Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier: L1I4zGS2TGwxyox6j7nsXbpZONMij2cVNsrM6pugbgg=
Subject key identifier: 16:F0:4A:DA:8B:51:71:2C:2B:01:1A:A1:AB:19:5A:61:30:57:94:C9
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 019DAD2066BE6CE4AACA96FBC7818574F120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number: 16C0
Signing time: Mon 20 Apr 2026 23:01:14 +0000
Manifest this update: Mon 20 Apr 2026 23:01:14 +0000
Manifest next update: Tue 21 Apr 2026 23:01:14 +0000
Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: nnYNQqC2pRO0XY6j4gm8YeUr6jji355eNLolDjKaAWU=)
2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ad:20:66:be:6c:e4:aa:ca:96:fb:c7:81:85:74:f1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Apr 20 23:01:14 2026 GMT
Not After : Apr 21 23:01:14 2026 GMT
Subject: CN=16f04ada8b51712c2b011aa1ab195a61305794c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:8f:ec:d2:01:be:2c:9b:a7:54:48:40:10:
5e:8b:f3:fa:08:bb:a8:42:2b:49:46:58:1a:97:23:
de:d8:61:55:8e:66:3a:cd:fb:8f:0b:f8:92:50:d4:
b5:3c:d9:27:89:78:65:d6:54:f4:d8:d6:a6:d4:56:
82:35:6e:f2:ba:c4:7a:ff:da:78:d6:4d:39:0e:d8:
42:f3:e8:fd:ee:48:6e:9b:e8:66:1c:77:84:63:6c:
05:1a:e3:c0:ab:69:10:3c:66:33:82:f6:85:52:de:
cc:da:2f:45:8d:56:d6:88:cd:35:be:03:3b:b0:a0:
43:ba:fc:14:80:b8:03:88:3b:14:da:c9:9e:3e:fc:
26:98:f3:5e:a9:ff:2f:ee:bc:fb:0b:64:79:f9:e1:
04:e2:c5:54:7c:22:be:cc:09:f8:b3:e7:77:f9:1c:
cd:82:27:b4:ef:cd:8b:90:50:be:ae:82:c3:a6:c0:
60:56:76:68:4a:2d:ec:6b:c4:b5:a0:c5:23:33:78:
9c:d4:88:88:a6:49:db:bc:c8:24:a8:8e:8a:98:7f:
0b:25:e6:9f:9f:7b:bc:72:14:21:78:ed:07:ea:da:
3d:cb:31:5a:66:9d:db:9f:52:a1:ae:57:48:53:d5:
59:02:c3:72:c5:61:4d:ef:01:bc:cc:3d:82:84:ec:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F0:4A:DA:8B:51:71:2C:2B:01:1A:A1:AB:19:5A:61:30:57:94:C9
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:61:c0:73:9f:b5:50:04:d9:29:9a:86:0f:ca:a2:0a:33:6d:
ad:4c:25:da:20:a1:94:45:80:2e:cc:bd:bc:59:64:9e:c2:88:
84:f5:0d:74:85:38:ed:af:74:09:df:60:b4:13:c7:b0:04:6b:
68:ef:04:f0:eb:d6:26:f4:5e:01:25:d4:4b:44:cb:a6:83:cf:
a1:7e:72:4e:97:be:48:14:ac:06:3b:29:33:3e:ed:09:bf:2a:
f7:a9:b0:8e:d6:d5:17:27:87:9b:14:07:dc:b8:34:53:40:0a:
32:0d:5a:c2:3b:64:f0:cc:bd:19:f7:65:a2:a6:42:6e:e4:3d:
95:b8:01:cb:4c:36:1b:97:00:16:0a:23:f4:8b:d7:51:42:bc:
17:3b:da:ed:12:d4:c0:36:da:79:e1:8f:8e:60:b6:73:76:c5:
f1:e3:01:71:57:e9:d1:21:0b:91:0b:57:69:46:d4:a7:1e:b1:
aa:23:fe:5e:b1:33:42:c6:e4:48:7d:65:1e:21:76:a5:24:e7:
ab:4a:fd:9e:52:1a:d3:12:48:17:23:8e:ed:e5:0b:1b:73:10:
e2:3a:24:a0:a2:5e:51:f6:e0:07:71:66:63:7e:f4:a9:c5:d3:
5e:fb:fe:5f:3e:63:62:de:d3:28:82:30:b1:d6:25:67:f4:25:
d7:08:17:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 06:55:33 2026 by rpki-client