Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier: /tME5/zWmny3956dq7tuHabQ6LyJ+cZViULAv9P5kSQ=
Subject key identifier: 58:2C:30:0A:BE:DC:7A:C3:50:2B:F6:FD:0F:BE:B6:F3:2C:A3:28:DF
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 019DB2EB8A754149493EADDD04105C10F1B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number: 16C3
Signing time: Wed 22 Apr 2026 02:01:14 +0000
Manifest this update: Wed 22 Apr 2026 02:01:14 +0000
Manifest next update: Thu 23 Apr 2026 02:01:14 +0000
Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: R+UATIAuAECaK3ms303ZoqiPhEq1/UnAg+mraYfk+K8=)
2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:eb:8a:75:41:49:49:3e:ad:dd:04:10:5c:10:f1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Apr 22 02:01:14 2026 GMT
Not After : Apr 23 02:01:14 2026 GMT
Subject: CN=582c300abedc7ac3502bf6fd0fbeb6f32ca328df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:9d:d5:fa:34:03:9e:d3:09:ee:7e:7c:ed:
7e:01:61:db:5c:8c:a7:73:de:a7:2a:8f:e3:c8:a5:
c0:4d:9d:e7:32:53:72:d6:b3:22:14:68:97:cf:bf:
df:5a:51:7e:ba:2b:f5:56:b6:10:2a:b7:2f:b1:fe:
47:67:71:76:6c:33:fb:42:73:9c:fe:36:8c:ca:c1:
1a:f3:15:49:e8:9f:91:e8:73:4d:6d:8a:3c:f2:ff:
25:3f:95:de:b1:88:51:5a:ed:1c:ef:0b:f6:fa:7d:
fc:47:83:8e:66:05:26:e6:14:1e:9f:43:7a:da:64:
39:c5:1e:b2:5c:79:36:4d:ad:0e:e3:0f:a8:9a:86:
07:11:43:89:82:50:d8:c0:8f:fa:46:b3:86:75:d8:
f0:b0:71:2b:c8:78:e6:cb:eb:74:90:27:aa:13:b8:
43:23:9a:96:ab:67:d3:43:8e:29:c8:12:2b:75:39:
1f:97:73:34:a0:03:88:42:15:16:03:22:56:df:6f:
0b:80:fd:df:70:ef:ed:c5:7d:f5:6b:45:98:c8:bb:
6b:98:3a:f6:42:4f:a2:e4:db:46:22:ea:82:ad:b0:
bf:d7:9c:df:c3:90:3d:c4:8a:98:53:ff:a2:e1:03:
fe:1f:55:d3:f2:bf:c5:54:6b:fe:c2:59:7d:4c:10:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2C:30:0A:BE:DC:7A:C3:50:2B:F6:FD:0F:BE:B6:F3:2C:A3:28:DF
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ce:63:b7:00:ec:33:02:58:da:49:8f:14:fc:0c:bf:5c:eb:
2f:16:20:8c:d4:16:7a:5f:42:36:93:16:98:19:be:f7:b5:3c:
18:da:6c:63:ab:b2:fa:7b:04:0e:aa:2c:a9:a9:46:2a:c2:4e:
54:94:08:e3:e1:ac:2a:74:56:59:52:8f:cc:5a:40:e7:14:f5:
56:fc:84:6b:fa:89:40:76:87:93:fa:bd:a8:d4:72:85:71:43:
3b:b5:22:c2:fe:23:a7:a9:89:31:41:a0:43:89:fa:b4:e2:3f:
16:69:20:e5:99:75:d4:ed:62:78:7c:0a:79:ef:de:de:89:2e:
3f:72:66:b7:d7:07:3f:d1:1a:d9:e2:0f:47:38:9a:55:d1:87:
6c:01:14:9c:32:4d:4e:ea:36:37:9b:c4:95:46:58:05:1e:82:
16:62:cb:a6:9d:f4:92:8c:7a:19:ff:87:ce:68:db:26:53:f2:
73:08:3d:4f:d8:95:68:3f:c2:8d:67:10:2c:89:8f:ea:b4:25:
71:c3:45:6a:fe:9e:81:54:a6:37:9c:e7:58:0e:10:af:22:0a:
15:98:e7:87:46:f9:20:a5:56:48:1e:e4:19:72:59:c0:25:bd:
89:2f:3d:51:39:0a:a5:d3:de:1c:0c:ed:cd:c2:2b:4f:ed:3f:
43:82:a6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:26:52 2026 by rpki-client