Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
File: 9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json)
Hash identifier: wd2MUE8SwQCb9QZ3CNI8BSYiIQyYGEGJjXsDmBx45PE=
Subject key identifier: 78:84:46:DF:B8:CC:A9:B0:6B:25:B7:8B:C6:B7:35:79:54:66:49:B3
Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Certificate serial: 019DD49BE08697E1894406A475714EDA8712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
Manifest number: 18E5
Signing time: Tue 28 Apr 2026 15:01:18 +0000
Manifest this update: Tue 28 Apr 2026 15:01:18 +0000
Manifest next update: Wed 29 Apr 2026 15:01:18 +0000
Files and hashes: 1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: HAH98ECKoiPdbUmrgTbHvInaJoaUOvcVyCTuK/PMWyk=)
2: IRtOc9xNuHtN4zmsWWnKZRqgKMs.roa (hash: jkPYQDPHDAj2YZTZO0wQGRdV29/MSC+GrpeiHVDq/M4=)
3: Jomyc4HWtnITYsIDG8BVeLdHId4.roa (hash: klQBrykZJDAdf4GMS1JWIpprMsc/7rY9pUPlh5dkvXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:9b:e0:86:97:e1:89:44:06:a4:75:71:4e:da:87:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Validity
Not Before: Apr 28 15:01:18 2026 GMT
Not After : Apr 29 15:01:18 2026 GMT
Subject: CN=788446dfb8cca9b06b25b78bc6b73579546649b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bb:55:e3:88:3d:82:cb:f8:5d:dc:b2:a1:6b:
1b:ef:84:ee:ab:8d:95:34:b6:b3:ec:2e:49:9e:74:
e6:cd:60:91:c5:14:e5:10:b8:00:61:48:fe:45:2c:
28:fc:1e:4c:01:ad:b2:78:70:05:df:93:a0:95:3a:
27:20:49:5c:f3:fd:09:37:b1:f9:1b:ab:33:24:7d:
9d:36:d6:a1:13:05:d7:67:0a:7a:bd:5b:f9:48:6f:
3c:ee:73:ce:bf:bc:74:e2:d6:6b:bd:90:dd:ab:88:
6a:4a:62:90:f1:4d:58:ad:fc:05:a6:9c:aa:92:de:
7e:ab:b8:c9:25:e7:c6:0d:28:85:8c:53:49:21:5e:
ca:f5:68:4e:af:2b:d8:df:d6:9d:e6:a3:8c:20:15:
f3:6e:ec:33:9f:90:22:e0:06:05:ca:50:73:0b:78:
03:2a:50:de:1b:28:6f:96:84:50:b8:dd:d3:03:0b:
3c:7a:31:83:fd:ab:a0:62:95:2b:ac:35:16:5a:2b:
4a:5e:3d:4d:87:d3:79:bd:70:1a:b7:2b:62:ff:13:
93:21:1c:a6:af:41:d5:aa:a9:f5:92:62:b0:1e:4b:
17:f3:d7:2f:4a:20:b5:32:4d:2e:66:8f:84:6c:9d:
fc:9d:10:8e:8e:c8:aa:11:22:d9:72:00:9a:8f:90:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:84:46:DF:B8:CC:A9:B0:6B:25:B7:8B:C6:B7:35:79:54:66:49:B3
X509v3 Authority Key Identifier:
keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6a:30:78:ba:18:8d:5a:39:a1:b2:5a:94:65:12:70:8e:91:
2b:f1:cc:19:85:ac:f7:5c:39:69:4b:33:74:69:ff:51:3a:92:
b6:13:6b:14:b7:87:08:59:a8:ba:1c:0d:d5:e8:bf:15:11:c6:
65:89:27:e3:41:20:9e:01:9a:a7:6c:00:11:e0:e0:75:8d:75:
93:a3:2f:45:63:92:50:14:76:16:dc:31:96:f5:e1:e6:1a:ef:
97:bd:be:71:a3:13:08:22:46:b1:92:70:9b:2d:e6:53:fb:94:
a3:cb:c4:33:e8:0f:cf:55:38:e0:68:23:14:52:37:30:86:4d:
a6:a4:7b:f3:4e:4e:70:54:24:9d:b5:1d:75:07:f7:60:a0:a0:
54:94:0b:52:4e:d0:27:96:12:f7:c0:04:40:aa:40:ff:5a:24:
34:bf:bd:f2:2a:71:a8:72:83:bc:96:67:4e:aa:d6:08:c5:3f:
57:13:cb:a3:89:a8:10:bd:74:ea:04:4d:1d:9a:40:99:28:c9:
55:bc:e8:e4:85:5d:cb:34:bc:96:f5:81:57:81:cb:7f:b8:5f:
20:c3:fa:a4:a8:32:2c:64:fd:8c:6a:29:f3:69:be:94:0d:17:
4a:e6:71:25:21:b2:fe:11:1a:6e:3c:e6:cb:0c:5c:3e:be:cb:
2f:18:13:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Um+CGl+GJRAakdXFO2ocSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZmRmYzMzN2Q4Y2UwZTA1ZWY3ZjdiNzJhZjI3ZWI2MWNk
NDcwMzcwHhcNMjYwNDI4MTUwMTE4WhcNMjYwNDI5MTUwMTE4WjAzMTEwLwYDVQQD
Eyg3ODg0NDZkZmI4Y2NhOWIwNmIyNWI3OGJjNmI3MzU3OTU0NjY0OWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7tV44g9gsv4XdyyoWsb74Tuq42V
NLaz7C5JnnTmzWCRxRTlELgAYUj+RSwo/B5MAa2yeHAF35OglTonIElc8/0JN7H5
G6szJH2dNtahEwXXZwp6vVv5SG887nPOv7x04tZrvZDdq4hqSmKQ8U1YrfwFppyq
kt5+q7jJJefGDSiFjFNJIV7K9WhOryvY39ad5qOMIBXzbuwzn5Ai4AYFylBzC3gD
KlDeGyhvloRQuN3TAws8ejGD/augYpUrrDUWWitKXj1Nh9N5vXAatyti/xOTIRym
r0HVqqn1kmKwHksX89cvSiC1Mk0uZo+EbJ38nRCOjsiqESLZcgCaj5DcgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiERt+4zKmwayW3i8a3NXlUZkmzMB8GA1UdIwQY
MBaAFPf9/DN9jODgXvf3tyryfrYc1HA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYTA2NmUtOGRjYS00ZDI4LTk0NGIt
Zjk1OWQ0ZTFmMjg5LzEvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jYTA2NmUtOGRjYS00ZDI4LTk0NGItZjk1OWQ0ZTFmMjg5
LzEvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGoweLoY
jVo5obJalGUScI6RK/HMGYWs91w5aUszdGn/UTqSthNrFLeHCFmouhwN1ei/FRHG
ZYkn40EgngGap2wAEeDgdY11k6MvRWOSUBR2FtwxlvXh5hrvl72+caMTCCJGsZJw
my3mU/uUo8vEM+gPz1U44GgjFFI3MIZNpqR7805OcFQknbUddQf3YKCgVJQLUk7Q
J5YS98AEQKpA/1okNL+98ipxqHKDvJZnTqrWCMU/VxPLo4moEL106gRNHZpAmSjJ
Vbzo5IVdyzS8lvWBV4HLf7hfIMP6pKgyLGT9jGop82m+lA0XSuZxJSGy/hEabjzm
ywxcPr7LLxgTyw==
-----END CERTIFICATE-----
Generated at Tue Apr 28 23:59:17 2026 by rpki-client