Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
File: 9H1LS48bGIg-rDtJnA8EKsomsKk.mft (raw, json)
Hash identifier: kqauxonByyE+/P8kZzG0tllZm5yCpIXPHSxagOLekeE=
Subject key identifier: 74:32:7C:CE:6F:E5:23:FA:19:75:4B:DA:99:3B:C7:36:A8:4F:18:61
Authority key identifier: F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
Certificate issuer: /CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Certificate serial: 019D9AAC5913BC8505DEEFEC8E3173DCA0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
Manifest number: 0BF4
Signing time: Fri 17 Apr 2026 09:01:19 +0000
Manifest this update: Fri 17 Apr 2026 09:01:19 +0000
Manifest next update: Sat 18 Apr 2026 09:01:19 +0000
Files and hashes: 1: 9H1LS48bGIg-rDtJnA8EKsomsKk.crl (hash: s8sl5mOIHKAT1ncQms1OujxToC4TRnVXVxB4dP100UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:59:13:bc:85:05:de:ef:ec:8e:31:73:dc:a0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Validity
Not Before: Apr 17 09:01:19 2026 GMT
Not After : Apr 18 09:01:19 2026 GMT
Subject: CN=74327cce6fe523fa19754bda993bc736a84f1861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:53:92:22:02:ab:17:f9:0e:5d:9e:cb:dd:
f0:42:06:1f:8e:e0:40:7a:6d:c0:cc:7e:ea:b6:2c:
38:c2:ec:5f:ec:ef:5a:14:cc:53:cb:eb:68:36:c6:
ad:64:65:3f:5a:00:54:47:e6:5e:25:f4:44:46:75:
f3:ae:30:1f:ea:fc:4d:ad:c6:71:82:01:d1:d8:e2:
ea:0f:3e:2e:11:91:34:38:90:20:73:07:9b:c2:a8:
c6:39:17:a3:ac:11:35:4c:df:e2:dd:3f:45:5e:2e:
92:25:7a:bc:b8:be:90:dd:1f:94:2f:c7:0c:0f:c7:
72:12:68:b8:88:03:c7:d5:a5:8e:10:6b:df:1d:93:
8d:aa:93:66:69:01:0a:a7:18:bc:59:12:9b:db:55:
c3:84:de:d4:14:0a:8b:ef:f4:6b:86:d7:65:56:78:
95:2a:05:ba:f0:59:dc:9e:92:df:9b:16:ae:8c:62:
fd:c0:f9:5e:0d:11:60:a4:19:67:a3:5a:d7:a1:fb:
15:ad:d7:f6:55:1a:55:9d:eb:b0:dc:91:26:16:4b:
59:f7:67:99:ec:fc:2a:63:1a:f6:15:93:0e:6d:cc:
8c:25:da:b7:ca:b0:a2:ea:60:77:a3:99:8f:9f:a8:
46:95:f9:3d:dd:9b:ca:1e:9a:35:18:ba:fd:00:cd:
3a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:32:7C:CE:6F:E5:23:FA:19:75:4B:DA:99:3B:C7:36:A8:4F:18:61
X509v3 Authority Key Identifier:
keyid:F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:32:51:fd:5f:78:0d:c5:ec:3c:d8:70:d8:a6:43:52:de:89:
9a:93:e9:89:14:6a:13:30:36:d8:9a:6f:7f:bc:d2:33:60:78:
bf:ee:00:1d:7b:03:4b:23:93:90:73:40:b9:a2:5e:72:23:1b:
f5:81:4f:10:4b:bc:9f:ae:11:f9:8a:2d:3f:22:4b:e6:49:7a:
98:c3:6f:6f:dd:17:0c:e1:b1:06:7d:1d:66:02:cc:d3:05:6a:
60:46:9c:83:cf:8f:8b:16:53:ac:e0:65:2a:75:49:e4:25:3c:
fe:a0:84:88:d2:49:2e:ab:2c:09:e2:6d:89:d3:4c:22:fe:b9:
51:14:c8:e7:af:1d:fa:a4:7f:db:77:21:75:45:1b:ef:14:60:
91:d9:c4:e9:71:db:ad:cb:d2:c5:5a:9e:44:de:13:2a:7a:39:
c9:f9:f9:ba:c5:95:6f:ce:45:2f:36:20:ba:aa:bd:ef:9b:5e:
5a:74:ea:86:18:2f:60:6f:7b:ab:ac:5b:7f:b8:bb:7d:70:2a:
e6:48:7e:f3:03:4f:b2:64:f3:37:e0:ce:b3:21:cc:99:f4:e2:
4c:f2:46:a9:ef:c8:a9:9a:18:93:97:36:fb:2c:4a:b2:39:6f:
14:2c:13:a4:7a:85:03:d1:c9:96:9c:af:91:75:37:30:0f:f8:
43:9f:a7:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arFkTvIUF3u/sjjFz3KDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0N2Q0YjRiOGYxYjE4ODgzZWFjM2I0OTljMGYwNDJhY2Ey
NmIwYTkwHhcNMjYwNDE3MDkwMTE5WhcNMjYwNDE4MDkwMTE5WjAzMTEwLwYDVQQD
Eyg3NDMyN2NjZTZmZTUyM2ZhMTk3NTRiZGE5OTNiYzczNmE4NGYxODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXtTkiICqxf5Dl2ey93wQgYfjuBA
em3AzH7qtiw4wuxf7O9aFMxTy+toNsatZGU/WgBUR+ZeJfRERnXzrjAf6vxNrcZx
ggHR2OLqDz4uEZE0OJAgcwebwqjGORejrBE1TN/i3T9FXi6SJXq8uL6Q3R+UL8cM
D8dyEmi4iAPH1aWOEGvfHZONqpNmaQEKpxi8WRKb21XDhN7UFAqL7/RrhtdlVniV
KgW68FncnpLfmxaujGL9wPleDRFgpBlno1rXofsVrdf2VRpVneuw3JEmFktZ92eZ
7PwqYxr2FZMObcyMJdq3yrCi6mB3o5mPn6hGlfk93ZvKHpo1GLr9AM06HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQyfM5v5SP6GXVL2pk7xzaoTxhhMB8GA1UdIwQY
MBaAFPR9S0uPGxiIPqw7SZwPBCrKJrCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzZkMWYtZWVkZi00YTRkLTg5NWIt
MjcxNjY3NTNkZjA4LzEvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNzZkMWYtZWVkZi00YTRkLTg5NWItMjcxNjY3NTNkZjA4
LzEvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0TJR/V94
DcXsPNhw2KZDUt6JmpPpiRRqEzA22Jpvf7zSM2B4v+4AHXsDSyOTkHNAuaJeciMb
9YFPEEu8n64R+YotPyJL5kl6mMNvb90XDOGxBn0dZgLM0wVqYEacg8+PixZTrOBl
KnVJ5CU8/qCEiNJJLqssCeJtidNMIv65URTI568d+qR/23chdUUb7xRgkdnE6XHb
rcvSxVqeRN4TKno5yfn5usWVb85FLzYguqq975teWnTqhhgvYG97q6xbf7i7fXAq
5kh+8wNPsmTzN+DOsyHMmfTiTPJGqe/IqZoYk5c2+yxKsjlvFCwTpHqFA9HJlpyv
kXU3MA/4Q5+njA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:19:54 2026 by rpki-client