Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier: 8T8HrN5puZv/21Y1PpUqlZFtwGkLdK5AcsU7Hm8y51g=
Subject key identifier: 96:4C:FC:A2:71:68:3A:41:1F:98:68:0E:6F:5F:33:EA:3C:CE:46:5D
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 019DD1D24D52C40CA656C30ECAFB5DE9BC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number: 18DE
Signing time: Tue 28 Apr 2026 02:01:53 +0000
Manifest this update: Tue 28 Apr 2026 02:01:53 +0000
Manifest next update: Wed 29 Apr 2026 02:01:53 +0000
Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: tHDdxEG4bFC5lUW2JkUjGYaZTIk4RZpp+oTq06Mn7p0=)
2: M3wRggjCUsGg3wdEN0GVZSY7UNs.roa (hash: syu83Vs+aGOZec7SpDVJCQQPJPYaj6sFS8IZVudbAxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:d2:4d:52:c4:0c:a6:56:c3:0e:ca:fb:5d:e9:bc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: Apr 28 02:01:53 2026 GMT
Not After : Apr 29 02:01:53 2026 GMT
Subject: CN=964cfca271683a411f98680e6f5f33ea3cce465d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:37:25:f1:e0:2e:35:b8:d7:df:b2:80:fa:
75:68:ea:a4:46:d1:e2:31:0a:55:69:1f:f3:d2:d9:
80:de:dd:2f:db:25:20:f7:f4:d2:04:ed:2d:7c:48:
db:10:39:10:fe:f4:c4:4a:06:0e:4d:59:d5:37:77:
79:5c:5e:a9:7a:ad:d9:f4:b3:36:3c:b9:ac:75:e1:
08:7a:54:bc:44:5a:2c:3a:57:0e:0d:c6:36:8a:d7:
f9:83:68:77:46:54:ac:a6:2d:5a:58:83:bc:2f:d6:
0a:93:fe:30:48:af:6d:a3:ba:36:1c:87:11:71:b6:
b8:a7:6e:9d:1d:cf:b5:b8:21:13:0a:28:1c:2e:1b:
4c:d4:0f:c3:20:0a:b6:25:d8:6c:9e:b8:eb:75:a0:
dd:be:95:a2:5f:03:ed:b2:62:dc:3b:0a:61:dc:00:
22:c3:64:09:97:98:df:e4:31:48:62:29:76:11:9b:
ce:53:a7:55:df:6e:d0:a8:8f:2a:bb:b6:e5:7f:82:
8b:bf:6b:62:84:50:40:ea:36:69:4e:c3:00:e9:0e:
f1:47:42:5d:19:3d:f6:ab:05:9b:0d:f8:6d:70:e4:
86:88:60:12:b9:4e:33:8f:f4:d4:5e:b3:4f:7c:44:
48:51:7f:73:83:36:e3:aa:fb:91:ab:76:eb:d7:cc:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4C:FC:A2:71:68:3A:41:1F:98:68:0E:6F:5F:33:EA:3C:CE:46:5D
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:70:68:34:c3:83:10:a4:6f:35:a7:38:a2:2a:f5:a3:bf:a7:
3c:e5:ce:29:03:aa:23:80:21:a7:28:de:60:b4:02:55:51:19:
d3:40:96:19:de:58:4a:54:44:7f:e8:9e:7e:08:aa:0a:f7:98:
e4:b6:88:ce:31:5b:a0:c6:ea:b0:9b:1d:da:06:9e:3e:b2:a4:
88:47:1e:42:b4:4b:22:69:7f:a8:be:7e:57:e2:22:f0:2d:85:
a7:38:cc:1d:ad:28:ac:4e:ff:a6:8b:59:ac:b4:62:36:66:ef:
32:bd:4b:8e:9e:9e:d3:fd:86:2e:bb:dc:ad:17:18:a5:40:52:
32:43:29:5c:68:5a:35:cc:63:70:ab:3e:37:b7:21:bf:08:27:
16:48:f7:b9:39:7d:80:16:1c:f2:1f:4f:4f:91:8d:e0:49:a9:
7f:61:72:af:5e:92:20:50:ed:c6:b8:6d:7c:5f:40:32:11:26:
67:77:a1:0b:c7:48:da:0d:1e:56:6c:ef:2a:d5:15:1e:b7:19:
77:0f:41:33:bd:59:40:2b:77:b8:3f:d2:a6:c0:da:ee:84:44:
c7:49:25:73:a0:07:a7:d9:f3:95:41:cd:08:b6:2a:73:a8:d7:
bf:a8:4a:a0:3a:d2:04:73:c4:48:8b:b8:ee:13:3d:81:2a:aa:
af:0e:06:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:33:14 2026 by rpki-client