Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
File: b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json)
Hash identifier: zglXIOU1aTs+1b3PAt2zLMYyJpOb/u3Vu2tVebAkhmQ=
Subject key identifier: 97:82:C7:6F:6F:01:58:F2:DF:0B:EF:73:AE:53:71:D8:37:8B:4F:CD
Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Certificate serial: 019D9A07165A1E0307DF8839B9894565E35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
Manifest number: 0935
Signing time: Fri 17 Apr 2026 06:00:48 +0000
Manifest this update: Fri 17 Apr 2026 06:00:48 +0000
Manifest next update: Sat 18 Apr 2026 06:00:48 +0000
Files and hashes: 1: KYwLTeDRPbWZ7QruokVrRABez8U.roa (hash: K9pjcDveVnPL9nHRQKLenhV/fjpAku11BgS2kkrYnJc=)
2: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: M4UrFJyL3haJ+oWhCdqWmlmjRqTaKta4vhF0edihcM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:16:5a:1e:03:07:df:88:39:b9:89:45:65:e3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Validity
Not Before: Apr 17 06:00:48 2026 GMT
Not After : Apr 18 06:00:48 2026 GMT
Subject: CN=9782c76f6f0158f2df0bef73ae5371d8378b4fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:9c:77:70:6c:5e:b4:ea:16:92:30:b9:b5:
1b:c6:71:ed:ba:34:37:33:a5:60:ea:fa:63:2d:43:
c9:17:f5:cc:2d:49:0c:b7:10:0a:93:d6:f8:b9:a5:
52:a1:e7:38:67:15:1a:c1:52:ff:4a:85:f1:7c:c2:
49:b2:35:8e:ac:d5:48:9a:30:43:33:d0:5d:1c:75:
b7:3c:8a:20:90:21:97:f4:30:b7:79:66:be:58:3f:
b1:2e:49:8e:dd:37:56:b5:8e:8a:1f:24:c5:56:bc:
0d:7b:49:c0:a2:84:4b:19:9f:1e:00:43:ec:bb:20:
67:97:db:a6:0c:df:aa:a5:9a:43:0a:77:25:d8:1e:
d6:37:85:aa:a7:19:64:35:4c:79:d3:2b:72:eb:b6:
ae:c5:6f:15:1e:06:29:1e:d1:8a:79:9e:af:4b:3c:
59:1b:07:f1:f3:61:1d:94:ff:0f:d6:9e:19:e3:4f:
9d:9c:9b:bd:fe:31:77:6d:8a:72:3b:15:10:08:20:
e9:e0:55:67:24:d6:d3:78:f4:5f:b9:0a:19:79:47:
86:7a:50:94:4b:d0:9c:f2:ed:dc:70:e3:8f:c0:a8:
29:4a:d6:da:98:ae:d4:d5:9f:8b:8e:11:69:b1:95:
a4:9c:3a:85:ed:80:ed:92:a9:22:86:be:be:95:c3:
23:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:82:C7:6F:6F:01:58:F2:DF:0B:EF:73:AE:53:71:D8:37:8B:4F:CD
X509v3 Authority Key Identifier:
keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b7:fd:62:30:3d:72:de:4c:82:39:c7:4f:2e:28:06:3a:b8:
00:25:a9:68:33:4b:ed:fe:43:c7:8b:48:6d:88:04:e4:3f:d3:
6b:96:fe:8b:95:c4:9a:7f:73:24:85:0c:88:3e:e9:d4:c3:04:
08:ff:86:16:a4:ef:c2:b7:4e:38:8b:73:d9:7d:5c:c7:ea:f9:
94:ad:26:6c:8d:c4:a0:a4:58:c2:09:9a:a1:3b:aa:31:8f:57:
7b:ae:4c:d9:0e:25:8f:8f:16:7d:0b:18:c5:07:25:45:34:c6:
81:96:c8:89:3d:9f:ca:4b:a8:89:67:fe:6b:4d:95:a1:21:b1:
25:d0:90:2f:cc:f4:4d:c0:91:a7:a1:57:56:6b:9b:e9:e0:b6:
08:6d:e2:2a:ba:d6:5d:17:10:ea:c1:68:f1:9d:1a:34:30:e0:
84:0c:58:37:e1:54:87:61:d7:c9:37:bf:b2:71:3a:75:d8:74:
94:df:8e:e8:13:37:aa:e2:6e:a1:ea:b1:e7:a9:da:06:43:3f:
02:ef:fd:ab:42:21:98:24:03:d1:84:a3:55:54:15:2c:be:ff:
55:49:35:6d:8b:a8:8b:f0:e5:25:82:ac:3b:b0:08:b5:8a:d7:
c6:4f:0f:6e:78:14:12:04:33:16:dd:55:90:7b:3b:f7:34:65:
3d:12:71:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:10 2026 by rpki-client