Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: gJZ2jHFk0TOVnkGCw7IIfHBNw6B6VW5UkNyAJ4kC7O4=
Subject key identifier: 0E:3D:6A:24:B4:0D:4F:5A:9B:16:F6:07:2A:FD:34:EB:E4:05:9E:D4
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 019D9886D17FCBF45E0C87DC192D0EA81F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 23:01:05 +0000
Manifest this update: Thu 16 Apr 2026 23:01:05 +0000
Manifest next update: Fri 17 Apr 2026 23:01:05 +0000
Files and hashes: 1: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: epjPjBmqvXU6HD9pviIuppjzoDd6J/MKwpfCB7HS8KM=)
2: ZEzLOpu5XtR6NBna_6IDb8EqXXs.roa (hash: 3osUcSjQKH0ELMcPBLnQ81viVvl9FJ67k0/UaKaDqp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:d1:7f:cb:f4:5e:0c:87:dc:19:2d:0e:a8:1f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: Apr 16 23:01:05 2026 GMT
Not After : Apr 17 23:01:05 2026 GMT
Subject: CN=0e3d6a24b40d4f5a9b16f6072afd34ebe4059ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6c:a9:ca:29:b7:9f:8b:e4:54:55:1c:79:d9:
ed:8f:6f:7d:72:ab:73:65:28:4d:f0:04:7e:aa:51:
dc:fc:f2:5c:5e:d4:33:09:b3:c5:d6:51:ee:43:4a:
61:03:48:3c:56:4d:84:a8:b1:de:86:3b:94:48:91:
e3:f3:09:e5:0f:c8:0e:a4:33:33:1b:0e:f5:cb:80:
e9:0c:aa:e7:01:07:18:ce:6a:cd:42:19:a6:5f:36:
30:84:8f:71:ac:d3:78:81:e9:8a:ce:5e:17:73:3d:
ea:59:39:6c:be:44:ef:42:a6:2f:eb:7d:3b:0b:de:
d7:f8:02:90:d2:0e:3f:a8:80:f1:b1:33:b5:67:40:
bd:b4:7e:f0:cb:68:45:a2:4d:5c:c5:00:c0:0c:5b:
8c:68:5e:9b:e7:02:cf:ed:a9:bd:e5:c2:fe:f8:81:
fe:44:37:3b:27:74:8a:3b:38:20:1c:a3:43:12:9a:
b1:e4:67:9f:4c:4d:1e:50:dd:4a:b5:bd:86:f1:d2:
86:3c:0f:ee:ce:00:9d:60:17:68:0d:7f:6e:f3:54:
fd:6c:5d:55:e5:2f:dd:95:f1:89:4f:8c:02:0d:1b:
41:0d:e4:4b:57:77:d6:0b:c4:bf:f0:06:c1:c0:f0:
19:9c:1a:ed:7e:27:9a:ce:a5:ec:fa:58:9a:f8:95:
fd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3D:6A:24:B4:0D:4F:5A:9B:16:F6:07:2A:FD:34:EB:E4:05:9E:D4
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8d:40:c7:3e:cc:ad:e0:fc:58:83:11:d9:ce:fb:ee:40:82:
d7:b6:28:7a:e9:fe:99:76:41:af:79:42:78:05:c2:3b:66:02:
0a:7e:a1:bc:9b:98:45:dc:36:6a:4d:f0:6b:df:ea:3a:de:77:
3c:db:3b:a0:f7:72:9e:82:19:18:49:59:da:fe:eb:67:bd:a1:
72:dc:8d:c8:1d:1c:50:97:d3:8f:d0:0d:25:8e:c0:fb:d2:7a:
33:aa:b3:03:25:dc:5e:a0:b6:74:7d:de:f1:44:45:46:7b:67:
61:81:f3:58:83:dd:fa:89:84:05:5a:57:89:0f:67:9f:0c:69:
3a:52:af:86:b4:54:82:63:09:2c:87:9c:49:95:50:84:39:45:
ab:7e:a8:81:58:7d:b6:db:c9:59:6c:83:6e:1d:0f:d3:e6:c1:
b9:a8:e8:db:b6:e2:90:96:62:d7:dd:bd:32:94:6c:ff:84:dd:
3f:a2:05:42:c3:74:9a:73:a8:de:ee:bc:7f:6a:61:7c:64:2e:
4b:cb:a5:9c:e7:6d:94:9d:d4:ea:8b:18:99:82:c1:dc:24:9e:
31:1e:1b:c3:d9:70:5c:12:19:3d:1f:13:a0:4f:61:30:87:1a:
37:9c:cf:4f:2b:34:36:71:0a:94:6e:7f:e4:ea:3a:98:f9:39:
b6:61:2f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:52 2026 by rpki-client