Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
File: 9oXcPBRGS4xAgXUl2aJUtO06ijo.mft (raw, json)
Hash identifier: C2EciImxROEySP1gu1FjOlTMUsUqPA1lJ2H4sByPcw0=
Subject key identifier: 38:82:67:B6:CD:A7:60:1A:A6:12:E6:9B:88:A1:88:51:26:E4:2D:9A
Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Certificate serial: 019DA30AD3FCB674300CCB6EA7698FEF1A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
Manifest number: 0322
Signing time: Sun 19 Apr 2026 00:01:28 +0000
Manifest this update: Sun 19 Apr 2026 00:01:28 +0000
Manifest next update: Mon 20 Apr 2026 00:01:28 +0000
Files and hashes: 1: 9oXcPBRGS4xAgXUl2aJUtO06ijo.crl (hash: DBXYAV1BL6citL3AtGwU1Ad6kMpYzDLrghyMA7kqT3E=)
2: HSRkhqaXY-J-szKJGb322CNozlI.roa (hash: AvBoZFMkLxLlkN5UUWxsTcEYLDw2vSTiZXKpkSzpzYg=)
3: _KbUElUf-kiJtWzmpDSNHdJCbc0.roa (hash: uVsgENyH2wJmt2BQoXK1ivNHMgsy0rMlEbl/JQCYCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:d3:fc:b6:74:30:0c:cb:6e:a7:69:8f:ef:1a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Validity
Not Before: Apr 19 00:01:28 2026 GMT
Not After : Apr 20 00:01:28 2026 GMT
Subject: CN=388267b6cda7601aa612e69b88a1885126e42d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:cc:63:92:37:16:1f:6c:71:9e:e2:c3:ad:
17:9f:fb:ef:10:ae:aa:f5:b7:5c:e3:df:e9:55:a4:
b3:7c:8d:32:3f:c1:de:71:52:bc:7f:69:ed:f2:3a:
bc:33:93:31:c8:09:2b:3e:38:83:db:e6:a8:8a:a8:
89:22:a4:30:73:1e:bd:e9:88:6b:05:ee:6d:8f:7b:
82:2c:6d:61:e8:24:b2:11:0d:43:0e:e8:8e:e3:5f:
ff:e9:5d:59:f4:0c:d0:bc:43:e8:73:ac:73:e2:a3:
e7:8c:f0:9f:c1:cc:ad:38:d6:d1:60:cf:bf:1e:44:
2b:5d:04:2c:cf:ff:1f:a5:42:14:d7:d9:2b:7d:47:
8c:be:fc:9d:0f:46:b5:bc:b0:b0:f8:0a:cb:85:0c:
c2:c9:e0:dc:fe:e7:85:f4:35:ce:ed:ec:1f:7b:f5:
1e:bb:74:23:6e:8f:3b:92:3d:9b:b2:99:0a:b2:d8:
60:45:dd:96:f2:c5:53:7e:2a:fb:8a:e9:e4:fb:99:
2c:27:bd:72:9f:4d:cd:d2:a5:75:27:f4:a7:d0:98:
24:29:53:f6:61:b2:13:27:e9:6b:1a:1f:44:22:b4:
d5:71:8a:fd:ea:24:f2:58:79:0d:be:f0:dd:7c:5b:
52:3c:0b:50:a4:ef:ca:30:8a:d6:af:5f:40:82:65:
0a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:82:67:B6:CD:A7:60:1A:A6:12:E6:9B:88:A1:88:51:26:E4:2D:9A
X509v3 Authority Key Identifier:
keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:db:62:35:3d:ee:36:8d:4b:f1:7d:95:36:02:40:28:31:a4:
