Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
File: 9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json)
Hash identifier: Pl/cposJ27JGfYQmX5Xil2m7f9sfpSaUXqMkRjrV4Yc=
Subject key identifier: D5:0A:E5:0C:D0:D5:95:65:1B:99:35:90:8B:E9:C1:83:99:0E:38:76
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial: 019DA4F926BB9D2A5F5E82DFBCB45661A842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
Manifest number: 0AB7
Signing time: Sun 19 Apr 2026 09:01:24 +0000
Manifest this update: Sun 19 Apr 2026 09:01:24 +0000
Manifest next update: Mon 20 Apr 2026 09:01:24 +0000
Files and hashes: 1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: EYdQ1bN3hhJcJCwXqcacF2x9sw9XUIT9AGumamC7+X8=)
2: DASQ8NU1yHanG6tnp7TCLgdJSB8.roa (hash: W/n6G98Zq5gjZZSilKHseC4jqvetgfkl6TxxF14gb54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:26:bb:9d:2a:5f:5e:82:df:bc:b4:56:61:a8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Validity
Not Before: Apr 19 09:01:24 2026 GMT
Not After : Apr 20 09:01:24 2026 GMT
Subject: CN=d50ae50cd0d595651b9935908be9c183990e3876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:59:50:32:1c:b8:3a:7d:6f:ce:d4:b2:2c:
a7:cc:28:7e:98:7a:2f:af:28:05:39:d0:5c:c8:6a:
ef:ef:a0:7f:cb:cd:e0:05:e9:77:51:cf:66:1f:26:
47:2c:76:11:a4:06:80:45:8a:dc:86:63:7d:f3:63:
55:0a:43:10:d0:0f:be:a5:b0:c7:8c:06:63:80:af:
38:ea:db:e8:a4:60:b3:2c:10:0a:62:e2:36:e9:3b:
c1:79:3f:0f:9e:e0:83:73:d7:d4:93:6e:c4:38:50:
16:ac:74:d8:cd:c8:af:5f:5a:16:75:9a:a4:4b:c4:
d2:57:ba:d4:f2:19:af:1e:44:dc:1c:ad:2d:e8:4a:
ab:29:a3:4f:b8:d9:7d:de:98:95:f5:f2:34:40:48:
6d:7a:39:bf:40:7c:1c:6e:fe:8b:9d:4c:65:ab:cc:
4f:6a:27:12:5d:23:9d:a1:6b:5b:e1:ad:c2:ce:36:
1c:ab:d0:f8:8a:f9:b1:40:1e:d7:9b:6f:eb:a7:f7:
51:ef:e1:6e:8b:c6:5c:44:00:4d:c8:41:97:60:e5:
b7:ad:49:41:a1:e8:9d:f5:72:b9:d7:48:de:40:b2:
d1:33:fe:da:4a:5c:ae:0c:f1:78:01:4b:1f:95:d6:
6f:e4:e3:53:de:dc:6b:d7:13:92:0c:b9:02:d4:8c:
b6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0A:E5:0C:D0:D5:95:65:1B:99:35:90:8B:E9:C1:83:99:0E:38:76
X509v3 Authority Key Identifier:
keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c6:ab:38:13:90:b5:56:2b:12:00:03:56:1a:6a:b6:7c:1b:
32:2d:d9:02:bf:65:2b:d1:21:15:c3:93:3e:e6:81:f7:09:0a:
a8:79:33:8a:49:c0:2f:3b:e8:08:1d:75:fa:8e:ba:55:35:5e:
fb:de:c9:a7:d1:06:3b:99:98:e4:e0:b8:da:34:79:ca:7c:c6:
4c:0d:b3:6e:78:fe:a2:56:bc:76:be:1e:a5:30:2e:bd:c0:c9:
c8:de:94:83:51:20:fe:de:75:fd:f3:9c:d4:32:3a:f9:3b:3e:
bb:05:be:1e:b1:e7:1b:dc:ce:6c:f5:9b:90:64:4b:c7:59:7d:
4b:90:f8:87:43:52:3b:57:1e:72:da:1f:65:0c:1c:f6:38:99:
43:42:e0:a0:e7:14:77:fc:8b:d2:88:a4:09:40:97:cf:3a:7e:
a6:fd:4b:ef:9f:7a:91:7d:cf:29:79:6b:ff:a4:54:cf:6f:bd:
3d:9e:40:10:a6:58:bc:26:d6:91:ae:82:33:78:29:76:82:2e:
57:86:65:1e:f2:42:c1:e2:61:57:7c:51:bb:f2:03:16:cf:08:
72:be:e4:2c:5b:0e:a4:3e:18:ed:dd:a3:ac:b9:4b:a7:80:d0:
54:c8:67:51:5d:52:d9:7f:7a:ce:97:2e:77:b4:a7:3d:c5:65:
a9:08:de:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:04:50 2026 by rpki-client