Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier: IHCr1lZY3BRQQgnqKGdCf5N1WN6zzNmX1exZKWZu2gw=
Subject key identifier: A5:6A:B4:BD:7C:0B:51:65:0B:73:4A:BD:1F:B7:FA:BF:87:70:40:FC
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 019DAF0E18345AC8C75F3DCDFA183CD37C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number: 18B6
Signing time: Tue 21 Apr 2026 08:00:29 +0000
Manifest this update: Tue 21 Apr 2026 08:00:29 +0000
Manifest next update: Wed 22 Apr 2026 08:00:29 +0000
Files and hashes: 1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: y45KrFlUUa7USGJ04RcdXt47mcpZMCMOyt3NcqbI5CI=)
2: T9rz93pJrKV5HZUDPNt-auvowcY.roa (hash: Y2TAvhfs7O4nAyyTTSyBt46eHZbCQZ13ePvrQ4ueMNo=)
3: rtoaF4eNoCfBlVaGIH3lILCxwDw.roa (hash: uP2Cltj1neggz9Zc7r+kubVviQuOHIeAbOo973WtReI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:0e:18:34:5a:c8:c7:5f:3d:cd:fa:18:3c:d3:7c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Apr 21 08:00:29 2026 GMT
Not After : Apr 22 08:00:29 2026 GMT
Subject: CN=a56ab4bd7c0b51650b734abd1fb7fabf877040fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:f9:ba:b0:89:c5:90:7e:9a:fc:06:56:fb:
6b:b9:4a:9d:cf:9c:35:d5:c8:3c:5f:97:61:56:05:
e0:96:bd:46:ba:63:ab:d3:53:39:e5:66:7b:73:a0:
16:fb:32:93:c8:5c:a8:69:4f:39:1b:63:21:ad:4c:
5a:65:d1:32:e3:30:e9:d4:a5:18:3f:3a:48:82:07:
c5:84:89:42:02:dd:1b:0d:98:db:eb:0f:62:bb:22:
26:5c:70:92:8e:09:48:a2:12:5f:9d:50:0e:30:f7:
94:a9:06:bf:b5:28:ac:fe:d1:b6:dd:42:0a:37:e5:
ab:fc:5a:82:f1:1b:b6:09:cc:0c:10:40:d8:65:a2:
5d:9b:31:48:af:5c:11:f1:f6:71:13:ea:57:fe:3c:
98:d4:1f:8d:2e:20:ea:03:57:00:2d:c1:02:8a:03:
b5:d0:35:e7:4e:3f:50:68:2f:04:89:ee:9f:20:bd:
13:58:8d:f1:c6:b6:8a:8f:72:cd:6a:c7:26:d7:43:
73:7c:52:3f:c5:aa:3e:03:e7:e2:b9:b6:cd:84:d3:
28:e8:5f:bc:f7:0b:4e:4b:23:92:6c:de:3b:76:47:
20:de:e5:b2:aa:b4:9b:eb:9a:76:d0:4d:61:57:4e:
b0:10:45:89:53:53:b7:f6:e1:1f:bc:2f:16:0a:67:
8a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6A:B4:BD:7C:0B:51:65:0B:73:4A:BD:1F:B7:FA:BF:87:70:40:FC
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ff:3a:d5:bf:78:e6:e5:eb:74:51:8a:db:77:31:4e:81:48:
4d:0f:a7:a5:44:37:1c:b8:6d:c1:84:31:63:98:0e:d5:c7:4e:
9e:cc:3c:f7:45:31:65:b8:04:18:e8:69:fe:65:31:03:fc:99:
a4:ea:03:10:d4:de:cd:44:2b:40:6a:d0:0b:ad:48:8e:d6:05:
