Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
File: 9QVtq7mkcBDNG07ydLw9L0pZ6To.mft (raw, json)
Hash identifier: LENyQMYH3Jr6vbtglXyAL/VggJqu8sZFm5I6PEFFQhE=
Subject key identifier: 9A:F1:78:09:C5:16:55:FE:31:9F:16:B1:95:AD:E7:73:E3:EA:8C:70
Authority key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Certificate issuer: /CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Certificate serial: 019D94E0B389AF49EEF7E71AB0E4AAD83CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
Manifest number: 18BC
Signing time: Thu 16 Apr 2026 06:00:47 +0000
Manifest this update: Thu 16 Apr 2026 06:00:47 +0000
Manifest next update: Fri 17 Apr 2026 06:00:47 +0000
Files and hashes: 1: 9QVtq7mkcBDNG07ydLw9L0pZ6To.crl (hash: artq2btu07GcOCRmGdqCh4/3TD5as+orhsszvO52Rr4=)
2: RnRCh1Xrb9yuwaris6_5MCtF1KE.roa (hash: 80wSt9zZDVoZeJMwPuaJTAz1yifqf1crCsttUVlJAD4=)
3: VRJ4Vc94OyT64lapMXpmOD1B3Wc.roa (hash: Ky32PchK8c9vLn0orEiQizK102tpl+arDsTOuP7+gVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:94:e0:b3:89:af:49:ee:f7:e7:1a:b0:e4:aa:d8:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Validity
Not Before: Apr 16 06:00:47 2026 GMT
Not After : Apr 17 06:00:47 2026 GMT
Subject: CN=9af17809c51655fe319f16b195ade773e3ea8c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:5f:57:4a:76:05:3e:0a:77:e1:47:e9:20:
d6:46:f0:8c:c5:35:6b:88:4d:d5:ea:73:99:fc:21:
4b:36:18:38:37:01:bf:f7:26:23:c2:73:a8:2b:ee:
a9:79:4f:ea:30:78:20:c2:e2:60:93:56:33:b7:46:
08:ff:f6:cd:fe:e5:55:da:85:ab:41:7d:82:00:40:
83:fe:14:83:31:43:d7:02:a9:be:20:da:fa:20:3f:
89:39:c9:e6:4f:88:49:d8:7e:b3:12:5f:0c:99:93:
3a:33:c3:2c:58:3f:43:93:e1:7d:41:e0:7c:48:1d:
00:39:af:da:32:69:ff:f7:7a:38:64:2a:d4:72:48:
26:60:a5:77:2b:73:02:98:cf:78:ba:90:9c:4e:f5:
32:49:ba:4e:1a:ae:55:a7:58:66:70:3b:26:03:e9:
96:de:56:3e:1e:30:b8:26:09:33:58:22:d7:16:4d:
51:bc:6f:81:5a:fc:40:9c:c5:ee:23:4c:4c:cd:16:
ec:0d:d9:ff:9d:c3:82:51:fa:94:30:a6:be:3f:fa:
d1:5f:1c:0f:3d:f3:27:9c:5f:3e:95:2f:6d:54:cb:
94:78:03:f9:38:06:e7:56:d3:ab:48:22:93:aa:9f:
00:a5:99:87:ed:db:dc:3f:fb:fa:9d:5d:77:5b:78:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F1:78:09:C5:16:55:FE:31:9F:16:B1:95:AD:E7:73:E3:EA:8C:70
X509v3 Authority Key Identifier:
keyid:F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ec:76:c3:64:c1:82:b7:df:8c:c0:6b:eb:5b:b0:d9:f7:be:
dc:f5:e7:ce:7f:d8:70:42:8f:23:e4:82:a4:4f:e0:b9:ea:8e:
