Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
File: k9xL8fiRK-t83uQJMCmIxhE4jpE.mft (raw, json)
Hash identifier: /K8Zi5fDgkW2kCZknRRfjTOf6eBD5ZmzifhH8zFcnZI=
Subject key identifier: EA:6F:C9:0C:F5:5E:4A:D6:11:29:51:1F:CA:3D:C0:50:4A:74:20:3B
Authority key identifier: 93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
Certificate issuer: /CN=93dc4bf1f8912beb7cdee409302988c611388e91
Certificate serial: 019D9B50E193EEE3BB479C9EA6BFDBBE862E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
Manifest number: 12BD
Signing time: Fri 17 Apr 2026 12:01:02 +0000
Manifest this update: Fri 17 Apr 2026 12:01:02 +0000
Manifest next update: Sat 18 Apr 2026 12:01:02 +0000
Files and hashes: 1: J0PZBVWFTINnhdQjJ1kEEUY1JP8.roa (hash: Whf1HQd5oE3GSY4trhkL4bAm/CeLA6p+cMBaOxA2wd4=)
2: k9xL8fiRK-t83uQJMCmIxhE4jpE.crl (hash: ZTh6FXX8wabvIegh/OAChFwL7DTD6ITi9RJf9XoMVO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:e1:93:ee:e3:bb:47:9c:9e:a6:bf:db:be:86:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc4bf1f8912beb7cdee409302988c611388e91
Validity
Not Before: Apr 17 12:01:02 2026 GMT
Not After : Apr 18 12:01:02 2026 GMT
Subject: CN=ea6fc90cf55e4ad61129511fca3dc0504a74203b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:07:81:07:5e:70:c2:f5:39:b8:0c:9f:bc:aa:
97:64:3c:9d:f0:4c:07:ae:ad:1f:6e:60:e9:f1:db:
82:34:63:cd:27:e3:7b:6a:f2:bd:8c:60:d0:01:b3:
19:e4:91:b4:fa:37:f1:d5:71:74:40:1a:b4:20:e6:
32:20:8a:de:62:cb:50:9d:1e:e3:ce:d6:d4:c2:bc:
9a:89:dd:a6:cb:7d:c4:ca:a1:13:73:ee:2c:9e:ca:
5e:7d:3b:a6:5b:ca:84:87:a3:04:f1:93:fa:02:d7:
47:85:50:90:da:45:cc:60:25:bf:e0:ab:30:bc:64:
b5:f3:83:e4:b4:cf:2a:21:92:1c:11:69:1f:3d:77:
4e:f4:c8:a8:76:ae:14:97:49:2a:a5:ae:bf:72:7c:
4f:bc:b1:be:68:a9:2c:b1:be:3b:1c:56:91:75:6b:
dc:ab:10:6e:d3:f8:df:a5:d6:da:d7:c3:98:ad:09:
84:ad:d7:98:5a:be:29:bd:84:ed:d2:a0:89:b1:3b:
77:50:ad:02:38:e3:d1:f6:b1:bb:32:23:b8:6c:63:
66:b1:43:d0:92:d8:1d:fe:db:cf:37:81:7e:ad:b1:
85:49:7f:ae:18:c0:a0:34:14:f2:10:97:97:bc:9b:
b8:9e:49:14:d6:25:80:cc:82:8c:9b:d9:f4:64:9d:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6F:C9:0C:F5:5E:4A:D6:11:29:51:1F:CA:3D:C0:50:4A:74:20:3B
X509v3 Authority Key Identifier:
keyid:93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:7c:92:fd:bb:b6:26:4d:2e:5e:65:ab:94:f2:50:ba:b0:0e:
f6:29:51:62:a7:59:ee:49:09:f6:2e:1f:64:73:91:62:e8:99:
33:98:b8:3b:0d:a8:e9:6c:81:86:29:57:c6:5e:cf:b5:af:9d:
4e:53:8c:8e:21:f0:9e:e9:1c:83:56:f2:e4:3f:e0:81:de:30:
5f:05:9b:73:95:17:f6:82:7a:ec:be:db:25:20:67:5e:b6:81:
96:c7:cf:24:8a:91:08:d0:fe:a4:4d:05:9d:d5:ea:9e:f7:d1:
f9:79:ab:76:ba:e6:ad:c6:60:34:d5:16:00:d9:3d:42:a9:30:
21:4a:51:81:61:82:bc:93:69:15:08:5f:57:47:d5:5d:bf:6f:
ad:c9:ab:05:d3:bc:d4:84:22:ea:cb:cb:e3:0c:9f:52:9e:14:
81:9d:f8:11:54:4b:fd:84:08:28:36:65:ad:92:10:f1:b3:42:
c1:8f:4d:8d:d6:d9:d2:83:32:cc:69:d8:13:aa:70:8b:6f:30:
20:ea:f9:95:55:db:e5:df:cc:9e:94:4a:ea:97:65:b4:af:5d:
92:a4:4a:6a:6d:37:06:b2:f4:6c:1e:a4:cd:84:a3:b8:c8:cb:
bc:42:4a:31:7b:f2:b3:5d:3d:52:d7:d6:82:5a:bf:36:b1:bd:
1f:f6:b7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:58:53 2026 by rpki-client