d8:6f:42:8b:c8:f0:9e:ca:89:4b:9b:a4:d9:e0:8f:28:61:a1:
71:c7:09:a7:29:4e:9d:22:0c:3e:31:f5:fa:23:27:cc:98:e0:
62:30:b1:a1:98:21:90:9e:ff:92:59:82:ed:71:62:35:6d:d7:
b2:36:89:75:64:ae:a5:f1:b4:47:f6:67:25:db:ac:d7:51:a1:
4e:9d:21:5d:d1:2d:e2:da:4f:c2:99:ae:ca:f0:1e:6f:47:77:
ce:5a:3b:fc:6b:06:72:eb:82:a8:4c:bd:be:e2:0b:3e:be:5b:
f7:42:8e:6b:f5:df:5f:66:20:58:b9:8a:d3:e5:03:68:ca:1e:
92:5b:16:ad:86:12:fe:a1:3e:80:cd:1e:0e:ce:70:ab:c6:9e:
d0:b0:74:b9:3c:c9:71:a8:5b:da:fe:56:49:8e:93:4e:ff:60:
7b:88:20:e3:29:7f:82:ae:5d:3c:04:bd:9b:db:e5:4d:ae:1e:
c8:84:b2:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2vDhg0WsjHXz3N+hg803xJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZTY3OWU1OGU0YjhiZjYzZTk1MDAyYjU0YmU0NzFkNjM0
Yjk1MDYwHhcNMjYwNDIxMDgwMDI5WhcNMjYwNDIyMDgwMDI5WjAzMTEwLwYDVQQD
EyhhNTZhYjRiZDdjMGI1MTY1MGI3MzRhYmQxZmI3ZmFiZjg3NzA0MGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMb5urCJxZB+mvwGVvtruUqdz5w1
1cg8X5dhVgXglr1GumOr01M55WZ7c6AW+zKTyFyoaU85G2MhrUxaZdEy4zDp1KUY
PzpIggfFhIlCAt0bDZjb6w9iuyImXHCSjglIohJfnVAOMPeUqQa/tSis/tG23UIK
N+Wr/FqC8Ru2CcwMEEDYZaJdmzFIr1wR8fZxE+pX/jyY1B+NLiDqA1cALcECigO1
0DXnTj9QaC8Eie6fIL0TWI3xxraKj3LNascm10NzfFI/xao+A+fiubbNhNMo6F+8
9wtOSyOSbN47dkcg3uWyqrSb65p20E1hV06wEEWJU1O39uEfvC8WCmeKNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVqtL18C1FlC3NKvR+3+r+HcED8MB8GA1UdIwQY
MBaAFPfmeeWOS4v2PpUAK1S+Rx1jS5UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS1aNTVZNUxpX1ktbFFBclZMNUhIV05MbFFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC80ZmM3ODctZTY4MS00ZTE2LWIxZWMt
YTFjNWQ3ZWI0YmQ3LzEvOS1aNTVZNUxpX1ktbFFBclZMNUhIV05MbFFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC80ZmM3ODctZTY4MS00ZTE2LWIxZWMtYTFjNWQ3ZWI0YmQ3
LzEvOS1aNTVZNUxpX1ktbFFBclZMNUhIV05MbFFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgv861b94
5uXrdFGK23cxToFITQ+npUQ3HLhtwYQxY5gO1cdOnsw890UxZbgEGOhp/mUxA/yZ
pOoDENTezUQrQGrQC61IjtYF2G9Ci8jwnsqJS5uk2eCPKGGhcccJpylOnSIMPjH1
+iMnzJjgYjCxoZghkJ7/klmC7XFiNW3XsjaJdWSupfG0R/ZnJdus11GhTp0hXdEt
4tpPwpmuyvAeb0d3zlo7/GsGcuuCqEy9vuILPr5b90KOa/XfX2YgWLmK0+UDaMoe
klsWrYYS/qE+gM0eDs5wq8ae0LB0uTzJcahb2v5WSY6TTv9ge4gg4yl/gq5dPAS9
m9vlTa4eyISysg==
-----END CERTIFICATE-----
Generated at Tue Apr 21 19:06:26 2026 by rpki-client