Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File: 9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier: WUnrZVSiQVXz2HtKmLIuMVcQLnszbPqMKZXqFdlXDak=
Subject key identifier: 8C:D0:F8:13:5D:40:CF:4C:AF:F2:64:F3:BA:9A:A4:B0:CF:92:C8:E0
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 019D9AAB8C95D961CCCEA80E2B1AB75ABF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number: 1772
Signing time: Fri 17 Apr 2026 09:00:26 +0000
Manifest this update: Fri 17 Apr 2026 09:00:26 +0000
Manifest next update: Sat 18 Apr 2026 09:00:26 +0000
Files and hashes: 1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: qJMGqTxii3pkE2smfoqGvfdS+oT0xajPIEv3ZPEtUDE=)
2: ZZanlFxScyN4CQoGhBTQl2sVxVg.roa (hash: A34wmEZaQFDCuGsNd+TzvMoOwERkMP/gXQVur9pCPCA=)
3: pRFsySqGl0tFAUw52aDZNnq-uD0.roa (hash: w8jNvizOVr/p52jNZpTu/WC6lPFW3XL5WSYxYnBEKj4=)
4: xO0eawE2B1S0TKvBcaaGiQh0Ol0.roa (hash: dcuU5KhFuT+OtopOGBCq8QR05uFVdXywWZjFZcyGZgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:8c:95:d9:61:cc:ce:a8:0e:2b:1a:b7:5a:bf:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Apr 17 09:00:26 2026 GMT
Not After : Apr 18 09:00:26 2026 GMT
Subject: CN=8cd0f8135d40cf4caff264f3ba9aa4b0cf92c8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:ee:c8:93:c4:ed:ee:22:f0:df:9b:15:f2:
a2:93:b5:02:7c:87:93:02:9d:0d:91:b9:66:d0:13:
06:45:bc:33:95:0c:50:3a:c4:b2:bb:39:32:48:bb:
48:cb:db:e7:eb:b1:f4:49:f5:5e:2e:07:cf:26:f0:
63:b9:76:cb:86:c2:03:5c:2f:cc:8c:5d:13:13:10:
5e:48:0a:d4:f8:e7:a0:09:08:8f:03:ed:0e:3f:a8:
25:ea:56:56:c8:6c:34:c4:1f:b5:4a:1b:d3:96:5a:
48:0d:fc:37:09:d0:e7:1e:c4:c8:2f:b3:2c:51:53:
9a:28:00:2f:47:df:37:f0:5d:53:76:8d:dd:1c:b6:
5a:2e:15:ea:87:51:12:91:92:cc:f9:5c:0b:12:cb:
8b:05:0a:45:2a:51:6f:47:5b:a4:eb:a2:cb:60:92:
63:11:e7:f2:02:3c:b8:bb:1d:eb:f1:fe:a0:43:57:
b1:e7:f3:a1:b0:74:58:5e:02:1c:42:78:bd:85:a4:
7d:6d:31:1f:d0:88:6c:80:9c:30:24:a5:3a:eb:cf:
95:39:bc:5c:b1:03:7a:ac:b8:19:d5:33:28:3f:97:
e9:a2:8b:44:94:bb:10:6e:f2:56:bf:0a:b6:fb:97:
8d:a1:e9:8d:f1:77:95:72:0e:1f:0a:c4:8a:60:a8:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D0:F8:13:5D:40:CF:4C:AF:F2:64:F3:BA:9A:A4:B0:CF:92:C8:E0
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9b:cd:90:95:86:6c:f3:32:5f:26:3f:8c:b0:4e:dd:08:97:
bb:69:38:6d:fb:bd:8e:06:18:fb:de:1d:71:a8:52:a2:d9:45:
d5:96:76:d7:8e:c7:b1:1f:00:cc:fd:94:c4:79:6e:c3:16:4a:
5c:5e:2d:29:5e:77:a9:25:ae:ef:d3:0b:21:94:09:b4:33:47:
51:79:0f:3a:e8:28:57:1b:29:f1:3f:0e:07:76:c9:df:59:4e:
a5:69:6f:5e:09:ba:6d:f6:5c:e1:09:8b:8d:80:4a:08:41:b2:
0a:fa:12:a6:12:72:dd:c9:d1:5f:9e:4c:8c:21:50:c2:6c:ed:
2c:f5:d9:9d:7c:4c:31:95:1b:54:e3:b2:b5:d4:0a:62:06:84:
fd:3e:63:eb:2a:02:9d:ab:04:fc:08:39:61:24:29:75:65:bf:
ad:92:e7:ac:c7:41:78:15:3f:16:f5:ac:91:29:5f:56:e3:4d:
ee:2a:c0:05:31:91:ee:85:46:98:4b:a9:ac:5b:c4:ff:9d:29:
d3:a7:c1:96:1c:52:48:77:77:f1:af:15:dd:5b:56:b8:6f:0d:
bf:ab:ff:cf:3f:b2:a7:10:58:99:35:e7:96:5f:fb:c7:a7:7f:
57:44:31:6f:30:b2:64:ba:a1:48:30:d3:6e:36:fa:54:bb:ff:
e9:f7:f6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:59 2026 by rpki-client