Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: oAhXTNSHsseaRRLiQrqlrDXnWYJFGAAkYnVQ4C6RpDU=
Subject key identifier: F0:E5:42:C5:2F:3A:F1:B1:23:C8:1B:3A:01:30:42:15:9F:3F:D8:66
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 019D9962FF51A14BAD9650B7E041292360CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 0FCF
Signing time: Fri 17 Apr 2026 03:01:35 +0000
Manifest this update: Fri 17 Apr 2026 03:01:35 +0000
Manifest next update: Sat 18 Apr 2026 03:01:35 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: H/xwx5GB1FtriAWDF6/oprLmuKO3rAlsSf0akeJXqBg=)
2: GdXLtakb-VVZb4sIMxasJO3C9e0.roa (hash: lYew3AcxBQCaUjqVtA2l1sMtRC1UlXtpZ4kuSqJbBQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ff:51:a1:4b:ad:96:50:b7:e0:41:29:23:60:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Apr 17 03:01:35 2026 GMT
Not After : Apr 18 03:01:35 2026 GMT
Subject: CN=f0e542c52f3af1b123c81b3a013042159f3fd866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:1b:49:77:d6:91:a4:0b:4c:04:6f:72:b6:
1b:d7:d6:41:af:8a:71:c2:83:4e:f3:05:70:f1:4d:
71:03:3b:5c:23:8d:4c:3e:55:75:ab:80:a9:8b:aa:
48:38:18:19:52:5f:f2:ee:1b:4f:fc:a2:16:f6:fc:
51:a4:f5:df:76:91:ce:90:d2:d6:28:b8:c8:08:ef:
a3:9b:71:48:fa:8e:47:b2:f2:43:7a:10:11:4b:12:
f0:d0:13:1f:47:54:a7:bb:4c:fc:c0:01:c1:f4:54:
87:56:a7:5b:54:a7:b5:4a:a8:6f:2d:29:81:7a:95:
7e:56:a0:5b:a1:d1:17:ef:fc:33:b8:1b:1b:a0:e1:
70:f1:83:38:7f:e7:47:87:c2:e9:e2:b1:26:96:af:
3f:1c:8e:45:7d:5d:ec:dc:20:3d:a7:92:4b:4e:93:
7a:92:e3:fc:70:ae:47:9b:a6:55:d1:37:0a:45:1a:
61:71:e6:41:27:0e:23:31:94:ec:42:e3:7b:61:24:
86:ab:60:67:d0:a7:1b:37:9e:92:fe:7d:54:c2:94:
0c:bd:68:c7:97:40:4d:54:89:5a:89:5c:71:d3:a0:
fa:df:11:53:d6:03:67:0b:c9:c2:2a:ba:65:dd:0c:
2a:25:49:da:c2:5d:e2:45:73:80:ac:c3:c3:41:50:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E5:42:C5:2F:3A:F1:B1:23:C8:1B:3A:01:30:42:15:9F:3F:D8:66
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:22:b0:3e:a0:1c:b6:95:f6:57:ba:0f:67:fb:be:1b:f8:d9:
a6:80:41:51:40:08:2e:4c:c1:1c:f0:27:01:71:87:ff:4c:d8:
87:86:da:be:e0:a9:26:98:93:97:42:16:bc:9b:7e:a0:3d:1f:
6c:c0:65:c3:ab:e2:42:09:69:59:16:ea:56:22:5e:7f:45:2d:
13:27:93:ef:aa:ae:1c:f3:73:dc:3c:95:c0:c3:ad:bd:d2:ce:
32:19:6f:3f:8d:10:b2:d2:cf:22:6c:70:a0:c3:e8:fb:59:25:
24:d6:45:22:63:7c:08:3a:51:45:a5:ca:ba:29:f2:c9:42:ac:
a5:50:02:d3:24:12:93:a3:2c:fc:95:bf:29:07:a0:a9:31:65:
a4:f0:a7:d2:78:dd:c6:59:cb:cc:f1:cd:1a:9b:54:6d:eb:ae:
e6:2f:58:2d:c6:36:e1:e1:ed:b3:44:5e:81:4e:6e:06:c8:db:
dd:45:2a:77:29:c0:70:f3:6b:9f:1d:17:40:95:cb:64:14:e7:
60:63:42:d0:ae:6c:7c:ed:a8:98:26:1e:62:77:99:b9:b6:d0:
41:8d:ba:40:e9:f5:4e:19:0d:57:cf:73:e0:fd:bc:8b:ea:1e:
ad:d3:d0:ba:ff:e6:9a:0e:c7:0d:09:36:79:71:7e:ff:17:16:
ac:55:95:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:04 2026 by rpki-client