a8:e4:09:7a:b5:23:00:5f:69:57:4b:b6:57:99:ad:2a:1a:6a:
6d:b6:ed:d5:29:cd:3d:a9:cd:4f:6d:e6:c2:c1:b8:2e:af:6a:
4f:d1:ba:7d:08:12:8d:90:1d:6e:f0:d2:54:66:0c:00:bd:66:
c8:af:32:d0:4b:6c:ce:9c:cf:b7:be:cf:94:67:1d:e1:eb:07:
ca:84:16:86:ef:f7:fc:30:36:49:79:4d:79:d8:43:c9:60:f9:
73:c5:72:e7:b7:4e:1f:d1:9a:43:10:c1:28:1b:3e:eb:ee:5b:
c2:c6:4b:d4:11:a6:4f:71:03:a9:7e:2f:8e:25:85:52:39:5b:
a3:f3:7c:4f:19:a5:36:0e:a2:a5:04:c2:2a:52:13:e9:cf:e9:
bb:52:51:c4:31:d4:d4:63:be:fc:0b:49:97:9b:d9:56:57:53:
47:66:c2:91:94:7d:31:ea:4c:c9:fa:d6:72:d0:59:68:7f:c8:
e4:9b:25:e5:89:e6:08:43:15:8d:65:71:dd:a0:7b:f7:46:57:
97:c6:50:dd:43:73:94:28:de:02:a8:8e:94:e3:a0:7f:84:18:
80:c1:e8:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2U4LOJr0nu9+casOSq2DzAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MDU2ZGFiYjlhNDcwMTBjZDFiNGVmMjc0YmMzZDJmNGE1
OWU5M2EwHhcNMjYwNDE2MDYwMDQ3WhcNMjYwNDE3MDYwMDQ3WjAzMTEwLwYDVQQD
Eyg5YWYxNzgwOWM1MTY1NWZlMzE5ZjE2YjE5NWFkZTc3M2UzZWE4YzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtINfV0p2BT4Kd+FH6SDWRvCMxTVr
iE3V6nOZ/CFLNhg4NwG/9yYjwnOoK+6peU/qMHggwuJgk1Yzt0YI//bN/uVV2oWr
QX2CAECD/hSDMUPXAqm+INr6ID+JOcnmT4hJ2H6zEl8MmZM6M8MsWD9Dk+F9QeB8
SB0AOa/aMmn/93o4ZCrUckgmYKV3K3MCmM94upCcTvUySbpOGq5Vp1hmcDsmA+mW
3lY+HjC4JgkzWCLXFk1RvG+BWvxAnMXuI0xMzRbsDdn/ncOCUfqUMKa+P/rRXxwP
PfMnnF8+lS9tVMuUeAP5OAbnVtOrSCKTqp8ApZmH7dvcP/v6nV13W3gR8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrxeAnFFlX+MZ8WsZWt53Pj6oxwMB8GA1UdIwQY
MBaAFPUFbau5pHAQzRtO8nS8PS9KWek6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVFWdHE3bWtjQkRORzA3eWRMdzlMMHBaNlRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYWM0NjMtODY4Yy00MTE1LWI1ODMt
ZGUwZWM3NmE0NjcyLzEvOVFWdHE3bWtjQkRORzA3eWRMdzlMMHBaNlRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wYWM0NjMtODY4Yy00MTE1LWI1ODMtZGUwZWM3NmE0Njcy
LzEvOVFWdHE3bWtjQkRORzA3eWRMdzlMMHBaNlRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACux2w2TB
grffjMBr61uw2fe+3PXnzn/YcEKPI+SCpE/gueqOqOQJerUjAF9pV0u2V5mtKhpq
bbbt1SnNPanNT23mwsG4Lq9qT9G6fQgSjZAdbvDSVGYMAL1myK8y0EtszpzPt77P
lGcd4esHyoQWhu/3/DA2SXlNedhDyWD5c8Vy57dOH9GaQxDBKBs+6+5bwsZL1BGm
T3EDqX4vjiWFUjlbo/N8TxmlNg6ipQTCKlIT6c/pu1JRxDHU1GO+/AtJl5vZVldT
R2bCkZR9MepMyfrWctBZaH/I5Jsl5YnmCEMVjWVx3aB790ZXl8ZQ3UNzlCjeAqiO
lOOgf4QYgMHogg==
-----END CERTIFICATE-----
Generated at Thu Apr 16 16:01:33 2026 by rpki-client