Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
File: 9nKGX4FRC5RVt-qbyMfa15k9U5o.mft (raw, json)
Hash identifier: LMzbmmXhSStdBGKzkUx2ZEzl9p49AgaCqN2bo1Ddz4U=
Subject key identifier: 40:F3:7B:E9:B8:1F:8C:D2:97:6E:7B:F8:83:EE:89:45:52:71:A4:8E
Authority key identifier: F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
Certificate issuer: /CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Certificate serial: 019DA4544ABB65D33E0DC786C856CAA090EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
Manifest number: 0202
Signing time: Sun 19 Apr 2026 06:01:20 +0000
Manifest this update: Sun 19 Apr 2026 06:01:20 +0000
Manifest next update: Mon 20 Apr 2026 06:01:20 +0000
Files and hashes: 1: 9nKGX4FRC5RVt-qbyMfa15k9U5o.crl (hash: QN7F0GuJjaO+W+jr3U0R/C32+6NAfblNU0yEzwWA8sE=)
2: tbayT3vxpj9F6-hjVdEL1Ty6y0U.roa (hash: Ko/+YeSqgQQmx5PHs3jC/GfjdrV44JmmirXuegDNGWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:4a:bb:65:d3:3e:0d:c7:86:c8:56:ca:a0:90:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Validity
Not Before: Apr 19 06:01:20 2026 GMT
Not After : Apr 20 06:01:20 2026 GMT
Subject: CN=40f37be9b81f8cd2976e7bf883ee89455271a48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:95:60:10:ef:14:24:11:f9:c7:69:70:79:01:
55:8c:dc:99:a2:41:53:4a:b1:ce:8b:94:03:1c:22:
fa:58:e0:a0:2e:7d:f0:25:31:c6:9b:d0:23:a0:35:
d8:44:67:85:35:d0:31:be:99:b4:30:d8:a2:3f:99:
79:3c:e4:e9:b1:f2:74:33:91:68:57:84:af:91:cb:
96:17:e4:8f:19:a6:c8:06:1c:3a:29:93:39:d5:b2:
31:e3:0a:76:00:ae:cd:2a:cf:87:b3:f7:3a:c0:5e:
08:37:30:d9:c9:c5:3b:0e:15:ad:97:15:0d:bf:6d:
79:b7:04:4b:b9:06:02:2a:9a:b1:bf:8a:49:b3:e2:
e5:6f:1c:e7:22:8f:3d:f1:09:da:6b:50:df:66:17:
30:0d:97:da:6b:33:d8:91:86:eb:64:3e:c6:9f:48:
38:37:d9:c9:76:cb:73:bf:ae:5a:9c:c9:2c:07:8f:
c3:35:18:70:96:a5:f0:12:79:08:8d:07:4e:be:39:
d4:68:f8:45:1f:37:d5:fc:48:0f:6d:cb:ef:c9:8e:
2c:9c:e5:0c:8c:2a:c1:be:af:4c:2f:66:9c:ba:13:
96:97:42:e7:e5:dc:f0:9a:26:34:f4:71:0d:cb:5a:
87:e5:15:de:77:c9:86:5a:44:45:74:ea:d4:44:eb:
81:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F3:7B:E9:B8:1F:8C:D2:97:6E:7B:F8:83:EE:89:45:52:71:A4:8E
X509v3 Authority Key Identifier:
keyid:F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6e:7b:a7:d1:92:d0:04:23:d5:fc:8a:ad:18:d6:22:c3:04:
04:14:18:b9:07:fa:e3:03:b7:1f:89:37:00:be:a6:f8:47:47:
94:9e:48:1c:3c:37:e0:aa:41:fd:f3:99:2e:5a:3b:17:e6:d1:
40:1c:53:43:27:62:18:cb:4d:de:5b:c7:85:d9:b2:0a:88:4c:
a5:7b:88:6d:99:0e:4b:9b:55:7f:fe:10:21:a9:d3:2f:5b:ac:
9d:f1:b3:3e:d9:e4:05:9a:97:bb:b1:f0:88:2f:90:6c:81:f6:
8d:37:85:1d:9e:44:d8:f9:6a:35:76:01:74:7b:4f:24:3d:85:
ab:30:0b:34:a8:ec:36:87:54:d3:30:e4:a6:49:ce:55:3d:ce:
e3:08:dd:1e:bc:90:90:13:86:4c:6d:42:9e:3f:c4:d2:10:02:
95:b3:b2:ac:42:51:1c:f5:23:1a:aa:81:d6:8f:dd:7e:40:f7:
3b:0d:cd:39:3b:b6:e2:6c:5b:60:38:51:b3:8b:0a:d3:0e:21:
0e:a9:20:9a:70:07:41:a4:45:cb:f2:44:70:ba:fc:d3:8b:33:
84:91:9a:4b:99:52:d4:2c:d7:51:28:0f:eb:85:bf:86:80:77:
f0:55:31:e2:fc:56:9b:f5:12:c0:15:12:08:6a:4c:96:d3:f1:
b0:25:de:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:43:09 2026 by rpki-client