Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
File: 9JUCyXSCsoUChSyX75vToKKl6fA.mft (raw, json)
Hash identifier: ov7bB6uSZaMuj4HWPx6yGEhM/g8hI0wgb4ewkE9YUgk=
Subject key identifier: B1:16:5F:0F:77:40:5F:C0:88:CA:73:D5:57:9C:E9:45:92:A1:AB:7E
Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
Certificate issuer: /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Certificate serial: 019DD12C47C90502335833B12C2C250AE2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
Manifest number: 16AF
Signing time: Mon 27 Apr 2026 23:00:33 +0000
Manifest this update: Mon 27 Apr 2026 23:00:33 +0000
Manifest next update: Tue 28 Apr 2026 23:00:33 +0000
Files and hashes: 1: 9JUCyXSCsoUChSyX75vToKKl6fA.crl (hash: 10iL2ZC4pqgxdXYjHf9WC1JdX8VCxNbrHkWmS8uxhkk=)
2: QlPUYBIgA-X6jp0IaJHxAc-p46U.roa (hash: HXbV30gZlG5FM4CNzA/Ff6hakg3IrjI+qN7q3gKgozw=)
3: tyC-pTUzo6nFgSSwAa_6pbmsyAg.roa (hash: RK6LVWTWWbUKXe8FdCeUVJN0A7lPCOyvPPPfNNmHAao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:2c:47:c9:05:02:33:58:33:b1:2c:2c:25:0a:e2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Validity
Not Before: Apr 27 23:00:33 2026 GMT
Not After : Apr 28 23:00:33 2026 GMT
Subject: CN=b1165f0f77405fc088ca73d5579ce94592a1ab7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:13:2f:5f:9e:90:60:0d:20:35:e2:52:f1:
48:e5:4d:90:90:a2:40:59:66:8a:88:df:b3:b1:a7:
dd:c7:ea:a7:53:2d:4e:11:e3:48:13:43:f8:63:a4:
7e:97:de:f7:7a:5a:d6:99:f6:a0:3d:c4:68:32:cd:
4c:c6:32:cf:31:f0:56:6e:35:76:df:5d:b2:e8:2c:
e6:ea:f4:c3:37:e7:3c:af:8d:99:04:d7:93:9c:7b:
e2:c6:8e:64:ca:1c:00:51:6d:eb:69:bf:eb:ab:51:
f4:e5:a5:f6:e7:41:ab:3d:9f:e7:45:6f:00:73:33:
e5:67:74:88:9b:b6:1f:e9:d1:8e:79:37:3a:f6:ee:
c0:55:92:80:15:f2:91:a8:bb:bc:e4:f3:ed:af:23:
50:96:6a:b9:47:55:4e:3d:fb:8e:72:4c:06:8c:13:
d1:8c:5e:4a:e4:7f:e3:9c:0d:48:6a:09:f5:e3:dd:
9f:25:7e:95:e1:45:a2:bb:0e:d2:8b:1a:2a:bf:44:
13:9a:00:c7:36:8f:16:a6:f0:bb:2b:9b:12:e7:c9:
9f:aa:73:bd:7b:cc:19:ec:fc:63:5c:f9:16:2f:e7:
e3:97:2d:51:82:71:ea:3f:44:c4:c0:74:14:5f:de:
68:82:bf:5a:d5:e8:c8:6e:64:14:79:2c:c3:cb:e6:
e9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:16:5F:0F:77:40:5F:C0:88:CA:73:D5:57:9C:E9:45:92:A1:AB:7E
X509v3 Authority Key Identifier:
keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:18:0c:e4:44:f3:f6:40:45:19:20:d2:da:4a:8b:81:cc:e0:
5d:6e:d5:8c:42:d6:ac:7a:f9:5e:15:93:f3:55:7e:72:b5:a3:
80:bd:42:e2:27:8a:55:09:65:a4:c6:85:0b:58:71:73:a1:0f:
9b:5b:af:36:99:f0:04:0c:3e:02:c7:07:86:5a:94:8c:04:38:
0a:63:22:2c:4e:72:93:6b:9f:5f:08:27:13:58:ad:e2:e9:3e:
05:5d:34:7f:c2:54:d8:14:19:48:46:1c:ec:cb:f8:3b:ff:ac:
25:f0:aa:ec:07:5e:66:f2:25:80:35:6b:68:cd:26:0d:1e:4e:
f7:3a:3a:35:57:b5:c8:23:f9:f4:3f:29:b0:46:88:be:7f:82:
c4:37:ad:ad:18:31:04:22:e3:ae:6e:35:d5:fd:09:14:c0:9e:
74:3f:88:89:8b:76:3c:e0:6b:3d:2a:3d:81:54:5c:13:6c:e7:
d3:ae:b7:bf:ea:37:f6:e2:20:b6:26:cd:83:a8:cd:e9:62:13:
1d:eb:88:74:e0:3d:0e:5d:0d:3e:8f:9c:d6:5e:b6:c1:58:a0:
e8:01:22:39:7c:64:72:d3:74:e0:81:f8:00:c6:b8:83:66:25:
4d:9a:70:8c:9e:0a:b1:98:80:8e:64:96:c8:a9:69:27:92:8f:
41:2a:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:46:00 2026 by rpki-client