Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
File: 9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json)
Hash identifier: kwGNXNGfHj9fi8cYXIt3Xn+bZGZKelHESn1pfLj2Tvs=
Subject key identifier: F4:F4:7B:03:0D:9A:87:46:BA:1F:94:36:5F:75:97:CF:34:7B:70:69
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Certificate issuer: /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial: 019DCED00FDF9EFF503C2569592CA8DFC22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
Manifest number: 03E3
Signing time: Mon 27 Apr 2026 12:00:35 +0000
Manifest this update: Mon 27 Apr 2026 12:00:35 +0000
Manifest next update: Tue 28 Apr 2026 12:00:35 +0000
Files and hashes: 1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: EwCo5sSRR/snYAvJn68WEv98SG7XHH/AFODQlapx6AQ=)
2: wxYzOEFFE7ZvQ_jUpzfcf7qWdJY.roa (hash: zi/D1IuQaIKBqfBUtIU/P0ojOtlc8op63UfckXGc4cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:0f:df:9e:ff:50:3c:25:69:59:2c:a8:df:c2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Validity
Not Before: Apr 27 12:00:35 2026 GMT
Not After : Apr 28 12:00:35 2026 GMT
Subject: CN=f4f47b030d9a8746ba1f94365f7597cf347b7069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:80:ee:48:3f:a5:f9:a0:28:d7:8a:17:41:35:
8d:e1:62:dc:2b:fe:7e:4a:8c:80:5e:99:aa:dd:fa:
f5:7c:e7:7a:cb:c7:c8:b3:f0:77:9f:46:3b:40:4d:
96:ae:44:52:d9:d5:40:fe:e0:db:13:47:47:6c:f9:
2b:ff:d2:e8:40:c1:f4:15:9c:4a:01:dd:bb:34:5f:
b3:a6:48:0f:d0:8f:d9:09:15:12:6f:04:75:2b:1b:
97:3a:a9:5d:4b:90:b5:b4:dc:93:77:d3:4b:4a:6e:
ee:31:43:59:c0:2f:29:b3:e2:79:2d:8f:ef:b5:4a:
b1:09:9d:b2:0d:72:b9:bd:b7:08:c2:9a:00:7c:ef:
93:75:57:11:41:16:7e:c9:26:34:26:b4:83:b4:50:
71:6e:9c:4b:f4:74:b2:64:08:38:23:b6:27:0b:b6:
d9:14:ce:57:41:7c:8e:da:fe:ab:f5:5e:50:00:9b:
b6:55:29:8d:97:76:f0:f1:7a:f6:5d:06:a1:ff:39:
eb:c5:bf:e7:ee:01:a2:1f:08:63:8f:49:1e:3e:3b:
c8:08:45:e5:18:31:37:f3:1b:d0:cc:0f:ee:06:9d:
ba:04:1a:68:13:32:a2:8d:fc:4c:e0:0c:9f:f5:d4:
1b:54:f5:af:86:4a:35:c0:b0:6b:fc:2a:5c:ee:41:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F4:7B:03:0D:9A:87:46:BA:1F:94:36:5F:75:97:CF:34:7B:70:69
X509v3 Authority Key Identifier:
keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:cd:9b:c1:13:14:68:b9:01:e1:80:10:fb:7a:89:96:5f:26:
53:df:0d:af:54:47:df:a5:d1:ce:1b:8b:f8:dd:a6:2b:71:7c:
84:73:f2:bb:f1:4b:7c:48:99:5d:09:58:4f:80:fc:6a:aa:78:
5c:fa:de:e4:cc:66:d3:79:15:8a:79:7f:33:76:63:a6:bc:b0:
70:d0:32:0d:40:6b:6a:f8:66:8d:de:85:01:2b:eb:34:87:bc:
55:0f:36:dd:9d:09:02:86:75:a4:7e:db:4b:57:71:cd:0c:90:
06:e0:ab:1b:13:d3:86:45:d5:da:4c:28:10:60:41:6f:10:11:
14:49:be:f3:73:1d:97:5f:4f:48:5c:6d:8a:01:38:46:97:92:
ed:62:02:53:8a:65:b0:1f:bf:36:dc:8c:61:d0:5a:2f:a2:e2:
c7:9b:6b:8c:da:c5:8f:57:62:d6:cb:64:77:5d:a6:3d:76:a4:
3c:d8:bd:f0:eb:31:66:39:ff:4b:cd:fa:4c:bf:bf:4c:9a:f1:
9d:0f:24:5f:57:ef:c0:f1:bd:49:5d:0b:33:0c:e4:7c:6f:f3:
6d:d7:4f:c7:d9:6a:bd:75:c6:f0:61:38:e3:cc:0b:46:49:6b:
2e:97:df:c6:ff:16:c7:ef:a6:c4:84:64:27:09:a6:46:05:16:
41:43:4f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:50 2026 by rpki-client