Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
File: 9PpnFz_1YpCIuXCWGuG-dGldxmE.mft (raw, json)
Hash identifier: Vb5MfrDWDTXOHPSV+XVbDBQv3SJP0+0cpE7MtWUv/08=
Subject key identifier: 2E:2D:B1:BD:3C:CF:9C:D8:42:85:DA:36:6C:F3:2F:A8:B9:E7:B3:E6
Authority key identifier: F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
Certificate issuer: /CN=f4fa67173ff5629088b970961ae1be74695dc661
Certificate serial: 019D98F519C126885568B2C55D0F9AFE2E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:01:32 +0000
Manifest this update: Fri 17 Apr 2026 01:01:32 +0000
Manifest next update: Sat 18 Apr 2026 01:01:32 +0000
Files and hashes: 1: 9PpnFz_1YpCIuXCWGuG-dGldxmE.crl (hash: HN6aN8ThhoH1vx0jMPkQmghpmRXJCbb+GWHoBs4Ryqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:19:c1:26:88:55:68:b2:c5:5d:0f:9a:fe:2e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa67173ff5629088b970961ae1be74695dc661
Validity
Not Before: Apr 17 01:01:32 2026 GMT
Not After : Apr 18 01:01:32 2026 GMT
Subject: CN=2e2db1bd3ccf9cd84285da366cf32fa8b9e7b3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:65:b4:ad:2d:5f:58:c8:cc:61:34:94:ed:
19:0b:64:aa:13:a9:13:91:32:f1:6f:8b:60:78:b9:
01:ea:ae:d8:83:db:f7:51:e0:5d:04:c5:73:d9:65:
56:3d:d6:c1:3b:8d:76:c4:83:03:df:a8:61:c4:2a:
cf:fa:cb:fd:cd:b2:41:fd:40:61:ee:7d:08:ea:28:
32:2e:b3:fc:7a:8c:44:e6:a0:12:b2:c6:e1:30:84:
ee:6a:6c:da:c1:f8:4e:94:52:ad:a5:0a:a4:f7:34:
cb:73:bd:67:ff:47:53:bc:5e:04:aa:9d:0c:62:37:
69:78:4f:1a:d0:da:34:60:42:f1:9c:91:87:5c:1b:
b9:d4:0b:31:e2:a1:e5:d9:af:1f:74:6f:90:5b:a4:
1d:f6:f8:34:f8:a2:95:f9:91:0c:2e:99:aa:5e:a0:
ab:ad:6d:11:51:26:4e:4d:dd:52:ad:9d:96:82:73:
38:47:a5:c5:d1:f4:da:b9:3b:7b:fa:12:44:4a:44:
96:96:ce:fd:7c:d5:14:7f:fa:54:0b:1d:88:36:35:
86:bb:06:70:9d:02:f8:59:54:87:53:de:0c:c5:b2:
ce:4d:96:ad:02:f9:22:d5:8f:58:6e:6d:6d:6f:1c:
d4:ed:fe:c9:c7:bc:bb:83:fd:8f:cd:7c:2f:cc:d8:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2D:B1:BD:3C:CF:9C:D8:42:85:DA:36:6C:F3:2F:A8:B9:E7:B3:E6
X509v3 Authority Key Identifier:
keyid:F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:03:15:02:e2:59:16:c6:5e:41:92:29:6b:71:0b:de:9d:d6:
bc:ae:53:ee:a6:76:b1:25:18:46:9c:83:0a:9d:93:4d:d5:af:
ff:ff:01:7d:c7:0b:fc:28:bf:da:33:fb:6e:0f:23:88:0d:c4:
