Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
File: IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft (raw, json)
Hash identifier: FvYZSqp1gBg7mbGRiJyvUahCVnoZ3WshnsOzaBPUDVk=
Subject key identifier: CD:39:2A:61:C6:7F:7D:E4:BF:00:37:C5:51:42:C9:34:62:02:DB:98
Authority key identifier: 22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
Certificate issuer: /CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Certificate serial: 019D9962DCF11F089CD1CFFEDF4553E71AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
Manifest number: 0F3E
Signing time: Fri 17 Apr 2026 03:01:26 +0000
Manifest this update: Fri 17 Apr 2026 03:01:26 +0000
Manifest next update: Sat 18 Apr 2026 03:01:26 +0000
Files and hashes: 1: 9gPhrTVXXrWCqCjsm71By0RzzoI.roa (hash: 7vmmrUGhqUOQFhjNyWVb6vw1/SSr/8CDWs1hZa2ebfU=)
2: IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl (hash: 7CyLI53U8ixyborcZ2cVPudWc8h32Fh3rYE4gsUPubc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:dc:f1:1f:08:9c:d1:cf:fe:df:45:53:e7:1a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Validity
Not Before: Apr 17 03:01:26 2026 GMT
Not After : Apr 18 03:01:26 2026 GMT
Subject: CN=cd392a61c67f7de4bf0037c55142c9346202db98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:cf:8f:75:41:b9:2a:22:43:5a:69:85:44:
46:ce:c4:b0:4f:ec:fb:80:ef:69:a0:61:8b:f2:7c:
dc:60:e2:ff:8c:90:c0:b5:bc:be:bf:a9:f8:14:5c:
3a:ca:a5:5f:fb:97:cd:6d:26:8a:18:fb:8e:09:0a:
e5:85:c0:fa:2f:ab:fd:0f:7b:fd:4e:29:3e:e5:29:
68:e0:4f:bf:75:3d:8d:f1:76:ec:5a:a6:03:06:38:
a0:8b:9c:f5:a3:1b:ea:6f:81:17:35:ff:22:81:47:
3d:28:5e:4c:09:09:c7:df:53:eb:3c:77:79:3f:6b:
30:af:97:29:40:3f:8b:58:71:51:ed:8d:f8:50:0c:
20:6d:ab:72:e0:06:fd:9c:4c:3e:65:e1:6f:14:e7:
0a:80:12:73:ca:bd:2e:df:71:e6:3b:bc:b6:4d:cd:
aa:00:a2:44:6f:46:3a:f2:75:a9:f1:ca:79:66:89:
c6:ce:6f:f4:93:83:cf:df:78:57:61:66:90:e3:ee:
86:f5:24:29:2f:cc:31:d5:49:ab:c4:74:43:59:15:
73:bf:b9:59:9a:02:cf:5e:f3:30:21:ab:dc:cc:97:
21:05:e4:8c:66:cb:12:c0:af:bc:ba:72:47:a2:54:
a3:00:b9:31:20:e6:e5:40:f3:16:2e:14:f7:85:ef:
d9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:39:2A:61:C6:7F:7D:E4:BF:00:37:C5:51:42:C9:34:62:02:DB:98
X509v3 Authority Key Identifier:
keyid:22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:de:c8:25:ec:57:3c:37:7b:43:ee:53:41:3a:64:8a:b0:98:
62:95:d7:a9:c9:da:54:a8:1e:37:78:bc:b5:bc:41:9c:bd:f0:
27:36:45:01:0c:ba:db:cb:51:43:d3:2f:60:0e:39:66:b1:06:
da:9a:a0:5c:c4:d3:96:79:ee:73:9a:97:c9:3f:fd:f6:e2:5e:
8e:e9:9b:6c:3a:ca:d6:94:03:0c:b0:47:44:ef:c6:77:58:4c:
73:c8:d3:13:dd:96:4e:79:e9:fd:04:e1:ed:60:2b:be:1c:a7:
5b:6f:e9:b8:37:65:4c:1a:4b:2c:0d:22:14:70:63:45:c4:04:
f9:68:25:ec:82:d4:4f:37:79:12:4b:06:e4:a6:8a:da:0f:9c:
e3:3b:50:b6:74:f5:06:23:f5:e2:72:7b:0c:91:31:b7:cb:c0:
72:ae:c3:cf:f5:2b:b7:9e:78:b6:73:7a:e1:dd:63:80:87:61:
ba:a7:06:9c:eb:4e:1b:78:46:d1:d8:22:f8:da:02:a6:9d:43:
f4:a7:d8:b9:42:0a:ae:43:2b:7b:fd:a3:38:f0:01:81:d9:ac:
50:8a:fc:05:a1:2a:98:c4:c9:78:06:5c:56:ec:4b:b9:97:2d:
a2:d8:ee:fc:a5:b4:87:fd:fa:45:8b:59:c8:52:02:53:0c:c3:
40:65:22:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:43 2026 by rpki-client