Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: OEGzcbUtgbeoCWRrSw9YRP0ItK+LlPhI5iIz8Xh6AMA=
Subject key identifier: 6C:55:9C:4C:61:4A:45:E7:65:58:08:25:F9:F5:0D:C5:6A:EE:76:C3
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 019DB0C58D5E74A087066AB35948C290BCFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 18E7
Signing time: Tue 21 Apr 2026 16:00:29 +0000
Manifest this update: Tue 21 Apr 2026 16:00:29 +0000
Manifest next update: Wed 22 Apr 2026 16:00:29 +0000
Files and hashes: 1: 1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa (hash: YWmW+qHhsLN+csw32WYbNSaULT6cEK/L9LG3DcTcfQU=)
2: 2J_enL0mq_HbBFj1p_d_qyIXNks.roa (hash: VBLGjSkxg5gn4s0UWv4znpc4mtgeavbmnZnDA3LFAO4=)
3: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: s6z7P4a7vF44xPLdCqwBmtSy/3YDu42c6cXIH3/rfAE=)
4: ccMww59mDMVNflZi8lXAUqrYmZg.roa (hash: 18ezwr9Nu+qt8aBJCOh1ezF1Utw1YHeqhJCFEOUAeyw=)
5: hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa (hash: XVLkwzCBrdtM+FxDVfDBn6TZaFDwiuTAGFHK/fSzOJ8=)
6: hhmzN128wuDiRBwUCjO9oZf28Hc.roa (hash: qKwy9aO/5eDeYbjJqOLC4283+7+rAN2JwgIHL3S+j7c=)
7: wRiMz6n-wmWUoLFkxFSSP8HrU5E.roa (hash: gQ8uNZeHK/kIii6trEwXDL6+4QDEEh4ElPmKWLgPx14=)
8: wpCDaZ8CmRmp29ikyeMppBLQrkw.roa (hash: Mky9v4umrVvEcx+IGCTXn8o9SgJSH+g15pwUCUI4mwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:c5:8d:5e:74:a0:87:06:6a:b3:59:48:c2:90:bc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Apr 21 16:00:29 2026 GMT
Not After : Apr 22 16:00:29 2026 GMT
Subject: CN=6c559c4c614a45e765580825f9f50dc56aee76c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:67:99:98:27:02:12:65:cb:27:a7:e0:b5:
0a:a2:06:9d:fa:97:30:ef:61:7f:92:8d:28:ba:b8:
a8:88:61:e7:65:5b:61:20:66:c1:00:9a:5e:78:a8:
0c:b9:56:0a:e2:39:77:2d:93:21:8e:e5:89:0b:59:
d8:2b:38:8a:88:7c:0d:63:87:17:15:34:8d:c2:45:
04:55:e1:c5:a2:3d:f8:d7:80:cb:fe:08:26:45:02:
86:c2:00:31:89:09:95:ee:00:04:fa:2d:92:0d:ee:
af:69:ab:8a:88:b9:ed:29:26:af:a2:7a:b8:c8:b7:
e3:75:0e:a4:9b:2d:ee:b6:de:cd:5f:04:78:95:ac:
07:8e:5b:b8:56:5a:4c:a1:78:9f:3a:d9:cd:95:c4:
3b:81:23:4f:bb:88:a8:62:cb:b3:8f:4f:36:90:25:
8d:b7:7e:59:42:f8:2a:d3:81:0e:ef:ba:54:29:57:
03:06:97:02:c5:06:e4:65:42:c8:f8:78:09:64:4c:
8c:b9:c7:c8:77:07:ec:2f:7c:a0:c7:7f:fc:de:55:
ca:c9:51:da:c9:ac:e0:b3:56:6b:ee:dd:da:49:a9:
87:e1:0f:ec:38:ec:47:b5:fd:4d:d5:84:8c:1e:12:
b2:8b:29:29:23:bf:4a:15:9a:3e:20:1b:f2:a3:cb:
82:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:55:9C:4C:61:4A:45:E7:65:58:08:25:F9:F5:0D:C5:6A:EE:76:C3
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:78:50:25:83:06:05:45:7d:8b:28:34:ae:cd:00:f0:04:1e:
84:10:6e:f7:d0:75:40:cd:1c:dc:a4:ff:21:2b:b8:ca:e2:dc:
60:03:d3:79:a5:12:a5:df:82:6a:1b:bd:b1:7f:16:39:3c:85:
1e:f0:0a:7b:92:4e:8e:a3:f6:68:22:6e:60:fa:1d:b7:48:62:
5e:3f:a5:01:f5:b7:97:a3:c6:c6:dd:fc:5b:09:43:a6:d9:b2:
d3:46:aa:3d:bb:85:74:a3:90:fd:72:ca:04:8a:18:8b:5e:ca:
1a:f6:c9:e7:6d:49:4b:07:a3:f6:b6:9e:0e:d8:ae:52:b2:c9:
cc:4d:b1:90:93:16:6e:76:4b:66:b6:59:dc:20:86:9b:bd:75:
4f:04:bd:66:65:b8:dc:02:28:b0:39:11:87:40:78:61:56:1a:
cf:be:a6:35:60:bb:17:ce:6d:60:ee:95:e0:44:4b:71:a5:5c:
3c:9f:a6:0a:39:a1:a2:8d:f1:22:61:68:41:d8:92:01:9d:e7:
ae:9e:bf:04:cb:a8:6f:20:27:eb:00:07:b2:85:5b:07:d8:05:
56:03:7e:8a:4f:c1:60:25:a9:ae:74:e7:92:4c:94:17:2d:6b:
61:0c:c1:4a:c3:9d:31:60:5d:f9:e5:29:3e:7c:b9:a8:3c:f7:
a7:87:4a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:13:50 2026 by rpki-client