
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier: g3pzJMqjIJPqj1QC464d6qFVo+xI2dNUVdIUZWJreGo=
Subject key identifier: C3:7D:BF:EF:3B:51:67:AB:0A:51:E5:47:77:25:DA:36:D9:0F:E0:91
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 019DB0FD2EEDACD8A68F0D309AE97FAAECF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number: 18B7
Signing time: Tue 21 Apr 2026 17:01:15 +0000
Manifest this update: Tue 21 Apr 2026 17:01:15 +0000
Manifest next update: Wed 22 Apr 2026 17:01:15 +0000
Files and hashes: 1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: Vzv8vp/dKbhNg6/n0nvNWb8bK4gPX/gr2nGn61MzwY8=)
2: T9rz93pJrKV5HZUDPNt-auvowcY.roa (hash: Y2TAvhfs7O4nAyyTTSyBt46eHZbCQZ13ePvrQ4ueMNo=)
3: rtoaF4eNoCfBlVaGIH3lILCxwDw.roa (hash: uP2Cltj1neggz9Zc7r+kubVviQuOHIeAbOo973WtReI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:fd:2e:ed:ac:d8:a6:8f:0d:30:9a:e9:7f:aa:ec:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Apr 21 17:01:15 2026 GMT
Not After : Apr 22 17:01:15 2026 GMT
Subject: CN=c37dbfef3b5167ab0a51e5477725da36d90fe091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:23:71:65:9e:20:55:89:0f:f8:b9:f5:f6:
01:af:cf:fb:c3:c4:80:0e:ab:13:c0:00:98:82:b3:
e8:e3:fe:1d:09:54:3e:20:c4:76:c3:74:3c:74:03:
f4:a9:a2:e3:b6:ea:97:ce:a2:f9:11:82:f6:5f:74:
6f:48:12:10:c6:13:15:83:90:19:bc:31:41:6b:dc:
97:29:7f:d5:ea:49:14:b5:08:68:0c:6c:8e:ec:20:
04:8e:9f:cd:b1:da:62:f2:1d:09:07:73:68:09:65:
da:b2:4d:29:e7:6f:27:2c:c2:15:4f:dd:e2:c4:72:
d7:26:ba:eb:69:2c:97:fa:a1:af:9f:ea:9e:c2:c1:
e9:97:de:6c:c0:b6:fd:1c:19:72:85:d5:0c:5d:b4:
ec:01:9d:03:f8:39:10:ac:d2:60:04:c6:58:16:cf:
4f:ef:45:33:97:84:b4:b4:81:ee:f9:72:37:36:74:
48:9d:95:fd:29:ea:cb:27:4c:20:7a:e7:2c:23:6e:
3b:88:b1:9a:44:ea:b4:cf:4e:44:f5:eb:9c:ec:38:
4b:43:b7:02:52:54:36:dd:57:92:54:0a:b2:ee:e2:
a3:dc:57:fe:59:84:54:15:b6:f0:b8:76:69:c5:32:
a1:de:fb:d5:4c:23:e6:b1:d4:15:ef:0d:25:9c:3e:
35:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7D:BF:EF:3B:51:67:AB:0A:51:E5:47:77:25:DA:36:D9:0F:E0:91
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e5:9d:06:62:af:39:7b:48:36:bd:48:b1:e2:10:82:11:35:
d7:6b:53:80:ae:c0:88:00:27:8e:ad:9a:a3:56:f3:36:0e:b9:
1a:ae:35:6d:5d:27:f5:1a:9f:7e:11:e1:aa:a4:b6:4f:5f:fa:
b9:1a:ea:93:f8:07:b0:79:36:0d:ac:2f:d4:be:1f:b5:b8:5d:
ec:5e:48:ce:b5:65:ad:d2:82:33:8e:61:7b:b1:bd:5e:c6:7e:
ee:72:b8:e3:57:3c:c5:ee:85:75:de:1b:44:78:65:48:92:78:
68:f7:fb:f8:2a:d9:d6:ae:2a:89:76:99:d7:43:a0:33:18:85:
02:45:78:38:5a:8a:bd:59:eb:ad:ad:fc:8a:d4:c9:de:b5:54:
22:9e:35:31:a2:bb:08:6f:52:ff:2e:f2:33:e2:e1:63:da:a5:
61:e9:3a:ae:d7:f0:9d:34:b3:74:a1:8d:7e:ed:0a:c8:a8:38:
3b:9b:16:dd:34:5c:b5:d7:9e:29:61:52:65:f3:cc:d7:55:13:
f5:6f:1c:e2:89:63:24:49:e1:a9:67:76:1e:e7:ec:f2:d4:e7:
0d:4f:7f:4a:f9:ad:e2:d0:f5:f5:65:a6:70:4e:d3:5c:c1:e6:
bb:3d:f8:08:53:2c:68:66:f3:37:0c:40:72:1d:d5:e2:71:85:
be:37:83:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:14:54 2026 by rpki-client