Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
File: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft (raw, json)
Hash identifier: T7QmJR4tisdvujZAsH6HF4I5UgUXUjMR/IwDGs91Kh0=
Subject key identifier: 7C:1E:6E:53:6E:FD:62:99:8F:83:69:6A:1A:9E:76:9D:D6:5A:DA:EB
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 019DCDF4D3692395D9F28FE9453C78F8DA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
Manifest number: 18ED
Signing time: Mon 27 Apr 2026 08:01:07 +0000
Manifest this update: Mon 27 Apr 2026 08:01:07 +0000
Manifest next update: Tue 28 Apr 2026 08:01:07 +0000
Files and hashes: 1: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl (hash: wTCSEy7jy8hZl2wucALYfIskORjY9GVlxfMMEMec68c=)
2: U5Hr7DVltimNN4exYtKNMwjtw8w.roa (hash: a1GYmzluOFIdh7d+x71WU9ozZYGhuTpIQod/AeGpY6Y=)
3: pnoNDnBxEfC2Y0eOSu3ZLvoJ8bE.roa (hash: fiAhIReHkKJDspHClaY6l1S5vNnjpZ4eQPqh1G/RGnQ=)
4: shwoCz68cKqwcN5qi3XrzWkO2xo.roa (hash: vsl5wyUpfTDJC2irw4CHdq3XYydWiX8/t9r4NWlOM68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:d3:69:23:95:d9:f2:8f:e9:45:3c:78:f8:da:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Apr 27 08:01:07 2026 GMT
Not After : Apr 28 08:01:07 2026 GMT
Subject: CN=7c1e6e536efd62998f83696a1a9e769dd65adaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1f:c9:77:65:af:e3:ee:26:15:b4:65:43:ed:
3d:52:6f:e8:54:b6:1f:ac:a2:0a:14:4b:cf:5e:48:
f4:c7:41:71:d8:c9:7b:04:31:f0:15:28:5b:56:90:
64:39:04:7d:19:cc:73:de:5f:52:46:96:6d:7f:f9:
d5:ac:5e:14:cf:8f:33:7a:2a:ce:a3:b3:e3:1f:80:
8c:f0:36:26:47:58:6b:63:6e:40:8e:45:30:08:9c:
b0:a8:77:94:e6:a2:31:c4:32:80:9c:ba:c0:9c:18:
9c:df:ae:72:5a:37:0d:0d:ff:30:a9:e3:d6:c7:7a:
7d:95:f5:30:af:93:70:63:23:c4:6c:bc:5d:ad:d4:
50:73:49:0f:e9:d2:a9:28:f9:e5:f0:06:94:56:8c:
7d:69:ae:1d:b8:8e:59:e3:6c:fa:fe:6d:03:c0:ab:
9c:b1:83:1d:45:80:ff:5f:9f:04:c7:a2:8e:77:30:
a2:6c:36:26:58:e9:32:36:ac:61:60:c4:75:16:d9:
e0:d6:1d:13:00:e0:de:39:82:05:69:31:5f:29:29:
6c:fa:09:4f:e3:6a:81:ca:f7:c3:d3:c8:d2:f3:e0:
24:8b:27:78:23:a3:a0:0e:21:b3:c0:70:64:c4:dd:
e9:6e:fd:bd:cf:e9:c2:07:ef:2c:a9:95:b1:13:77:
10:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1E:6E:53:6E:FD:62:99:8F:83:69:6A:1A:9E:76:9D:D6:5A:DA:EB
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:61:a9:f8:b4:10:27:e7:a6:f7:bb:f6:1c:9b:f2:fa:95:7e:
84:60:c9:f6:0c:fc:9f:b1:96:16:cb:2e:d5:2e:38:13:d6:60:
00:98:f7:90:f9:ec:3f:b5:d9:81:91:96:ad:f1:07:61:79:73:
35:4c:a3:bb:c7:f9:e0:c6:2a:d5:15:41:c1:74:43:f6:e7:d8:
e1:78:7d:1f:0d:e7:66:0a:a8:50:93:0e:6f:d1:7a:6b:73:fe:
00:31:ce:4a:e0:25:db:82:33:de:0e:aa:a0:53:58:10:20:ec:
7a:28:7f:11:4d:0f:02:5e:ab:8c:0b:6c:93:3c:66:30:43:c0:
20:a8:f7:18:d1:63:a9:84:ec:f3:56:5a:6b:ff:64:09:66:f7:
66:9a:c4:74:cb:eb:ac:a0:0c:b7:a6:20:ec:16:02:68:33:18:
dd:df:b4:6a:2e:e8:57:8c:43:96:8e:f0:6f:c3:43:2a:17:74:
83:3a:1a:f5:28:03:68:0a:10:d7:39:f0:f3:01:c9:9b:f7:20:
dd:f8:3e:a7:ab:ff:15:09:32:79:e8:f2:3e:e0:f4:42:01:6b:
7b:f8:1c:a2:5c:15:84:a8:83:90:d3:17:b1:05:7c:a2:a9:dc:
7f:2a:5d:a5:39:79:fe:a6:85:7c:5e:e1:3f:21:74:15:43:93:
f8:d0:96:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:05 2026 by rpki-client