Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: uoan7+MX49eBPRIGS4HzBdCt6U+M4O4BIIgDBDWabC8=
Subject key identifier: 74:BA:6D:28:B2:3C:09:F0:26:90:0B:66:87:CB:A0:D4:14:A8:F6:EE
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 019DCF3E48CB369959D1E9002CE8EE2812A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0D58
Signing time: Mon 27 Apr 2026 14:00:58 +0000
Manifest this update: Mon 27 Apr 2026 14:00:58 +0000
Manifest next update: Tue 28 Apr 2026 14:00:58 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: fPvoU7V4F/eqSyKxz1nsEsD7Fm+0Hp0ezAo7qQVwuh8=)
2: B2xnjVLlq6B_PpOEtmPjM7HfJcE.roa (hash: Nq8Xgw/1x5u+OoYFPhSCZA8CfwNsYk4XNh9rnTNcOs4=)
3: jm5djjCBI4GuTu1q__jIGCgAw8M.roa (hash: aQBVu8CEknSd70NfkOxHQ8mA1JwVa6QyrHMRXeQPFvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:48:cb:36:99:59:d1:e9:00:2c:e8:ee:28:12:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Apr 27 14:00:58 2026 GMT
Not After : Apr 28 14:00:58 2026 GMT
Subject: CN=74ba6d28b23c09f026900b6687cba0d414a8f6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:39:ea:7e:1d:32:dd:6b:2a:f2:f8:fb:4c:
38:66:e8:a7:ab:9e:7f:f9:f6:4f:07:f6:3a:83:1a:
0a:31:71:00:3e:49:15:8e:56:86:cb:37:fb:b4:1b:
c7:f0:83:68:cf:d2:cc:62:1f:71:cc:88:f2:7f:be:
a1:ce:b1:79:7a:e1:9c:58:dd:07:5b:e9:b2:f8:72:
57:97:35:20:17:bb:ef:8c:c4:f1:4f:19:b9:9d:22:
8d:8d:ba:f5:57:db:32:1a:42:77:a4:30:b4:d8:18:
01:1d:be:08:82:c2:ff:32:7d:6b:6f:c4:eb:b9:97:
05:97:a7:81:0d:30:b9:f2:cf:83:09:72:f2:b1:65:
5a:b7:3d:1e:c8:28:87:83:9b:6b:51:64:97:b3:55:
b2:27:14:66:fa:f3:ef:9d:94:55:fb:6c:66:2b:53:
6d:fe:f0:0d:f2:03:71:e1:5e:48:dd:8d:90:46:78:
87:d2:74:28:75:87:f2:af:7d:ab:a6:07:40:91:1f:
f3:45:53:f6:78:70:a1:cf:a7:fa:5d:2c:67:b9:79:
e5:48:3e:7f:7c:27:22:fd:8d:01:74:e2:11:d7:ba:
37:ba:0e:c6:93:60:d7:6d:f9:d5:74:9e:60:8a:28:
91:7d:d7:85:64:f1:5f:e3:8b:dd:97:1c:d2:c3:7c:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BA:6D:28:B2:3C:09:F0:26:90:0B:66:87:CB:A0:D4:14:A8:F6:EE
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f3:e2:f0:89:04:a5:c7:ba:f6:55:87:7d:e5:f7:da:d3:e7:
46:ec:8b:bf:0e:0a:db:db:07:77:e4:26:d8:12:5d:f6:f3:65:
50:8b:fb:7d:49:10:98:8f:74:32:d8:44:61:0a:af:74:7c:0b:
19:84:10:b8:5f:4d:11:2a:4b:20:f9:67:b7:46:a2:61:ee:9f:
62:fd:01:1d:e5:8a:ef:51:65:f4:64:31:7a:84:b2:7d:1a:03:
ab:e4:07:3a:dc:54:84:29:6c:d3:e3:fa:54:c1:03:17:00:f4:
28:72:0e:61:88:bd:4f:9c:86:1e:a5:7d:5a:99:9d:13:f5:3f:
8f:10:c8:82:7d:fa:ab:70:80:ff:13:7b:bb:66:dd:f3:1e:b1:
0e:3e:0c:b7:d4:f0:ac:a4:16:02:31:8c:a3:b4:22:e8:88:d2:
24:39:5d:38:fd:0d:f5:97:08:8b:de:9b:89:7a:ce:03:24:d8:
be:39:32:82:8a:02:2c:4e:25:74:e7:65:f5:60:47:44:42:9f:
13:d5:5f:b2:d1:c7:ed:0b:18:1c:20:bf:2c:07:88:06:81:f2:
45:d8:9f:94:db:80:84:63:50:4b:00:22:c4:ce:75:ba:6a:34:
cc:90:a3:9b:ea:93:7b:15:cc:ec:de:71:61:d6:56:df:b1:cd:
be:18:27:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:08:56 2026 by rpki-client