Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: rbGKRM6H8po6FWXh9d2Nvit3HuRgUZxpKCTr6EqhNl0=
Subject key identifier: 5C:BA:07:F9:16:2F:43:DF:B7:B0:10:96:AE:4B:07:A2:D8:CD:9E:8E
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 019D9A3DFA22FFE5DD57B9AFF46C0238C4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 07:00:46 +0000
Manifest this update: Fri 17 Apr 2026 07:00:46 +0000
Manifest next update: Sat 18 Apr 2026 07:00:46 +0000
Files and hashes: 1: BKEbuwMgtraLYD7tz_bOlWvPTyU.roa (hash: 4+VeGIyK69ig1zU9o8l43jPylF7T3GhRdlEeEiB531Q=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: dMXXSobMJeda0GMxCZdpk2hAO/GpyPOvpW34BV+lEFc=)
3: zr9U94ldVmEqABzp28N8U7oLDs8.roa (hash: uuO8FGDaDTUpNR5s2Koo87GcscBCUOkl1Mw1TeypQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:fa:22:ff:e5:dd:57:b9:af:f4:6c:02:38:c4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Apr 17 07:00:46 2026 GMT
Not After : Apr 18 07:00:46 2026 GMT
Subject: CN=5cba07f9162f43dfb7b01096ae4b07a2d8cd9e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:36:00:dc:96:01:7d:69:4a:70:02:de:59:
ca:79:82:5a:04:93:f6:bc:79:4a:f5:39:8d:77:d9:
2b:f0:5d:9c:08:56:bd:b4:e2:2a:5f:01:63:59:cb:
88:82:e8:33:06:48:97:e7:6f:49:b6:62:d1:2b:55:
4d:ac:ef:e2:33:e3:b1:8d:a6:5a:20:4c:20:85:06:
11:8e:2f:4b:03:a9:e8:29:7e:e0:e1:5d:c4:e3:1a:
a9:03:e3:75:7c:7b:e2:8f:69:04:e0:f1:4a:4e:37:
22:8b:20:e9:19:43:12:0b:a0:76:60:c4:40:04:d6:
51:ae:93:6b:04:57:f1:bc:73:45:b3:ca:31:72:ae:
50:3a:57:ac:59:3d:f4:85:52:a5:a9:69:e7:9a:09:
89:ae:4c:63:ae:38:a2:a3:37:61:a2:c2:22:45:36:
78:fa:aa:20:ba:23:89:53:67:70:4d:ba:44:c5:48:
c6:fe:6d:21:35:b7:7c:79:af:24:67:04:8b:4b:e5:
6d:bb:6e:d8:d3:b9:5f:c7:28:7f:8f:ca:64:58:77:
3b:91:89:a1:12:61:1e:d5:b0:26:99:38:e9:db:31:
6f:d8:15:94:f1:96:d5:12:fc:5d:68:78:4c:25:43:
8a:4a:d6:31:09:2d:d9:08:4d:14:89:34:66:4b:cf:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BA:07:F9:16:2F:43:DF:B7:B0:10:96:AE:4B:07:A2:D8:CD:9E:8E
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b9:c9:55:3a:a3:52:df:ab:62:75:1d:a7:ef:c6:89:e1:ad:
47:8c:15:5b:66:4a:2b:ea:da:52:2b:da:0e:19:be:bf:34:01:
2d:9b:1a:6d:f7:78:46:26:6b:b7:aa:35:5d:dc:a5:82:5e:e1:
e4:37:bf:f2:1b:14:44:33:7b:68:0c:b9:c4:ea:fd:13:58:aa:
ec:58:9d:c3:82:5d:99:0a:fc:43:0b:af:6e:63:5b:d8:fa:ab:
45:7c:28:ab:99:9a:42:21:b9:2d:7c:4b:48:2b:b2:0b:16:fb:
aa:dc:2c:88:f3:43:87:e8:bf:7c:6b:ab:45:b0:49:1f:da:52:
16:15:4a:4e:02:54:fc:04:86:49:c9:5a:7b:47:f2:88:88:58:
cb:16:98:41:99:7b:45:c9:23:3c:c6:c7:83:a3:e0:9a:a5:a8:
93:c6:bd:cd:e5:a0:bd:ca:ab:21:84:20:80:36:2c:ce:cd:cc:
eb:fc:92:cb:85:b2:e5:79:c7:a7:9a:44:91:b5:4f:40:3a:d9:
fa:79:f2:3b:71:dd:12:1d:f9:c5:2f:bc:5e:d7:96:01:62:2f:
40:6b:b2:bb:cf:e6:0e:df:3f:db:0c:88:6e:5b:b6:b2:18:f6:
59:0a:a1:0a:57:18:fa:26:8c:7d:c5:98:11:58:76:f0:1b:35:
43:22:2a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:38 2026 by rpki-client