Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier: Ak8r/leIQTZ06aiZQoQvZFpDUHXw47L4IT/q+rz1VqY=
Subject key identifier: 0A:D0:C1:D1:3D:CE:FA:3F:31:C0:99:55:65:44:44:46:2D:03:9F:3C
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 019DDD31921CA7D3E00D37674F9B7AF67BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number: 18F9
Signing time: Thu 30 Apr 2026 07:01:46 +0000
Manifest this update: Thu 30 Apr 2026 07:01:46 +0000
Manifest next update: Fri 01 May 2026 07:01:46 +0000
Files and hashes: 1: _Hegz1VVkQxT8dMR4TPbzXidnGo.roa (hash: wCUCX/ENynsQM4yWKSMGJBVSMGdPMxR8qubJ5kFNMNc=)
2: rBaBGD3me64LECmMKa6dKRV8Yy0.roa (hash: K+BptzFvZJeOeMKzMOMTcV3487VC0j+Wsdpi6o13OCY=)
3: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: /n9jFFPF5ziA3gcsH9mpReJKzGI53WHKevPPZ+iblgI=)
4: vvTAvxdhx3NqRY7Mg6sIRjTavUM.asa (hash: B0okjC7PiUjc05N96TAWbJ82kV+SDnSQSBLWFMRkR/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:31:92:1c:a7:d3:e0:0d:37:67:4f:9b:7a:f6:7b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Apr 30 07:01:46 2026 GMT
Not After : May 1 07:01:46 2026 GMT
Subject: CN=0ad0c1d13dcefa3f31c09955654444462d039f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:fa:5b:f4:e8:89:76:59:7b:af:65:7a:ed:
1b:7c:18:40:1b:19:84:0c:60:9b:c6:2a:96:df:b8:
b6:3a:af:96:97:4f:23:d4:5f:77:8d:51:7b:e4:f7:
5a:7b:98:5c:59:3c:40:57:e1:12:7d:64:c7:df:30:
49:66:d7:5c:0e:ac:7a:a6:a6:05:7c:25:34:4e:0a:
48:9c:32:b9:6f:f1:e4:ae:c0:3a:4f:e9:b4:c4:02:
5b:79:eb:4b:ca:95:ac:4f:37:e5:61:14:66:b5:52:
75:65:03:25:1b:01:2d:b8:e6:76:49:f0:00:03:59:
8c:88:ea:3e:fd:c3:2e:cb:3d:99:96:0b:ac:ba:89:
6c:13:4e:bb:ba:8a:dc:b6:59:a0:6f:01:d8:2d:d4:
f8:13:88:8d:89:bd:8d:d6:78:ac:9c:8d:44:12:7d:
6a:83:4b:5c:a0:ad:80:78:7a:5e:a7:eb:f4:12:3e:
5b:a4:bd:b9:fa:67:52:47:4b:3c:aa:43:1c:59:2d:
bd:a6:eb:f5:7e:e8:bd:63:65:e5:10:b5:b8:40:66:
cc:fe:05:45:9d:d5:a6:85:a3:87:e0:06:e3:d3:91:
f7:d1:8d:76:04:c6:a0:72:ff:70:32:2d:aa:61:14:
c5:96:11:04:a7:ec:b8:71:7b:02:66:9a:ac:93:a9:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D0:C1:D1:3D:CE:FA:3F:31:C0:99:55:65:44:44:46:2D:03:9F:3C
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:54:76:40:fc:4e:7c:13:b4:43:00:3f:6d:15:e7:6d:07:3e:
39:6e:89:d9:ba:73:11:c2:20:7d:a0:f5:e9:22:4e:2a:03:47:
37:68:8a:15:cb:ea:21:c6:0e:95:c7:41:11:65:08:43:09:91:
17:73:18:a5:83:bf:8b:4b:61:68:6a:a9:b9:1c:63:20:71:57:
01:9c:56:ae:99:de:6c:35:d8:6d:aa:f0:e5:ab:d0:f1:d2:7e:
e5:b6:c1:55:6f:95:74:dd:5a:73:58:89:2f:aa:13:72:3b:7a:
36:d5:de:47:a9:88:aa:6f:83:53:3b:1f:93:64:b4:df:05:db:
b2:1b:55:01:b5:d9:1a:b3:97:ae:9e:65:a5:e5:18:17:55:64:
92:6c:7d:76:a6:d2:cf:1d:bd:ea:a7:1a:16:4b:de:9d:79:22:
0a:97:21:1f:71:65:9c:78:f1:57:82:45:82:45:54:b0:cd:c7:
df:8b:c1:d4:91:71:7b:34:2d:23:dd:e7:86:09:e8:dc:06:1d:
a9:17:c1:b5:b5:47:aa:2b:c1:55:88:b0:3c:46:0b:75:c3:b9:
47:56:06:c4:86:e4:ec:1b:d1:d2:c1:b5:9c:52:ad:df:38:7f:
52:ee:72:f4:30:3e:61:ed:c2:5f:31:fd:e7:d6:a5:a2:c9:45:
83:4e:a1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:00:22 2026 by rpki-client