Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
File: 9Y3yxGnJeIlfhFgCTFBugByPsho.mft (raw, json)
Hash identifier: pKDlSNJ+XN08/mseGL3Jzn45o5OsK4QBeiMzXxRla3o=
Subject key identifier: E4:27:38:CB:A2:2B:33:8B:E8:9C:99:31:01:37:5C:B4:68:77:00:07
Authority key identifier: F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
Certificate issuer: /CN=f58df2c469c978895f8458024c506e801c8fb21a
Certificate serial: 019D992B4BDB9B31D2970616FC1D2C6C3CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
Manifest number: 1649
Signing time: Fri 17 Apr 2026 02:00:44 +0000
Manifest this update: Fri 17 Apr 2026 02:00:44 +0000
Manifest next update: Sat 18 Apr 2026 02:00:44 +0000
Files and hashes: 1: 9Y3yxGnJeIlfhFgCTFBugByPsho.crl (hash: L2lN74h4BnSEB/hziGqnsV6YSqF/d2iNarKvHRpjvSw=)
2: ipd84dEDEe7cj4KStBVIlQrMGyg.roa (hash: Sbm22JKwRV49kiJvKoySC0PxR1MmmHGGM53bqn3Gb1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:4b:db:9b:31:d2:97:06:16:fc:1d:2c:6c:3c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58df2c469c978895f8458024c506e801c8fb21a
Validity
Not Before: Apr 17 02:00:44 2026 GMT
Not After : Apr 18 02:00:44 2026 GMT
Subject: CN=e42738cba22b338be89c993101375cb468770007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2d:f1:78:9e:f6:d3:28:e6:b3:e5:e6:1d:18:
c3:ae:ee:23:b3:78:12:e0:cf:48:d8:74:54:4e:a6:
65:e6:15:ee:b4:be:1e:6a:20:0d:4a:b2:74:31:8b:
02:e6:07:3f:1f:4c:b2:bd:c1:85:2e:9e:38:e0:dc:
7d:eb:05:1c:70:a7:c1:d8:69:b5:aa:36:39:0b:f8:
26:55:8c:7b:31:51:01:71:d5:4d:15:93:b4:7f:24:
9d:45:ce:19:33:d2:a1:e6:b3:15:26:b6:7f:43:f1:
4b:ec:a9:9a:6d:bc:c7:f3:f3:04:de:55:1d:32:2e:
5e:c2:81:d0:85:4d:e7:b5:91:a2:9a:1e:28:e3:1a:
85:00:ac:4e:4e:b1:dd:32:3c:84:18:14:28:12:cb:
ec:da:86:07:0b:d3:d4:6f:71:c3:62:33:c3:5a:00:
eb:16:6e:ac:aa:33:66:42:5d:5e:f7:7b:2e:90:8c:
38:38:ea:b3:1b:7e:19:3b:a3:eb:e1:35:3e:bd:c6:
f4:1e:08:7d:c5:42:1b:ef:80:f5:72:7b:2b:64:3c:
e8:04:6a:d2:c5:d4:6b:a5:16:05:e9:55:f3:1c:20:
8c:90:62:ae:b0:5e:70:0a:c2:70:15:65:8d:d8:4f:
e6:32:51:1d:7b:6c:e2:2f:d8:41:7b:c8:4a:b6:92:
8b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:27:38:CB:A2:2B:33:8B:E8:9C:99:31:01:37:5C:B4:68:77:00:07
X509v3 Authority Key Identifier:
keyid:F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:71:27:6f:84:62:e8:03:8f:10:de:10:90:c3:8b:69:8c:d6:
9e:e9:f4:9e:cc:cb:c2:a1:65:63:0f:4d:b6:5e:87:ec:a2:aa:
d9:e4:0f:92:52:19:fe:65:8f:20:fc:20:d0:cf:47:52:5f:6a:
10:a2:5c:6c:c1:c1:99:d6:ac:6e:59:e9:bf:a3:b9:30:bc:82:
d5:6c:03:46:06:64:79:c5:c5:eb:a8:e6:4b:29:8d:19:94:d0:
d0:e7:e4:80:ed:08:8d:0d:08:21:a0:a5:f1:eb:8f:4d:ca:8d:
3a:b8:f9:cd:1d:29:de:cb:dd:c9:60:f7:bc:51:9a:a1:7c:fe:
7d:39:e7:4a:64:76:6a:1b:c7:b2:e9:a3:0c:a9:4f:af:15:f5:
a9:14:35:23:2d:da:c4:7e:bc:ba:f2:bf:2c:8b:48:50:13:14:
83:b1:7f:7c:ef:64:88:45:5c:77:73:4d:f2:c8:3b:9d:48:05:
69:9e:d2:34:c7:da:81:d9:e1:19:9e:9e:b7:50:10:5e:b8:93:
5f:40:15:28:81:30:03:24:7f:45:cf:09:87:63:03:dd:dd:68:
9e:96:c3:12:7c:26:70:58:a3:94:5e:00:d4:a7:7a:f9:5a:eb:
bf:25:b6:40:6e:0d:9b:58:58:29:11:e8:5d:fb:63:1d:f2:6a:
8a:e7:7f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:13 2026 by rpki-client