Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
File: 9ghG8hxWqFE9McFV3RmRl6P_x8A.mft (raw, json)
Hash identifier: BSI0JBKq/z/d+wnDdNad6Bs4UB3adzma3wyFOBqiomE=
Subject key identifier: D6:A2:52:BD:D9:93:D8:B4:06:2F:DB:FB:9D:C3:89:B2:6A:EE:59:F5
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 019DCAF3FB03DEB3F26C867026DAB0066CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
Manifest number: 18EE
Signing time: Sun 26 Apr 2026 18:01:20 +0000
Manifest this update: Sun 26 Apr 2026 18:01:20 +0000
Manifest next update: Mon 27 Apr 2026 18:01:20 +0000
Files and hashes: 1: 01ZkvNgWiFr2Xle1lgNBaYZj-X8.roa (hash: krV70iW09YOJwAzEmvYrpBPuNGdijVHEbPaa0HE/jsM=)
2: 9ghG8hxWqFE9McFV3RmRl6P_x8A.crl (hash: UQ4tVTrsxP2plb/mr5jsNgKYxo2WO7iYRcX9JEw1gAE=)
3: EboQ4nMXI48WwaHSZ15OkVHDyAI.roa (hash: SI3+ap2GxZORyWEjQakTcPIlhvRATeVhJTKd2WR2ixc=)
4: OYpCQdK7lNSRzIdlHHMMZTxhha0.roa (hash: hLxZ48pmO0NghpmoI7b6iic2RgENYFKFAU8pL6U0sxU=)
5: W5i7jKztK_F-7p2FjKY5IXoTWnk.roa (hash: iWzQhvpIXmrZ9hLNW88m8Yge4x5Lx0tZrSAtIzszE3o=)
6: YWQCWSs8yZA8QY3t_PyQQKGtK3k.asa (hash: S3rytmqhbZUvqszHeJsXQK+zRV9JSgSBvpP4kCVStOY=)
7: d9HTRu6eOaOYuXd9b7iVCEDddPQ.asa (hash: /iCij5LL4WBtNjhwsh6zV4snLZdM7CyjGzuB4jg4Zsg=)
8: xNSFqM7-0qNODofNrUEn4XQu4ME.roa (hash: raRCbVzrGPXhNpKnAVtwuinosdft0bdaQidRsp21paQ=)
9: xffyY7RBwYFFWdto18bFCIkAi6M.roa (hash: /wOHBg089w6pbrnt+9vXF4Wu2NJ5CjjnhokCvpVnwN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ca:f3:fb:03:de:b3:f2:6c:86:70:26:da:b0:06:6c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Apr 26 18:01:20 2026 GMT
Not After : Apr 27 18:01:20 2026 GMT
Subject: CN=d6a252bdd993d8b4062fdbfb9dc389b26aee59f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:61:64:ce:94:54:1b:a8:3f:f1:07:30:60:
61:b9:fa:d6:c1:e6:48:77:4a:68:54:fa:4c:50:84:
85:eb:9d:3a:6e:f1:80:5a:a6:96:84:0d:28:33:9a:
5c:41:39:2a:b1:c3:e8:b8:b0:ba:c4:2c:4d:ec:99:
b3:42:16:44:fb:4e:b0:2c:39:33:39:9f:04:57:4e:
d8:b4:8f:d5:24:ad:b2:28:fa:21:8d:18:c5:bb:67:
20:2f:e0:d8:ad:25:48:a4:a7:21:b9:3c:9b:34:55:
9b:c0:8b:48:16:1b:e2:d4:f4:0c:83:08:77:c2:2a:
71:a3:d9:b9:59:86:31:af:1e:48:a2:ec:f2:f8:c1:
74:ca:02:71:a4:24:35:8d:00:73:99:e5:53:71:86:
23:5e:9d:e1:a1:eb:54:71:19:35:79:e4:f0:9e:c8:
b5:94:c8:8c:86:e7:0f:94:5e:ad:ed:1e:66:a5:23:
0f:e5:55:a5:b8:4f:98:ad:31:85:9e:d9:bc:3b:30:
e1:1f:78:c5:09:0f:d9:c0:fd:ab:89:e0:f4:b9:d6:
a9:c6:11:9b:b7:58:98:d8:8a:f5:1c:c3:77:9b:cf:
6e:6f:e8:6a:13:41:f1:34:d9:53:6f:de:2a:16:6f:
57:b6:b6:57:3f:88:92:aa:54:ca:d6:c6:5e:9e:bd:
21:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A2:52:BD:D9:93:D8:B4:06:2F:DB:FB:9D:C3:89:B2:6A:EE:59:F5
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f6:70:eb:67:50:c1:61:d9:9d:ee:87:60:b1:2e:fb:04:44:
11:c9:2e:1b:4e:e5:82:de:f7:00:5e:92:c8:58:28:77:25:b4:
f5:b4:4a:ab:72:7f:7b:67:2f:2c:d0:98:51:59:e6:85:5b:3c:
a8:10:a1:39:41:0c:5a:0f:77:e0:0a:05:29:5a:3f:b6:24:94:
29:76:c3:16:8e:48:19:a0:e6:e9:82:9d:c1:48:fd:83:da:38:
08:c0:f2:01:da:e6:68:b8:ee:d0:a1:18:68:92:37:b4:e9:c4:
2e:6f:88:69:14:77:e7:4f:27:74:02:e4:e8:34:84:6b:0c:8c:
36:6e:aa:7c:45:1a:61:9f:80:e5:4e:08:d1:9f:2d:e7:db:fb:
bf:9a:c1:f1:02:01:c5:0f:d5:74:b1:81:76:70:96:1e:aa:7a:
52:d8:ee:c5:00:d0:fb:15:76:45:48:84:43:9d:b9:66:a4:88:
8a:68:4e:d5:79:4a:8c:b8:07:c5:8e:3d:0a:a9:31:78:9f:9d:
e8:1b:45:92:31:b8:33:98:3f:f0:5e:68:49:88:ef:a9:cd:33:
42:f1:31:c0:0c:42:26:94:aa:f9:80:8e:03:aa:30:64:3f:39:
c7:0a:c1:8f:70:bd:18:a2:97:eb:55:69:f6:c3:26:e0:29:a7:
78:78:57:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:17:24 2026 by rpki-client