Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
File: 9RDHudzJJZg-WbWGzVmrVUviWYI.mft (raw, json)
Hash identifier: 82q1uPxhzZbbZIG4ZXI+1vzG+AfXrvZgVD/g3GKeJgM=
Subject key identifier: 03:64:DB:0A:8E:A8:E8:E5:0D:82:B9:EE:A8:10:81:DC:9B:12:BC:40
Authority key identifier: F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82
Certificate issuer: /CN=f510c7b9dcc925983e59b586cd59ab554be25982
Certificate serial: 019DA4F94DC31BC19F97FE6E7FC42153CCE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
Manifest number: 0160
Signing time: Sun 19 Apr 2026 09:01:34 +0000
Manifest this update: Sun 19 Apr 2026 09:01:34 +0000
Manifest next update: Mon 20 Apr 2026 09:01:34 +0000
Files and hashes: 1: 9RDHudzJJZg-WbWGzVmrVUviWYI.crl (hash: oBgPLRC2SxeH2r6q8Pk9WUH7KhDw3eAeF8XodOHeZaQ=)
2: wTA4ZoIz75kHn1WMirNEgMY65FE.roa (hash: ashXJm/A/tacrnrBady83etVIast6DpVJH2Dt/iNOM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:4d:c3:1b:c1:9f:97:fe:6e:7f:c4:21:53:cc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f510c7b9dcc925983e59b586cd59ab554be25982
Validity
Not Before: Apr 19 09:01:34 2026 GMT
Not After : Apr 20 09:01:34 2026 GMT
Subject: CN=0364db0a8ea8e8e50d82b9eea81081dc9b12bc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:26:51:f0:1b:1e:71:43:5d:ec:6c:46:c9:
a1:ab:1e:fe:e2:9b:87:be:79:59:ac:49:11:3c:bb:
47:d2:6c:15:47:6a:fd:82:e2:b1:b6:e0:5e:49:e5:
b0:d8:69:a8:49:ba:d3:f4:5c:ac:0d:f1:13:d4:9e:
48:f0:05:1d:11:3b:da:bb:02:37:7d:e1:ca:90:03:
0e:91:a5:2c:86:00:be:c6:3f:fc:30:a0:47:e9:6f:
79:f0:47:13:5e:e3:0c:ba:6a:35:ee:74:00:03:eb:
01:63:ce:c5:a9:3a:b4:fc:ce:e7:3f:ba:4d:12:9c:
f4:fb:b7:80:26:31:39:1f:e2:0d:18:f3:c2:41:db:
29:5c:3c:b7:dc:ff:3b:be:46:06:44:d8:2b:a9:7a:
0d:25:01:77:bc:0f:9f:38:c0:06:47:e9:4d:bd:30:
d7:ac:9e:44:ab:c6:3d:41:f8:8f:12:37:a8:67:bb:
4d:8b:cb:6c:66:bb:4b:96:fe:2c:f5:9a:40:02:d0:
d8:e7:85:c9:62:c5:de:c6:43:38:40:2c:a9:83:0c:
14:24:55:70:50:ae:49:af:2d:c1:cb:82:b8:9a:e1:
d8:6a:3d:d2:c2:d0:47:de:95:bf:27:b4:81:7e:51:
33:6b:d1:ab:f5:e7:46:e4:3f:96:f8:8e:ac:a2:17:
c0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:64:DB:0A:8E:A8:E8:E5:0D:82:B9:EE:A8:10:81:DC:9B:12:BC:40
X509v3 Authority Key Identifier:
keyid:F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:32:d6:08:f5:9e:db:fd:eb:18:ca:ea:1b:d4:c5:f0:78:42:
99:b4:ca:4e:ea:93:e4:8e:83:47:20:6c:07:53:2b:d5:9e:40:
db:52:fe:c0:de:6f:27:63:2d:29:73:38:16:33:b7:a0:ba:ed:
cc:1b:c3:59:b4:95:e7:46:53:36:27:55:7d:7a:04:52:58:f9:
b0:21:f5:17:9a:2d:86:61:29:a9:78:d8:a1:7a:e6:3f:07:64:
e7:38:27:ee:fc:67:8b:54:71:04:af:b3:56:c0:47:ee:e9:b2:
b5:e3:e4:b1:49:f2:36:86:bf:6f:dc:7a:03:44:85:d4:2c:d6:
ec:a4:de:3c:3d:14:ff:2f:ee:7d:46:d6:e1:98:59:33:63:01:
f4:d4:1a:0d:6c:05:42:6a:f7:a8:a5:de:cf:06:f8:3b:f9:aa:
86:0c:56:b4:bc:03:bb:00:42:54:85:38:ce:6c:fd:9e:f8:69:
25:66:28:4b:2a:e1:70:14:da:53:19:b5:77:c8:06:ee:82:37:
ab:e4:68:53:8f:2f:e4:e7:c1:4e:2c:bd:6f:d8:d8:31:1b:54:
a6:5d:b0:13:92:6a:52:82:c8:46:1a:86:6d:2d:3c:7c:f1:bd:
15:ce:60:1f:82:3e:84:c9:c4:51:b5:47:bc:a7:d5:af:b8:50:
4a:c6:be:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+U3DG8Gfl/5uf8QhU8zjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTBjN2I5ZGNjOTI1OTgzZTU5YjU4NmNkNTlhYjU1NGJl
MjU5ODIwHhcNMjYwNDE5MDkwMTM0WhcNMjYwNDIwMDkwMTM0WjAzMTEwLwYDVQQD
EygwMzY0ZGIwYThlYThlOGU1MGQ4MmI5ZWVhODEwODFkYzliMTJiYzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymgmUfAbHnFDXexsRsmhqx7+4puH
vnlZrEkRPLtH0mwVR2r9guKxtuBeSeWw2GmoSbrT9FysDfET1J5I8AUdETvauwI3
feHKkAMOkaUshgC+xj/8MKBH6W958EcTXuMMumo17nQAA+sBY87FqTq0/M7nP7pN
Epz0+7eAJjE5H+INGPPCQdspXDy33P87vkYGRNgrqXoNJQF3vA+fOMAGR+lNvTDX
rJ5Eq8Y9QfiPEjeoZ7tNi8tsZrtLlv4s9ZpAAtDY54XJYsXexkM4QCypgwwUJFVw
UK5Jry3By4K4muHYaj3SwtBH3pW/J7SBflEza9Gr9edG5D+W+I6sohfAVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANk2wqOqOjlDYK57qgQgdybErxAMB8GA1UdIwQY
MBaAFPUQx7ncySWYPlm1hs1Zq1VL4lmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYt
YTFiMmI2YTcwMjcyLzEvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYtYTFiMmI2YTcwMjcy
LzEvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzLWCPWe
2/3rGMrqG9TF8HhCmbTKTuqT5I6DRyBsB1Mr1Z5A21L+wN5vJ2MtKXM4FjO3oLrt
zBvDWbSV50ZTNidVfXoEUlj5sCH1F5othmEpqXjYoXrmPwdk5zgn7vxni1RxBK+z
VsBH7umytePksUnyNoa/b9x6A0SF1CzW7KTePD0U/y/ufUbW4ZhZM2MB9NQaDWwF
Qmr3qKXezwb4O/mqhgxWtLwDuwBCVIU4zmz9nvhpJWYoSyrhcBTaUxm1d8gG7oI3
q+RoU48v5OfBTiy9b9jYMRtUpl2wE5JqUoLIRhqGbS08fPG9Fc5gH4I+hMnEUbVH
vKfVr7hQSsa+qQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:42:53 2026 by rpki-client