Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
File: 9IOBPbTT97DwLDH4W1JDww9F4lI.mft (raw, json)
Hash identifier: katDkJR5X5hqrsfGTg93dOl8tDAayf3c+WIHAjUSHy8=
Subject key identifier: 28:08:2A:4C:84:7D:82:92:81:92:38:80:D4:56:08:88:56:FE:F6:4B
Authority key identifier: F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
Certificate issuer: /CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Certificate serial: 019DCF07D8C970D527A6C6352A62BA5DFD35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
Manifest number: 18DA
Signing time: Mon 27 Apr 2026 13:01:30 +0000
Manifest this update: Mon 27 Apr 2026 13:01:30 +0000
Manifest next update: Tue 28 Apr 2026 13:01:30 +0000
Files and hashes: 1: 9IOBPbTT97DwLDH4W1JDww9F4lI.crl (hash: VCx9y99RBEim3ZOdBMDvok0tOe8M0GgucE5mbx4fsgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:d8:c9:70:d5:27:a6:c6:35:2a:62:ba:5d:fd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Validity
Not Before: Apr 27 13:01:30 2026 GMT
Not After : Apr 28 13:01:30 2026 GMT
Subject: CN=28082a4c847d829281923880d456088856fef64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:01:fe:f5:05:44:1a:a6:8e:06:45:33:88:
73:2a:99:49:19:79:b0:1f:67:39:36:0f:83:c0:54:
04:3d:62:63:8f:2e:95:df:f6:ab:18:e6:d8:c4:fb:
8c:4a:a6:18:19:55:1b:74:67:0a:d0:18:15:88:96:
df:6f:b5:64:96:87:55:d3:82:62:07:e5:09:39:1d:
7f:38:38:3d:34:70:bb:c7:90:d7:fb:64:9f:d9:a1:
33:cd:d2:fb:91:74:4a:7b:2c:26:fa:90:a1:f3:51:
92:bd:b0:94:50:11:4a:70:95:fc:de:6c:1b:0b:89:
d2:ee:90:06:f6:3c:9e:2a:dd:1c:90:ec:d3:97:fc:
d6:56:93:f4:19:34:4c:24:d3:84:1e:eb:44:ce:a7:
93:2f:9c:8d:db:56:60:97:9f:26:e3:11:c5:88:a3:
3f:91:c8:7e:1a:12:10:b4:d9:35:42:8f:17:20:d3:
92:cc:3d:22:84:50:34:41:1d:2a:0f:b0:3a:7f:9f:
99:60:65:06:cf:81:4d:d8:10:85:78:c5:7c:29:33:
e5:d9:e6:e4:97:ed:ab:c1:b9:2d:8b:3c:ab:08:d0:
c8:78:88:d5:6e:2c:cf:2a:07:bb:4a:94:96:6e:7e:
a6:91:c5:cf:c0:8f:dc:be:b3:94:b3:6c:4d:29:a7:
07:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:08:2A:4C:84:7D:82:92:81:92:38:80:D4:56:08:88:56:FE:F6:4B
X509v3 Authority Key Identifier:
keyid:F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bc:fe:03:bd:79:d6:5e:a1:ab:08:30:35:fd:6c:48:54:0b:
19:f2:9f:13:d0:35:30:08:cf:34:cd:17:39:c4:81:5c:2e:9f:
56:60:cf:55:07:2b:a3:e6:d3:7b:d7:d3:f0:cd:6a:33:32:cf:
1f:ea:98:a9:52:d8:2d:29:68:34:41:ed:f0:57:c9:a5:73:1d:
95:6f:00:37:6f:f7:ac:e2:9c:fe:ec:7e:bf:18:7f:10:27:b2:
60:a8:e2:e0:ec:18:bd:6a:18:c8:86:4a:51:44:c0:b4:de:8b:
eb:7e:52:6d:d0:55:bf:f8:c2:b3:3a:2a:a7:ee:21:7d:a2:c7:
6b:c1:44:03:d9:01:08:c8:1e:83:fc:2a:86:d9:27:58:d7:e9:
d1:64:b3:e9:b7:04:56:aa:69:5b:30:12:0a:75:7c:14:30:b1:
44:04:f1:0a:e4:2d:0e:23:69:68:8b:c8:d6:4b:98:c9:23:25:
0e:b2:2f:61:e4:4b:08:ce:ea:9e:bf:ff:18:8e:ba:de:9c:6f:
4b:69:ae:15:65:38:43:ca:fa:00:3c:bc:89:ec:4e:b5:fe:63:
cd:19:b2:ab:7f:02:9c:75:ab:9e:77:80:6f:37:52:14:14:79:
06:4b:b9:a9:c4:e9:25:b9:07:76:14:75:b6:0a:e7:aa:56:86:
09:41:3c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:54:18 2026 by rpki-client