Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier: +uU9s7H7k8mCR0iqJc8IKnbjVKKZXzFLgJqqJlfJ1Mk=
Subject key identifier: 4F:E9:BE:B3:B1:C9:7E:6A:2D:57:9C:83:48:99:7E:22:A9:43:66:5C
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 019D69889BF1EEC042D210E94D638867E8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number: 169D
Signing time: Tue 07 Apr 2026 20:00:53 +0000
Manifest this update: Tue 07 Apr 2026 20:00:53 +0000
Manifest next update: Wed 08 Apr 2026 20:00:53 +0000
Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: NtesbncNaGxbtmjqa4DF+1poE3AnIsnzWtivSVsBJb4=)
2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:88:9b:f1:ee:c0:42:d2:10:e9:4d:63:88:67:e8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Apr 7 20:00:53 2026 GMT
Not After : Apr 8 20:00:53 2026 GMT
Subject: CN=4fe9beb3b1c97e6a2d579c8348997e22a943665c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:69:15:3b:c2:6e:90:2f:37:d5:a4:db:e2:
e3:9d:39:ef:81:ee:13:4c:1b:87:f4:ea:a2:52:37:
59:57:2a:94:dd:8e:68:d6:62:c4:4a:5a:c9:20:26:
e3:a1:0e:47:f9:48:8a:69:64:cc:44:dc:60:14:78:
60:54:09:81:98:6a:77:1c:ea:9d:79:09:65:f5:4f:
82:d0:6a:d8:47:91:6d:dd:6d:3a:9c:cd:64:b6:75:
3c:73:e8:fc:86:89:88:36:1f:23:01:8e:8f:d4:bf:
e5:37:d9:67:d0:c0:a2:4a:65:02:87:6a:f2:63:4c:
c1:0d:88:31:21:c4:9d:38:d6:63:00:20:11:a3:22:
1d:f1:65:61:1b:b4:26:4f:a1:2c:90:91:85:9d:a4:
89:5c:30:9f:91:05:b6:92:f3:44:8c:cf:27:ab:97:
19:2d:aa:b5:0f:5e:10:ed:4e:c1:66:cd:4c:8d:0d:
d3:e3:51:fe:4c:db:dc:8f:24:ad:6b:be:62:bd:d8:
cf:a5:b8:0e:9e:f2:f5:1d:ce:bf:d4:d9:03:8f:6c:
d8:43:b8:65:f3:96:36:69:ba:3e:b9:25:0c:32:a3:
39:24:29:d8:6f:03:33:3f:4a:ac:d3:25:9e:b1:47:
3a:3e:98:98:6b:51:20:4d:63:ce:75:78:16:3e:06:
33:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E9:BE:B3:B1:C9:7E:6A:2D:57:9C:83:48:99:7E:22:A9:43:66:5C
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c3:9a:cd:4e:20:f4:f4:09:72:d1:99:10:20:59:b2:51:f9:
0e:4e:7f:5e:06:47:d3:1e:a3:e6:80:93:09:72:9c:21:b4:58:
e5:96:78:4e:4d:f3:c2:38:7a:4b:9d:17:04:b7:18:82:00:d1:
1c:12:e2:3e:7a:ee:6c:26:c9:7b:98:8c:34:27:fa:6d:a9:5a:
b4:c2:6a:b5:fc:8c:5f:7c:39:91:18:e8:41:94:d9:81:c6:ff:
6d:8e:df:2a:15:e9:af:22:79:eb:78:83:75:35:b9:1e:be:92:
01:ba:a5:ed:50:e2:06:a4:32:39:b8:e0:e1:8a:20:3e:8f:4d:
24:07:90:20:97:c7:f6:4d:9e:6e:8c:97:a6:1e:ff:ef:d9:72:
90:29:1b:19:cf:20:4a:4e:e6:53:0e:c1:59:32:77:11:b7:d2:
48:6b:94:33:37:82:8b:b1:63:44:a9:01:eb:f6:4c:d6:b7:ac:
c0:c0:df:4f:07:db:45:ba:17:1f:b8:7e:5c:80:d1:37:01:b7:
3a:ff:fe:8f:6a:79:40:28:09:b0:e4:26:17:fd:5b:1b:70:6b:
06:1a:1c:51:20:81:e0:a9:42:02:f4:83:ab:f6:85:9d:66:7d:
f5:c9:01:9b:96:6f:85:64:07:19:09:91:b2:63:81:d7:db:db:
28:03:74:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 04:17:09 2026 by rpki-client