Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier: aVz7MIEZ94Ze/sCtdGY2HYuglbY3Uy+jMqh8Y76mSbs=
Subject key identifier: F4:8E:02:41:F8:34:93:B6:C2:8E:2F:A9:1A:1E:C7:5F:3C:82:3E:4E
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 019D9B50AFD7ED9DC4610AC537F420662196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number: 0DF5
Signing time: Fri 17 Apr 2026 12:00:49 +0000
Manifest this update: Fri 17 Apr 2026 12:00:49 +0000
Manifest next update: Sat 18 Apr 2026 12:00:49 +0000
Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: 1MYvKJBsknZBpMhcUB2TvC9ZaDG2liDYrbXEBAT4bhI=)
2: yCy_86dbJqoexnTrD2dlicXc2yE.roa (hash: JBNXmhezJRCIp5u3OP1UX59OO3DddhKcgHEEF7XBd38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:af:d7:ed:9d:c4:61:0a:c5:37:f4:20:66:21:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: Apr 17 12:00:49 2026 GMT
Not After : Apr 18 12:00:49 2026 GMT
Subject: CN=f48e0241f83493b6c28e2fa91a1ec75f3c823e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1a:39:ad:1b:f2:9c:a4:e7:40:a3:43:3f:cd:
4f:41:3c:d1:91:97:b2:e0:ba:0e:d4:46:20:b9:4c:
70:1c:2a:6e:55:fe:81:56:1d:e3:73:77:14:e0:6c:
03:47:7b:fa:47:70:9f:53:7e:31:06:1f:da:e9:80:
71:9b:bb:da:cb:5e:cf:50:03:c3:5e:85:39:b6:63:
22:e9:7c:02:6b:0f:8b:90:92:62:96:95:62:2a:03:
9f:c7:3a:bf:de:f2:72:db:0f:30:6d:0d:e4:5c:7a:
98:27:00:42:e7:3a:8f:16:41:5d:b3:d5:00:e4:1a:
e5:02:d8:61:dc:9c:d1:e7:3b:7f:f5:5d:66:e5:52:
ef:fe:a1:91:53:4a:e1:34:b8:9e:ca:13:1b:f5:eb:
4c:16:18:b7:49:57:f3:3b:b9:9d:9c:e9:13:f6:a2:
41:f2:7f:6c:80:60:12:67:26:56:4d:37:15:7d:5e:
d1:8d:63:6a:ad:57:30:cc:b3:97:0a:8e:04:4a:80:
23:53:28:ae:4b:1d:d7:d5:41:ea:6c:7e:9f:67:24:
3b:42:1f:64:a9:69:a1:64:66:ea:1a:5e:7f:43:e8:
df:19:2f:4f:73:e9:5a:f7:d2:27:67:1b:8d:83:58:
4d:5f:5f:38:9f:a7:c2:e5:3d:94:00:d2:24:57:37:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8E:02:41:F8:34:93:B6:C2:8E:2F:A9:1A:1E:C7:5F:3C:82:3E:4E
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2a:2a:73:b8:8a:fe:ee:4e:33:9b:1e:52:81:9d:bf:73:34:
3f:99:c4:5e:76:18:23:6c:d9:3e:88:29:00:5e:67:29:a5:1a:
41:7a:ed:60:e7:ff:c2:57:a0:44:1f:76:4d:e0:bb:46:ee:8a:
e5:7d:f1:eb:ef:3d:9a:7f:75:95:03:f7:ef:6e:d2:5d:90:f6:
5f:65:82:48:30:46:03:92:a3:8f:46:fc:c2:01:1f:00:de:e3:
34:a7:54:bd:06:f9:ce:62:6c:98:30:fc:b2:39:c5:8b:5f:8f:
6b:17:fb:38:db:73:bb:bd:e6:84:d5:fb:8d:48:f7:f9:47:a2:
a3:22:05:95:38:f1:de:f5:50:22:ef:a8:85:26:92:a3:f5:e8:
c3:a8:57:61:d9:8d:a2:f9:a9:4e:a9:4d:31:d5:4f:d0:05:e1:
15:8a:5e:c5:de:34:02:02:a5:fc:0f:63:f4:6d:70:30:2d:c2:
7c:60:c4:5e:91:9e:b8:06:68:ac:66:df:e8:9b:6c:8f:68:ba:
f0:44:f9:4a:65:8a:5b:9d:8b:1f:8b:f8:bf:14:a9:b4:78:92:
53:10:d7:f9:e6:dd:d1:46:aa:ff:5d:e2:98:9a:53:ff:65:de:
08:3b:63:4f:ba:5e:49:33:e1:7b:d0:d7:11:0e:46:df:e5:05:
5e:18:49:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUK/X7Z3EYQrFN/QgZiGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODk3ZmRiZGM3ZDI1MDhkZmNkMTRjZmY2MDBhZDQzYjky
NzkyNGIwHhcNMjYwNDE3MTIwMDQ5WhcNMjYwNDE4MTIwMDQ5WjAzMTEwLwYDVQQD
EyhmNDhlMDI0MWY4MzQ5M2I2YzI4ZTJmYTkxYTFlYzc1ZjNjODIzZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxo5rRvynKTnQKNDP81PQTzRkZey
4LoO1EYguUxwHCpuVf6BVh3jc3cU4GwDR3v6R3CfU34xBh/a6YBxm7vay17PUAPD
XoU5tmMi6XwCaw+LkJJilpViKgOfxzq/3vJy2w8wbQ3kXHqYJwBC5zqPFkFds9UA
5BrlAthh3JzR5zt/9V1m5VLv/qGRU0rhNLieyhMb9etMFhi3SVfzO7mdnOkT9qJB
8n9sgGASZyZWTTcVfV7RjWNqrVcwzLOXCo4ESoAjUyiuSx3X1UHqbH6fZyQ7Qh9k
qWmhZGbqGl5/Q+jfGS9Pc+la99InZxuNg1hNX184n6fC5T2UANIkVzfq8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSOAkH4NJO2wo4vqRoex188gj5OMB8GA1UdIwQY
MBaAFPSJf9vcfSUI380Uz/YArUO5J5JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEt
OTRjNmY3NDRkZTQ2LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEtOTRjNmY3NDRkZTQ2
LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyoqc7iK
/u5OM5seUoGdv3M0P5nEXnYYI2zZPogpAF5nKaUaQXrtYOf/wlegRB92TeC7Ru6K
5X3x6+89mn91lQP3727SXZD2X2WCSDBGA5Kjj0b8wgEfAN7jNKdUvQb5zmJsmDD8
sjnFi1+Paxf7ONtzu73mhNX7jUj3+UeioyIFlTjx3vVQIu+ohSaSo/Xow6hXYdmN
ovmpTqlNMdVP0AXhFYpexd40AgKl/A9j9G1wMC3CfGDEXpGeuAZorGbf6Jtsj2i6
8ET5SmWKW52LH4v4vxSptHiSUxDX+ebd0Uaq/13imJpT/2XeCDtjT7peSTPhe9DX
EQ5G3+UFXhhJvQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:29:30 2026 by rpki-client