c:5d:48:79:6c:2c:12:87:15:
f6:65:76:b9:f1:a1:6a:06:6e:a0:9a:30:e2:83:7b:
ef:a9:01:80:af:a1:c6:92:12:9f:61:6e:c7:f4:43:
21:e0:5b:c2:1f:5a:92:d2:1b:d0:5e:7b:a4:7f:83:
63:43:f9:ba:dc:af:47:da:c2:fb:3a:b0:7e:95:08:
76:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:65:67:3D:1D:23:91:59:E8:2F:41:A1:F3:72:E5:5F:50:70:8C:E7
X509v3 Authority Key Identifier:
keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:62:28:2a:af:78:a1:be:56:72:3a:c6:e1:84:90:29:c2:af:
ab:36:ee:d1:bf:a9:a3:9b:1b:ce:a8:ec:a5:4f:0f:8b:2d:b5:
5c:05:0c:7d:45:8d:ac:a9:21:41:a4:c4:3e:24:8f:0a:17:70:
4f:48:14:45:21:bc:18:bf:c8:ae:c5:30:6b:09:b2:12:38:4b:
23:db:81:79:7c:94:51:92:b3:b7:0c:d0:28:e1:52:27:a8:7b:
24:1a:63:21:6a:f2:dd:af:75:de:cd:40:8b:ac:2b:ff:f0:b1:
62:23:36:fe:49:50:5d:aa:4b:1f:a0:71:b9:3b:a6:be:a0:13:
43:28:73:4b:e6:dd:e3:d9:f1:00:f1:a7:04:cf:c3:bb:9d:91:
56:3a:a1:d8:76:27:42:27:ad:2a:5a:60:56:02:c3:45:8c:32:
54:4d:43:a2:cd:94:f4:48:2b:b8:f1:68:1d:9f:d4:ab:36:3c:
f1:20:e8:0f:5e:09:68:ca:8b:b6:30:35:da:6b:28:63:d5:b6:
77:43:d2:69:53:8a:fe:c3:aa:a8:88:37:05:8d:c6:5d:df:d9:
82:4b:76:46:48:72:64:f2:1a:ca:6d:16:85:b7:27:1f:d7:58:
2c:0e:7c:c0:ae:cb:31:c1:2a:e2:ab:d1:9b:c6:df:ab:32:bb:
e1:3e:b6:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9HMr+dyqj88Pl7BAOL26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YWM5OWQ3N2E3YTFjODRkZDQ3ZjQzYmI3MjA1MWFhNzNi
MWFhZDYwHhcNMjYwNDE3MDEwMDUwWhcNMjYwNDE4MDEwMDUwWjAzMTEwLwYDVQQD
EygwNTY1NjczZDFkMjM5MTU5ZTgyZjQxYTFmMzcyZTU1ZjUwNzA4Y2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxmDyoVyJNCPQrTl9zTUAiHK0q4/
L6jCS3TjDmYWw1gdxIv/9KY4tzfd3t6iCmhpKeDwPetwMruM/L+EDE7hVaZG42Sr
rGbNqDswV+JjYU1inLau6p5+t8Z5iM79jKMd1V79GHIq70DQ1lllvLTyRZiaErB6
3dRoYgvt7RU1KMJGX0ph35G3RzanAFNXD4uIHD2LvQFGTKDw4QzMNu5zYxBaK+D+
86lkhMKkSa7f+rUHI2Tnr1T6R+sMXUh5bCwShxX2ZXa58aFqBm6gmjDig3vvqQGA
r6HGkhKfYW7H9EMh4FvCH1qS0hvQXnukf4NjQ/m63K9H2sL7OrB+lQh21QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVlZz0dI5FZ6C9BofNy5V9QcIznMB8GA1UdIwQY
MBaAFPSsmdd6ehyE3Uf0O7cgUapzsarWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNzY0NDUtMTk4YS00Zjg1LWJiZjgt
NjZjY2E4MWU2YzA3LzEvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNzY0NDUtMTk4YS00Zjg1LWJiZjgtNjZjY2E4MWU2YzA3
LzEvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemIoKq94
ob5WcjrG4YSQKcKvqzbu0b+po5sbzqjspU8Piy21XAUMfUWNrKkhQaTEPiSPChdw
T0gURSG8GL/IrsUwawmyEjhLI9uBeXyUUZKztwzQKOFSJ6h7JBpjIWry3a913s1A
i6wr//CxYiM2/klQXapLH6BxuTumvqATQyhzS+bd49nxAPGnBM/Du52RVjqh2HYn
QietKlpgVgLDRYwyVE1Dos2U9EgruPFoHZ/UqzY88SDoD14JaMqLtjA12msoY9W2
d0PSaVOK/sOqqIg3BY3GXd/Zgkt2RkhyZPIaym0WhbcnH9dYLA58wK7LMcEq4qvR
m8bfqzK74T62QA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:22 2026 by rpki-client