Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
File: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft (raw, json)
Hash identifier: +WXxRkwEvJuRgojmp+VI2jMTJ7TDQx0cxcCMXGg2wHg=
Subject key identifier: B8:5B:04:BE:D5:08:5A:BD:98:24:C0:B2:79:24:85:69:38:1F:68:77
Authority key identifier: F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
Certificate issuer: /CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Certificate serial: 019DCE2B81957BCB68AD259E5BBB4B690227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
Manifest number: 0500
Signing time: Mon 27 Apr 2026 09:00:50 +0000
Manifest this update: Mon 27 Apr 2026 09:00:50 +0000
Manifest next update: Tue 28 Apr 2026 09:00:50 +0000
Files and hashes: 1: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl (hash: qC26Qhh+bZkX5PovkMdNp7DCxOZ+AobGS7ut5oftGM4=)
2: Z5Bt0mcpjuYCBhTBe_0r3j_HEOE.roa (hash: CQtnMCBgc31J7ELcq2ticHIWUxTxloi8VsRDj7ga9wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:81:95:7b:cb:68:ad:25:9e:5b:bb:4b:69:02:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Validity
Not Before: Apr 27 09:00:50 2026 GMT
Not After : Apr 28 09:00:50 2026 GMT
Subject: CN=b85b04bed5085abd9824c0b279248569381f6877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:06:91:36:87:05:34:52:65:a3:93:8c:be:96:
69:b7:c9:1b:dd:40:f4:bd:91:d5:6a:00:fe:8f:42:
a0:03:3a:9c:95:3d:05:fd:9b:36:02:d8:6a:1b:d4:
25:4a:29:9d:16:89:36:03:73:34:66:a4:1a:3e:e6:
c8:c4:da:21:da:ba:92:26:aa:d7:cb:f0:17:0f:f0:
0a:84:86:be:bc:50:bb:38:19:76:95:e6:45:1b:c3:
21:82:a0:81:ad:d0:90:9a:05:61:50:76:97:e9:d1:
6c:bc:bf:cf:07:da:12:6f:f8:16:77:ef:f3:41:82:
f6:af:3b:d7:d6:61:a4:7e:11:e5:1a:85:cc:93:c5:
e5:ae:a4:11:bf:6f:18:84:c9:3b:5b:a7:81:ee:9b:
75:ac:84:f1:28:d6:f4:17:b7:7f:1c:76:82:48:5b:
64:8d:ec:8b:2a:33:1b:4e:c5:56:da:62:4f:11:a4:
54:40:64:46:56:28:3c:aa:ab:d6:45:57:4e:6b:58:
3d:25:f8:d9:d6:df:2c:49:0e:f4:3e:90:97:9e:5a:
a9:92:31:fa:89:af:6f:09:9f:01:c6:06:0c:79:2d:
bb:8b:b3:ef:48:7c:ce:b8:dd:64:ac:a9:b0:8f:84:
02:d8:15:a1:88:3b:38:5c:7b:b0:ec:86:e5:e2:bd:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5B:04:BE:D5:08:5A:BD:98:24:C0:B2:79:24:85:69:38:1F:68:77
X509v3 Authority Key Identifier:
keyid:F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d9:3f:3f:5c:98:39:1f:c0:b1:4b:6e:f6:15:4a:7d:a2:4a:
16:07:68:79:94:dd:aa:f1:a6:4d:86:20:f3:58:bb:f8:11:1c:
a1:1e:e0:39:6a:83:33:e3:d5:8e:99:aa:52:b2:6d:9e:e7:d8:
01:68:41:8d:16:31:b8:50:5f:a6:76:08:5c:35:9a:cb:b2:fe:
41:24:a6:18:2f:ee:7b:d5:05:e5:fe:ff:77:a9:b6:6d:b5:d2:
57:25:42:b0:99:a5:4b:be:8a:10:5c:2a:cd:a8:7a:b5:42:ad:
ec:61:f0:cb:d9:46:5e:a3:50:24:63:b3:e6:ef:69:83:8c:f0:
be:49:30:fa:2d:11:bb:98:e4:a9:de:08:0a:a7:7a:68:1e:24:
09:99:54:4a:1b:3b:1e:87:b7:a7:3e:0d:65:f3:9c:14:60:c5:
41:6c:c8:48:32:7d:1d:e1:31:2d:ae:0e:30:cf:02:c3:7f:6e:
79:33:f8:09:27:d1:6b:af:12:60:42:6e:23:fa:d3:b9:e4:de:
bb:1e:dc:e3:de:ac:3c:3c:1a:00:00:a8:b0:62:36:a3:2e:18:
59:6c:37:3f:42:87:2a:b8:58:3e:e5:05:d2:81:74:71:1e:87:
d3:ae:3b:0d:5e:5d:8a:d2:86:85:cc:81:5a:96:a0:58:0a:42:
2b:d0:c6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:21:05 2026 by rpki-client