ba:81:10:8d:c2:94:3d:43:a3:58:14:dd:fd:37:e5:92:09:2f:
ac:ee:ea:5c:6e:23:f3:38:cc:69:14:20:0e:90:8d:56:4f:31:
c8:04:f2:75:76:28:df:3d:6f:b7:b8:af:6e:e2:b3:78:20:b2:
25:ec:ac:20:e5:28:b3:c3:e6:03:00:90:2f:9f:28:83:7b:61:
e8:e2:a1:25:d9:a9:e9:74:de:f7:fc:3f:82:a5:ca:a1:ca:d9:
fe:cb:4c:22:b8:a6:71:45:e3:1d:f8:30:63:ad:0f:ef:fe:be:
9b:6c:40:3f:ba:77:cd:3e:07:47:19:4b:3e:74:a5:87:cb:76:
77:f7:30:7f:ca:81:0d:ed:23:77:e3:bb:2f:d1:e8:20:98:f7:
b0:c7:b3:4d:67:47:95:87:8c:48:0d:b0:63:cd:43:a2:04:5b:
b2:1d:ef:5f:32:d0:2e:e8:6f:a6:33:97:5a:8a:a7:37:0a:3e:
d8:aa:f8:fb:cf:1e:02:3b:0d:22:16:8a:3d:12:1e:88:91:b2:
62:9f:4f:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9RnBJohVaLLFXQ+a/i6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZmE2NzE3M2ZmNTYyOTA4OGI5NzA5NjFhZTFiZTc0Njk1
ZGM2NjEwHhcNMjYwNDE3MDEwMTMyWhcNMjYwNDE4MDEwMTMyWjAzMTEwLwYDVQQD
EygyZTJkYjFiZDNjY2Y5Y2Q4NDI4NWRhMzY2Y2YzMmZhOGI5ZTdiM2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdhltK0tX1jIzGE0lO0ZC2SqE6kT
kTLxb4tgeLkB6q7Yg9v3UeBdBMVz2WVWPdbBO412xIMD36hhxCrP+sv9zbJB/UBh
7n0I6igyLrP8eoxE5qASssbhMITuamzawfhOlFKtpQqk9zTLc71n/0dTvF4Eqp0M
YjdpeE8a0No0YELxnJGHXBu51Asx4qHl2a8fdG+QW6Qd9vg0+KKV+ZEMLpmqXqCr
rW0RUSZOTd1SrZ2WgnM4R6XF0fTauTt7+hJESkSWls79fNUUf/pUCx2INjWGuwZw
nQL4WVSHU94MxbLOTZatAvki1Y9Ybm1tbxzU7f7Jx7y7g/2PzXwvzNjMaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4tsb08z5zYQoXaNmzzL6i557PmMB8GA1UdIwQY
MBaAFPT6Zxc/9WKQiLlwlhrhvnRpXcZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBwbkZ6XzFZcENJdVhDV0d1Ry1kR2xkeG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi82ODRkZjQtNzI1Ny00Y2NhLTgyNGUt
ZDg1ZWJjNWVhOThkLzEvOVBwbkZ6XzFZcENJdVhDV0d1Ry1kR2xkeG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi82ODRkZjQtNzI1Ny00Y2NhLTgyNGUtZDg1ZWJjNWVhOThk
LzEvOVBwbkZ6XzFZcENJdVhDV0d1Ry1kR2xkeG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwMVAuJZ
FsZeQZIpa3EL3p3WvK5T7qZ2sSUYRpyDCp2TTdWv//8BfccL/Ci/2jP7bg8jiA3E
uoEQjcKUPUOjWBTd/TflkgkvrO7qXG4j8zjMaRQgDpCNVk8xyATydXYo3z1vt7iv
buKzeCCyJeysIOUos8PmAwCQL58og3th6OKhJdmp6XTe9/w/gqXKocrZ/stMIrim
cUXjHfgwY60P7/6+m2xAP7p3zT4HRxlLPnSlh8t2d/cwf8qBDe0jd+O7L9HoIJj3
sMezTWdHlYeMSA2wY81DogRbsh3vXzLQLuhvpjOXWoqnNwo+2Kr4+88eAjsNIhaK
PRIeiJGyYp9Pow==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:10 2026 by rpki-client