Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier: OlglUOBOjCjtH5W01zSFqe+kaHJLRoK7OreYCc9YHo4=
Subject key identifier: 71:4E:3D:B4:CE:49:04:D0:8D:C1:B9:E8:DD:64:36:C5:1E:86:B2:D6
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer: /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial: 019D98500A0036F73739D0782D4D595EDB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number: 0CA2
Signing time: Thu 16 Apr 2026 22:01:15 +0000
Manifest this update: Thu 16 Apr 2026 22:01:15 +0000
Manifest next update: Fri 17 Apr 2026 22:01:15 +0000
Files and hashes: 1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: zorvUSc2dC/qsBgd7n43HNhtSBsh55ho4YnrFLWHg5w=)
2: sIunFd-UhDIY2he6578HnH9KYM4.roa (hash: cM+uL/KniFpxQyhA1SMW/C3f3nO1DxP+MeewVaQ/1Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:0a:00:36:f7:37:39:d0:78:2d:4d:59:5e:db:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Validity
Not Before: Apr 16 22:01:15 2026 GMT
Not After : Apr 17 22:01:15 2026 GMT
Subject: CN=714e3db4ce4904d08dc1b9e8dd6436c51e86b2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:4c:20:90:ec:f7:e1:7a:f7:ba:7b:7d:7b:
05:66:6d:9b:b9:64:ac:34:89:24:38:b2:95:88:3f:
9e:10:08:ce:1e:1e:90:31:6a:e6:c9:48:95:6c:dd:
89:2b:5a:7d:2f:ae:3f:52:df:47:c5:c9:78:be:40:
4e:f9:6c:7d:f5:45:ec:a4:5b:73:f4:73:86:8f:b0:
6a:ab:ff:57:d0:23:85:d7:4c:a2:ef:3d:7f:04:a3:
e8:1a:41:27:0d:03:dd:d9:e7:c3:1a:6c:35:25:d3:
54:be:76:c3:36:06:6d:6f:19:bb:8e:71:c9:bc:e0:
2f:4d:7f:56:e4:f4:0d:3a:8d:04:aa:a0:2b:bb:bb:
2b:06:f9:89:fe:84:fb:5b:d5:0d:27:b0:bb:5f:a1:
c8:3f:85:66:0a:91:8a:3f:29:29:22:37:29:da:31:
be:8d:4a:d8:8c:85:d6:d1:f2:8c:ab:3c:71:61:01:
5b:a5:6d:1d:bc:16:b9:57:ea:2b:fa:d3:dc:f3:4d:
68:2b:3b:60:7a:a6:75:62:b8:a7:6b:bc:69:07:8b:
75:dc:5a:d6:1e:84:2c:a3:19:d1:29:6c:ef:5c:d7:
08:83:80:b2:6d:1e:a9:e3:d5:90:7f:52:31:72:1d:
38:40:72:b7:58:cd:cc:82:c9:03:d4:b8:92:c9:76:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4E:3D:B4:CE:49:04:D0:8D:C1:B9:E8:DD:64:36:C5:1E:86:B2:D6
X509v3 Authority Key Identifier:
keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4c:6e:fd:50:dd:0a:e8:0b:3e:84:44:b0:09:fb:4e:16:64:
7e:b4:36:72:0c:f9:c6:69:5e:2d:bb:08:bd:d7:5a:af:fe:35:
9c:63:73:61:8a:85:72:24:ac:17:1e:02:1f:47:8a:9f:4b:b9:
83:12:17:14:23:39:f7:95:30:de:a2:6c:6e:c2:cc:98:b1:e7:
0b:e1:f6:2f:b2:7d:5d:c0:2a:19:d6:2e:84:f1:c0:b9:af:93:
84:be:86:3d:0a:bb:b1:99:58:04:48:7f:c5:88:5c:67:38:e2:
41:23:6f:84:a3:aa:15:1d:52:68:28:0e:a3:93:4d:35:20:38:
5b:58:b1:00:c5:6f:39:50:6c:72:12:74:4a:e5:88:6d:c0:33:
89:01:95:7d:2d:ec:54:f9:65:cb:7f:4f:45:66:08:04:17:8b:
9f:c8:db:3e:f7:be:fc:f2:7c:13:d6:02:61:11:d6:0b:fe:ab:
42:c0:b0:9d:09:a5:11:96:8f:c7:f1:c7:d8:1f:2b:a6:cb:cd:
1b:de:b4:b4:cf:10:a2:89:f8:4f:04:68:86:91:33:c5:2b:4c:
99:48:34:bc:e8:23:1a:42:12:a8:44:a4:b4:4f:c0:ef:92:dd:
c8:ee:3f:c7:e0:f3:7e:2c:ce:76:13:84:5e:aa:80:50:63:0c:
3d:f4:e4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:16 2026 by rpki-client