Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
File: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft (raw, json)
Hash identifier: KBjioE6g2gmhwvNHOaAKUkb5KBSiAp5B1zJy3FhFTNE=
Subject key identifier: 1A:0B:EA:13:A9:CB:3E:9F:61:5A:C2:19:C3:B7:0F:BC:06:47:F3:E1
Authority key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
Certificate issuer: /CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Certificate serial: 019D9A06C5883B9D25ABF1DC55213BF11DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 06:00:28 +0000
Manifest this update: Fri 17 Apr 2026 06:00:28 +0000
Manifest next update: Sat 18 Apr 2026 06:00:28 +0000
Files and hashes: 1: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl (hash: qhDB8myqd7QlTUn5yGxpWs00HVKffYCCfrbKl7DELUQ=)
2: PTV1hUcFPrtTj8H3jV-0PBWi2aA.roa (hash: LVcltXxTmaC1wumCr9KKXzHWOb4BW8vwqUzLL/KaVfw=)
3: TCIlW-BlRgj9qm8sFvnqA1D_U0w.roa (hash: 3xQeUcgzW7NvDJ0rSLhKBh5bLuiyyVyOLX9rka6WNDc=)
4: pt0vpyYLtzmKEkPORjUEbfLrK04.roa (hash: aNfm1fqgMjkcUsOwar3uLSqc/xreSHXCvlrwdm4pI3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:c5:88:3b:9d:25:ab:f1:dc:55:21:3b:f1:1d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Validity
Not Before: Apr 17 06:00:28 2026 GMT
Not After : Apr 18 06:00:28 2026 GMT
Subject: CN=1a0bea13a9cb3e9f615ac219c3b70fbc0647f3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:f6:57:b9:cf:bf:22:16:61:47:4b:d1:38:
3c:47:eb:f6:5b:79:f6:1e:65:13:b4:87:49:fc:c1:
20:24:71:f9:de:ff:e0:47:23:65:42:bb:d2:28:77:
2f:05:02:e8:3f:9d:3c:87:8e:62:ed:93:91:28:40:
6d:5e:ee:1b:50:b5:99:a2:2b:88:c8:69:73:e3:d2:
68:9a:af:92:d5:c5:d4:f8:97:c6:68:d3:26:2e:70:
0a:5f:59:14:91:9b:33:7f:52:72:2c:18:86:d2:a4:
d8:3b:ee:3f:cc:9e:ae:1c:02:bc:2a:24:96:1e:0d:
5d:08:0d:00:aa:0b:9d:7e:02:8e:76:04:fd:64:0f:
84:2f:fa:8e:fe:6c:74:76:75:07:71:2d:69:81:63:
69:cf:5f:b7:8b:06:c7:41:f2:71:9e:9f:f4:8e:3b:
b3:ec:67:1c:4d:cd:f4:a2:8e:5b:3e:c4:4d:29:6e:
a9:b0:74:ec:e4:15:41:7d:04:63:bc:c6:3d:a3:b3:
4e:87:95:e6:00:14:a9:d5:67:54:d1:12:a7:b7:ef:
0a:4b:b6:bd:27:b4:b5:3b:c2:5b:da:eb:69:03:06:
06:dd:2d:b8:f9:97:11:23:cf:41:b6:3c:4a:b3:66:
4b:d1:44:1a:e4:1d:9e:72:62:56:d3:78:0d:45:85:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0B:EA:13:A9:CB:3E:9F:61:5A:C2:19:C3:B7:0F:BC:06:47:F3:E1
X509v3 Authority Key Identifier:
keyid:F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:be:62:81:6c:52:88:60:6a:35:ee:e8:17:3f:21:0e:05:cf:
