Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
File: 0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json)
Hash identifier: 6pdRB8cNOxputErHTgrHu+TTLvhaIbsJfaotLfvnru8=
Subject key identifier: E2:D8:92:D2:EE:6D:CE:CD:B8:57:07:7E:2A:68:B6:64:66:16:A1:A8
Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
Certificate issuer: /CN=d11f6d924d6f6cc0e940837d9301fce732065771
Certificate serial: 019D9A74FF86577D9440CEC884197157FCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
Manifest number: 071B
Signing time: Fri 17 Apr 2026 08:00:51 +0000
Manifest this update: Fri 17 Apr 2026 08:00:51 +0000
Manifest next update: Sat 18 Apr 2026 08:00:51 +0000
Files and hashes: 1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: T4KVXmsFqgIjCIrdnceG4vj7Qr3Xg9vprY1EzW6brho=)
2: RnVTKZtoHdvPsfS8AH4yl7Tn4u8.roa (hash: Pgpu3NuPaXsm7XOY/YOTMwi4KbLTR5P/cSiW4/B73kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ff:86:57:7d:94:40:ce:c8:84:19:71:57:fc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771
Validity
Not Before: Apr 17 08:00:51 2026 GMT
Not After : Apr 18 08:00:51 2026 GMT
Subject: CN=e2d892d2ee6dcecdb857077e2a68b6646616a1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:f4:1d:b6:05:75:8c:81:4a:bb:b3:b8:5e:
01:18:aa:9f:cf:1c:7a:f9:94:3e:c4:ff:1d:8b:85:
12:02:ec:fd:5d:16:a0:10:be:80:50:7c:4e:92:f2:
d4:11:03:10:8a:75:88:1c:62:18:b0:d9:3e:76:20:
d9:ff:4a:45:75:31:db:ab:e8:d6:3d:a3:1c:ee:99:
8d:d9:ab:d5:3e:f6:cc:53:91:44:17:a8:64:8e:c9:
45:55:4f:46:e1:7f:c6:36:6b:9f:bc:0e:d6:8f:fd:
23:5e:80:9d:f8:88:92:04:21:16:a4:99:f5:3b:46:
11:b5:78:ef:55:e1:6d:e2:7f:b8:f3:74:b6:51:58:
37:31:48:9d:96:d6:b9:e0:13:37:ba:b5:78:79:e9:
98:0b:41:7c:fb:87:03:10:0a:b7:2c:23:bc:ef:4a:
22:af:fa:54:b9:0f:ad:c1:73:7f:bf:5d:f7:5a:88:
8f:af:05:0e:df:fc:d1:41:48:62:e2:6d:b6:ab:34:
47:99:53:3c:e8:8a:e9:32:f4:23:0f:1d:e6:75:27:
0b:93:e8:10:25:98:6c:b5:51:46:71:cf:e0:32:f0:
21:8f:38:d5:34:47:b7:fa:5f:bc:ae:5c:73:a1:af:
01:59:0c:84:e1:00:08:40:9f:60:31:ae:08:f6:a0:
69:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D8:92:D2:EE:6D:CE:CD:B8:57:07:7E:2A:68:B6:64:66:16:A1:A8
X509v3 Authority Key Identifier:
keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:23:97:8d:d7:29:98:1a:28:4e:7a:2b:81:65:fd:88:42:a5:
ef:6c:2d:61:d9:0b:72:e0:b7:0f:32:24:fa:4c:56:39:b0:6a:
9d:0b:7a:db:73:98:aa:3f:9d:ce:17:05:15:a5:59:e6:29:2a:
b4:48:10:48:98:19:9e:32:3b:66:f6:94:27:ef:83:5a:a9:5a:
0b:a3:a5:5c:b8:4d:bd:44:f0:b5:78:08:5e:47:e8:20:f9:81:
57:99:5f:3b:6b:bc:bd:c0:6f:7a:b1:95:d4:2b:6d:8a:85:10:
d6:cd:4d:07:4b:34:8b:41:ee:93:e4:03:50:5e:7a:54:7c:8b:
2d:3a:50:4f:fd:9f:f6:0c:c4:6f:57:43:b7:e7:c4:b1:80:0f:
58:1a:c7:b6:0a:f1:57:af:b2:33:7d:ed:80:1e:bc:c7:8e:36:
e4:12:4e:54:c2:2e:0f:59:cc:d5:10:a7:01:88:3d:69:cd:04:
3a:61:0f:29:c3:78:11:80:1d:cd:5e:cd:02:b6:50:c6:64:0d:
4e:07:1a:83:df:4b:a4:41:81:5a:fd:82:98:ea:a0:7e:a6:b0:
bd:96:b4:f0:52:80:af:33:d8:3b:36:8f:8b:60:b5:ca:30:1b:
b6:08:00:b7:d5:4e:2a:e8:62:8a:7f:f6:8e:75:da:81:61:7d:
25:dd:6f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:04 2026 by rpki-client