a3:50:d0:3a:f3:20:7e:c6:81:62:f2:de:16:a8:08:90:f7:3c:
2c:6b:42:26:11:e5:a7:36:59:0c:0c:d1:ca:8f:f0:c4:b7:d5:
77:a7:de:03:b0:15:07:f1:81:df:ca:1d:f9:41:1f:3c:d1:fd:
c3:95:bf:27:0c:2a:6c:62:32:36:41:7a:a4:08:a2:e8:4e:30:
c3:20:c3:b4:c5:18:2b:13:9d:9a:2e:06:e8:0e:a8:4c:14:6b:
80:1c:0b:e8:fc:23:14:ec:03:0e:15:28:a1:05:2f:2e:f7:47:
77:0c:7a:46:56:8c:fe:f0:fa:4b:16:ff:10:23:9c:ed:e1:b1:
9e:6e:6d:9d:08:2a:b5:14:ec:2c:f6:fc:1c:85:f9:21:77:8b:
62:ce:cd:de:84:8f:99:b4:88:1b:e2:ec:58:e5:ad:89:bf:17:
52:3c:49:5c:4f:04:4e:16:0b:4d:49:e2:28:0c:04:ed:c8:9f:
c7:c7:23:f7:ce:5c:c1:b7:04:a6:a1:0a:8a:b2:34:98:9b:44:
f6:c6:3c:f7:cb:95:ff:7d:03:81:db:f2:9e:a4:f0:5e:70:ee:
3d:06:95:eb:e1:32:78:bb:3e:52:bc:23:92:a1:c2:a7:dd:14:
98:7d:bf:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCtP8tnQwDMtup2mP7xpPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ODVkYzNjMTQ0NjRiOGM0MDgxNzUyNWQ5YTI1NGI0ZWQz
YThhM2EwHhcNMjYwNDE5MDAwMTI4WhcNMjYwNDIwMDAwMTI4WjAzMTEwLwYDVQQD
EygzODgyNjdiNmNkYTc2MDFhYTYxMmU2OWI4OGExODg1MTI2ZTQyZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5XMY5I3Fh9scZ7iw60Xn/vvEK6q
9bdc49/pVaSzfI0yP8HecVK8f2nt8jq8M5MxyAkrPjiD2+aoiqiJIqQwcx696Yhr
Be5tj3uCLG1h6CSyEQ1DDuiO41//6V1Z9AzQvEPoc6xz4qPnjPCfwcytONbRYM+/
HkQrXQQsz/8fpUIU19krfUeMvvydD0a1vLCw+ArLhQzCyeDc/ueF9DXO7ewfe/Ue
u3Qjbo87kj2bspkKsthgRd2W8sVTfir7iunk+5ksJ71yn03N0qV1J/Sn0JgkKVP2
YbITJ+lrGh9EIrTVcYr96iTyWHkNvvDdfFtSPAtQpO/KMIrWr19AgmUKVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiCZ7bNp2AaphLmm4ihiFEm5C2aMB8GA1UdIwQY
MBaAFPaF3DwURkuMQIF1JdmiVLTtOoo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYt
ZWI2N2Y4ZTYzMmI4LzEvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYtZWI2N2Y4ZTYzMmI4
LzEvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlttiNT3u
No1L8X2VNgJAKDGko1DQOvMgfsaBYvLeFqgIkPc8LGtCJhHlpzZZDAzRyo/wxLfV
d6feA7AVB/GB38od+UEfPNH9w5W/JwwqbGIyNkF6pAii6E4wwyDDtMUYKxOdmi4G
6A6oTBRrgBwL6PwjFOwDDhUooQUvLvdHdwx6RlaM/vD6Sxb/ECOc7eGxnm5tnQgq
tRTsLPb8HIX5IXeLYs7N3oSPmbSIG+LsWOWtib8XUjxJXE8EThYLTUniKAwE7cif
x8cj985cwbcEpqEKirI0mJtE9sY898uV/30DgdvynqTwXnDuPQaV6+EyeLs+Urwj
kqHCp90UmH2/gg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 02:16:16 2026 by rpki-client