Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
File: g9Nuy69V5GTgCzmH2lJktq8tz4g.mft (raw, json)
Hash identifier: ZHBdxXmKgohQwLNgjzdkVjhjGatjZNVKjZlQbUrrmh0=
Subject key identifier: 14:96:34:29:F5:E3:09:FB:06:34:B5:8A:5F:A5:82:AE:1E:96:ED:32
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Certificate issuer: /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial: 019D9DE3830C3686FA1C2E710EF6BEA5C619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
Manifest number: 0DB1
Signing time: Sat 18 Apr 2026 00:00:26 +0000
Manifest this update: Sat 18 Apr 2026 00:00:26 +0000
Manifest next update: Sun 19 Apr 2026 00:00:26 +0000
Files and hashes: 1: g9Nuy69V5GTgCzmH2lJktq8tz4g.crl (hash: JdyYc++5EZsH0bDKZxOegze+/we1S20bhLH3S3FYf2U=)
2: m2ZF-74RUnpYCSRQzi58JGlu94U.roa (hash: rCyhTyXzRp0exhx6DF5SAa1YSYaN0bDG8IRLr2ntpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:83:0c:36:86:fa:1c:2e:71:0e:f6:be:a5:c6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Validity
Not Before: Apr 18 00:00:26 2026 GMT
Not After : Apr 19 00:00:26 2026 GMT
Subject: CN=14963429f5e309fb0634b58a5fa582ae1e96ed32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:19:e6:cb:5e:2c:9b:1d:c7:57:51:f7:3e:66:
79:d8:21:58:f0:fb:d1:9e:49:31:08:8d:a6:bb:5f:
ac:20:81:b0:8a:b1:47:7e:01:17:6b:dc:0a:c3:a5:
12:a6:be:9e:e8:5a:50:60:7b:6e:47:bf:a5:e1:84:
27:64:73:9c:f2:99:ff:2d:70:49:3d:a7:ad:ed:4e:
08:f1:70:a5:06:4a:7e:13:bb:0a:44:6f:7b:32:84:
1b:c7:e8:c0:24:0f:a9:5c:18:63:27:0f:a2:ed:68:
d5:b5:1d:e4:a9:f1:81:ff:94:48:81:ea:37:51:17:
eb:09:14:f4:7d:a0:a2:0f:3b:4e:f6:80:0c:a8:a3:
3b:59:3c:94:ec:bf:f6:12:4a:9f:a1:f9:99:1b:89:
89:3f:09:a0:1b:27:09:cf:a1:5a:78:90:ed:f5:8a:
9b:4a:9b:0c:33:d4:b7:69:5b:02:4a:5c:7a:3b:54:
11:fc:22:11:39:54:bf:c1:09:34:35:ef:50:2d:21:
26:94:e7:c4:7e:2e:63:5d:3e:a5:fe:6e:5d:08:59:
78:b8:be:1c:5d:9e:0e:ef:b8:af:9e:b5:bf:a0:bf:
da:e7:7e:0c:9e:d1:5b:5d:c7:23:ed:98:5b:39:aa:
b7:9d:2a:37:ca:55:10:0c:1d:90:05:d6:1c:3e:68:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:96:34:29:F5:E3:09:FB:06:34:B5:8A:5F:A5:82:AE:1E:96:ED:32
X509v3 Authority Key Identifier:
keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ed:93:f2:de:fb:4a:d6:dd:cf:cf:cb:ff:a6:48:03:cd:4a:
24:89:f8:32:87:b0:14:37:f0:19:08:f1:c1:dd:f9:35:11:25:
7d:df:15:11:6d:47:0f:73:29:4c:e7:dc:fe:e8:00:8c:71:b1:
80:81:e8:9c:91:0b:da:8a:b9:48:54:b8:6b:f5:43:68:15:54:
3b:36:08:69:55:7e:67:5e:0f:6e:56:94:c1:a9:7b:b9:fe:42:
d0:b2:a5:91:90:5e:5f:f7:ed:f7:67:f2:a5:e2:03:53:d5:2b:
f2:7f:f3:bd:25:e1:62:18:26:c3:75:a9:47:a7:f1:25:9a:e6:
92:7f:e4:99:25:67:ff:ad:21:96:62:3c:cb:f6:4d:fa:6e:2f:
4c:30:9b:54:6b:83:a6:d1:c4:76:30:43:b5:54:8f:b1:c2:98:
a6:6f:c1:33:88:92:21:54:df:ad:36:c9:1b:9b:77:aa:d1:34:
fa:bd:1e:b1:e9:54:28:03:c6:a1:f7:1a:21:89:e0:19:a7:bf:
9a:41:36:71:68:90:b2:32:cd:34:b9:2e:df:7e:94:ff:4c:b6:
4e:51:4b:93:f7:a4:1a:a9:1a:26:bd:61:6e:d9:59:32:9d:5f:
30:dc:9f:fe:1d:e4:b1:08:17:0b:d3:b0:9f:6a:2a:2f:44:c6:
5c:32:b4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:51:55 2026 by rpki-client