f3:c0:d5:f1:5f:fe:bb:20:3d:94:e0:1b:25:ee:2b:bd:83:1b:
87:32:c5:16:e3:68:84:5e:94:6f:f2:fd:fb:76:04:b3:69:9d:
52:c9:21:33:05:8f:2a:af:70:33:19:78:59:35:44:21:52:ca:
4d:34:df:16:c3:eb:7a:44:bd:7c:ad:12:fb:31:be:dc:9b:67:
b6:97:d2:13:b3:a3:e0:59:e4:68:8b:3b:3b:48:b8:0f:a6:c0:
56:19:4c:b2:4a:bf:02:dd:93:37:dc:7a:39:54:d3:2b:e9:00:
6a:ed:56:41:15:83:bd:c2:ef:fa:0e:3e:4e:37:24:f7:1c:da:
4f:f0:bd:14:a4:64:39:f0:9b:b9:da:59:ec:41:84:48:bd:e9:
31:e2:68:68:02:62:c4:a9:9c:76:14:1f:62:01:72:dc:84:71:
55:21:3e:9b:36:d6:4e:09:2b:ce:87:41:1b:c6:f4:d5:85:4b:
00:1b:32:6b:eb:39:8d:e6:2f:fc:a3:04:c5:7f:d1:de:e1:e5:
9b:df:79:2c:ae:1d:19:e0:3d:66:fb:c9:d1:c6:bf:bd:58:6b:
27:cf:2f:f2:cc:9d:60:d9:60:3f:b1:57:60:bf:0c:05:d3:cb:
e0:b8:7f:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBsWIO50lq/HcVSE78R3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZGUzNDZiNTgwNTMyN2JiYzlkZjVlNDliMTZjOTk3ZWEz
YTEyNTQwHhcNMjYwNDE3MDYwMDI4WhcNMjYwNDE4MDYwMDI4WjAzMTEwLwYDVQQD
EygxYTBiZWExM2E5Y2IzZTlmNjE1YWMyMTljM2I3MGZiYzA2NDdmM2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7n2V7nPvyIWYUdL0Tg8R+v2W3n2
HmUTtIdJ/MEgJHH53v/gRyNlQrvSKHcvBQLoP508h45i7ZORKEBtXu4bULWZoiuI
yGlz49Jomq+S1cXU+JfGaNMmLnAKX1kUkZszf1JyLBiG0qTYO+4/zJ6uHAK8KiSW
Hg1dCA0AqgudfgKOdgT9ZA+EL/qO/mx0dnUHcS1pgWNpz1+3iwbHQfJxnp/0jjuz
7GccTc30oo5bPsRNKW6psHTs5BVBfQRjvMY9o7NOh5XmABSp1WdU0RKnt+8KS7a9
J7S1O8Jb2utpAwYG3S24+ZcRI89BtjxKs2ZL0UQa5B2ecmJW03gNRYVALwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoL6hOpyz6fYVrCGcO3D7wGR/PhMB8GA1UdIwQY
MBaAFPbeNGtYBTJ7vJ315JsWyZfqOhJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXQ0MGExZ0ZNbnU4bmZYa214YkpsLW82RWxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zYTg0NjQtMDcyNy00ZDFjLTg5MjUt
NzNhYjg1NjRiOWNhLzEvOXQ0MGExZ0ZNbnU4bmZYa214YkpsLW82RWxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8zYTg0NjQtMDcyNy00ZDFjLTg5MjUtNzNhYjg1NjRiOWNh
LzEvOXQ0MGExZ0ZNbnU4bmZYa214YkpsLW82RWxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP75igWxS
iGBqNe7oFz8hDgXP88DV8V/+uyA9lOAbJe4rvYMbhzLFFuNohF6Ub/L9+3YEs2md
UskhMwWPKq9wMxl4WTVEIVLKTTTfFsPrekS9fK0S+zG+3JtntpfSE7Oj4FnkaIs7
O0i4D6bAVhlMskq/At2TN9x6OVTTK+kAau1WQRWDvcLv+g4+Tjck9xzaT/C9FKRk
OfCbudpZ7EGESL3pMeJoaAJixKmcdhQfYgFy3IRxVSE+mzbWTgkrzodBG8b01YVL
ABsya+s5jeYv/KMExX/R3uHlm995LK4dGeA9ZvvJ0ca/vVhrJ88v8sydYNlgP7FX
YL8MBdPL4Lh/5g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:32 2026 by rpki-client