Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: 2dfaJY7Xs+tde1KbjR7Z9fSadEYv2wYb+dEWNBt2dYM=
Subject key identifier: 36:16:6E:61:AF:B5:EA:BF:18:B0:55:87:28:F0:41:D3:A4:F4:EF:40
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 019D992BAB1232B37798A680A2BE8F53BC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 0FA2
Signing time: Fri 17 Apr 2026 02:01:09 +0000
Manifest this update: Fri 17 Apr 2026 02:01:09 +0000
Manifest next update: Sat 18 Apr 2026 02:01:09 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: peW60LRY1tzzj5/M7FQc/sPa+MeGYIFx1kiHhp1CPBs=)
2: h5DIp02VidThuOHraMPFCodvygs.roa (hash: xwNLtlpo98S4VMl0NrrQV2mRppmcREH8EvSc90IeL2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:ab:12:32:b3:77:98:a6:80:a2:be:8f:53:bc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Apr 17 02:01:09 2026 GMT
Not After : Apr 18 02:01:09 2026 GMT
Subject: CN=36166e61afb5eabf18b0558728f041d3a4f4ef40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cf:3d:ab:c2:42:43:0d:e9:f2:3e:af:6d:79:
59:d1:ae:88:f4:a5:6a:a7:b1:97:ce:9a:50:fa:6e:
73:1d:af:f0:1a:33:29:c5:f9:c4:0e:66:38:d7:ab:
3b:96:27:c2:41:47:a6:bc:e6:b1:e9:10:c8:82:cf:
3d:e7:c4:4d:ff:0c:e5:ef:02:32:26:4f:d3:9c:36:
96:47:99:90:ca:d6:5f:0f:80:70:a1:cc:04:47:36:
97:1a:b6:13:b2:1e:93:41:c8:f8:42:db:15:de:9e:
05:ab:5f:7a:84:7d:e3:2f:64:cb:21:40:29:27:84:
7f:c0:ed:93:e6:8c:f7:5a:c8:bd:f6:65:57:ed:cc:
af:18:97:b6:42:f0:f3:54:64:d6:50:3e:de:96:70:
86:50:f6:f1:c2:f5:4f:1d:f1:6a:c0:91:80:69:15:
d3:29:83:63:b4:b2:a8:aa:65:00:c1:db:1d:8f:59:
93:7b:47:41:a9:30:23:bf:e2:30:47:fb:13:f7:56:
19:1c:38:77:f3:c4:ca:31:40:8b:5c:5d:4c:68:02:
9e:2d:4a:8a:80:5e:9f:b2:5c:2f:04:3d:a9:84:76:
74:fd:10:a7:84:ce:d4:2c:b7:cb:60:c9:bc:0c:eb:
7c:ce:7f:29:ea:f9:f0:b4:ca:66:87:42:b1:33:b5:
31:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:16:6E:61:AF:B5:EA:BF:18:B0:55:87:28:F0:41:D3:A4:F4:EF:40
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ee:2f:61:e6:7f:b8:5b:1d:5a:96:50:6a:06:71:8d:f5:c1:
91:11:f4:14:c9:28:8a:be:53:0b:ad:5e:f2:1a:14:e6:5f:0b:
f0:16:19:0f:54:0e:28:46:62:78:d5:10:7a:60:91:37:c0:dc:
f5:99:24:5e:60:06:a7:b0:6f:1f:dc:25:19:02:53:48:4b:79:
8a:47:7e:61:d6:69:87:f1:75:bc:04:15:8f:7c:01:69:70:5a:
3e:9c:62:85:fb:93:ae:8d:8f:c3:3c:7b:99:1b:ac:30:7c:38:
6c:00:1e:4c:7b:8c:3c:8f:4a:c0:21:66:a0:44:ef:26:5b:00:
84:70:b8:e3:65:f4:79:77:ef:3c:7e:a4:7a:ac:58:39:1e:82:
c8:86:a0:2b:e5:90:38:7b:83:63:60:f5:47:32:b8:2f:d8:d3:
01:e4:bd:21:67:2e:6f:4d:78:d7:ee:f0:e5:dd:07:7b:22:ab:
8a:dd:cf:23:1f:57:82:ba:cb:f7:a2:98:6c:91:a2:06:45:a2:
3b:77:4e:6e:a5:3a:19:f6:6c:75:25:16:33:ed:2b:b5:f2:d2:
5e:58:23:a9:3b:5c:1f:27:43:28:24:af:05:31:f8:00:36:90:
49:9a:cf:74:69:0f:81:57:16:d4:1b:43:0c:73:c0:e3:ef:68:
c6:d8:f6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:10 2026 by rpki-client