Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json)
Hash identifier: zPDlax6dkjzEB+klf70mMyMSiL2o7Jm1vT9pSgpHedU=
Subject key identifier: 47:0D:47:F2:60:71:0C:FA:84:F2:D4:DD:21:B2:46:A4:BC:AE:A2:B4
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019DCFAC8944627FC63C5D07B3F654C3BD2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
Manifest number: 1974
Signing time: Mon 27 Apr 2026 16:01:24 +0000
Manifest this update: Mon 27 Apr 2026 16:01:24 +0000
Manifest next update: Tue 28 Apr 2026 16:01:24 +0000
Files and hashes: 1: 1-dWfWWM2Q4bjUSimugWWfOBMll4.roa (hash: 9k9cnyjwgTflpSvsCNop1Tp//B4oTSziXJvJrKx7enw=)
2: 1if2l0vuSUyA8aKOlZRwZBTqr58.roa (hash: MYKlinKANRkkXALYuH4dNJZg3DMiY6cZlGtlrNDBss0=)
3: 6c9spiMI22fbQ_S_riFTxN6JTnQ.roa (hash: WySy31z3A7Sqe9phj35VMgqeabINWeNkJj5/iHanhck=)
4: 9QOoNpd76OPVl49TOCbIH5K-Xuc.roa (hash: iHslUv59RlEtWqhiDG50P5ptUXczZiGq5UnFqrvblIU=)
5: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: X4ckhhShp2yRG8JBEdXJYcUKTr+7EOU+/l1zQjlaH70=)
6: Xlo2dAjL9Nrixz0iYa0SAY5SYBc.roa (hash: Bg+pB+Sxi3uvjFsg12Ez9WbynlaVnSIe2mie+DFh+2c=)
7: ih0mxzFH0MUiJNPNZCziaJJuGMU.roa (hash: Xd9Xc8lt28a42B6a+zDM/Y1fYiUSVn12an9g9QH+NKk=)
8: oiD41d0i1VuwEQttPBFodXn6upI.roa (hash: uAOn8Pa9tipVHC9vk2BfHXqfrIzw8lI2qK4bQp5y4a8=)
9: wUIQuE5RAl6yjUP9k5UHyxLRIPw.roa (hash: NCMtFKefqHShmwgJRWPFU+3g5xSc9WX2hSElA5v9Foo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:89:44:62:7f:c6:3c:5d:07:b3:f6:54:c3:bd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Apr 27 16:01:24 2026 GMT
Not After : Apr 28 16:01:24 2026 GMT
Subject: CN=470d47f260710cfa84f2d4dd21b246a4bcaea2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:62:04:3f:50:78:01:43:65:aa:00:aa:0e:
04:87:04:c5:90:21:8c:ac:5b:bc:15:39:eb:79:85:
68:9c:c8:b5:cd:ec:1a:2f:db:42:9b:9b:fa:18:d0:
2d:67:aa:bc:df:7f:db:b0:46:52:e6:08:41:6c:3e:
e6:b9:77:c7:49:4d:e2:38:08:94:92:92:2b:10:15:
46:22:67:13:47:32:93:cd:8e:a2:6f:1e:52:04:66:
7c:45:e3:21:69:8b:0a:af:22:f8:8f:15:b8:06:92:
db:1c:46:88:36:89:41:ff:16:cc:bb:77:e6:0a:91:
6e:51:cf:24:1a:18:f4:29:e3:17:2e:f2:7f:71:16:
ee:9e:b3:75:74:d9:ab:3d:fc:6d:33:47:b4:e7:be:
27:be:1a:ae:20:81:5e:8d:1e:29:1a:ef:f9:0f:22:
ff:ef:ae:30:af:0b:9d:58:01:ce:12:9e:ca:f5:0a:
67:1f:9f:1a:69:4f:71:4a:96:25:96:25:14:5e:c7:
d2:c6:a4:4b:4b:e4:60:94:2b:54:d9:35:26:64:94:
69:86:e7:c3:5b:bb:9d:7c:91:0c:b5:ab:dc:52:b9:
fd:9b:9d:a6:fc:8d:e3:11:f7:57:71:09:04:bc:1b:
7b:26:d4:86:a7:6e:c0:fa:ca:3f:24:f4:b8:e5:0e:
7a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0D:47:F2:60:71:0C:FA:84:F2:D4:DD:21:B2:46:A4:BC:AE:A2:B4
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5b:99:14:eb:b3:58:bc:3a:0a:a4:e3:42:23:86:3d:a2:d2:
03:92:d3:bb:b2:45:84:9e:32:3d:60:98:b3:75:f0:e2:30:70:
19:d4:1a:0d:5d:22:7c:a8:d4:17:fd:f9:42:cd:dd:f6:f4:c3:
e6:96:84:6b:b3:e0:4c:39:de:c9:52:8d:07:db:40:f4:8d:9f:
8e:68:dc:37:f2:2f:42:94:34:b9:b8:7d:7c:51:f1:f9:7d:a2:
e2:c9:2e:31:b3:41:b2:f6:95:55:a7:93:c2:ca:bf:26:8f:2f:
4b:4f:67:0a:a2:7d:d4:a3:f8:1f:84:40:6d:b5:58:bd:ed:1a:
4d:eb:9c:a8:1a:ed:bb:3f:75:a1:89:66:75:fb:23:16:88:03:
c5:04:68:31:aa:de:33:ad:53:95:fb:78:d1:73:18:b4:b5:49:
e8:38:fa:63:bf:de:2a:6f:56:a0:8b:c4:f5:6a:62:c4:56:56:
14:1d:69:c6:ad:2a:d5:da:42:9a:1d:b5:5b:07:a3:30:1d:a4:
bc:01:6f:4f:1c:1e:72:17:5d:9c:b7:e3:71:82:f1:a0:c9:c8:
6c:a5:f8:57:d3:31:63:31:c7:f0:47:b9:39:b8:52:49:34:7d:
2c:8d:01:d7:8a:06:62:17:61:01:28:4c:49:31:28:25:6e:49:
9d:9b:07:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:32 2026 by rpki-client