Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: +RGjRZWn/fS/DigG8asPv95ezkderJnL87vwJjTbjNA=
Subject key identifier: 23:A2:6E:6F:B7:95:15:35:52:A6:2E:8A:52:05:6C:25:07:8C:CF:A7
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 019DCFE3DD82C955C84CB2D2C693A046D143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 0942
Signing time: Mon 27 Apr 2026 17:01:50 +0000
Manifest this update: Mon 27 Apr 2026 17:01:50 +0000
Manifest next update: Tue 28 Apr 2026 17:01:50 +0000
Files and hashes: 1: 0DAQlpT9x-QaKyJ8cOE4xeRFybQ.roa (hash: cLzURrgNbzm6pPzLt8hQc5OKqgGCPtGdJQ9/RRN5LZU=)
2: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: PechE1c95Fi8KO2IB1h0yD/VHbAt9/yu9NfeBiiABsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:dd:82:c9:55:c8:4c:b2:d2:c6:93:a0:46:d1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Apr 27 17:01:50 2026 GMT
Not After : Apr 28 17:01:50 2026 GMT
Subject: CN=23a26e6fb795153552a62e8a52056c25078ccfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:5d:13:e1:65:7a:4b:04:e8:d2:47:19:e5:
1b:30:93:f3:8d:03:bf:62:27:31:c5:72:3e:bc:fb:
19:89:59:f0:c4:ea:44:17:85:a0:b9:fe:50:53:63:
78:7a:e1:60:5a:0e:4a:9e:ea:b7:25:70:be:62:23:
a8:61:79:47:2d:df:d6:3e:80:b0:f3:58:a1:14:4e:
38:7d:27:a9:74:49:41:a1:aa:68:74:3a:8b:58:49:
ed:f9:8a:01:8c:00:b2:69:1b:a2:87:59:30:c6:ac:
56:3e:31:54:75:5c:c9:21:ea:90:3f:66:66:5c:89:
71:3f:ee:fc:95:71:46:cf:6d:df:5b:6e:fe:76:a4:
71:00:f9:d1:f3:91:bd:5e:a9:3d:b1:a8:e3:84:b2:
a3:2e:53:b3:4c:21:9c:7d:25:96:d4:50:63:e0:f9:
32:b4:f0:14:bc:f5:33:73:9d:d5:aa:88:71:19:16:
4a:42:0a:8e:f5:df:95:6b:c3:d5:ec:7f:b3:43:1d:
7b:3a:00:6c:c7:13:56:64:8b:34:5f:05:9f:9e:b9:
57:3a:9d:df:0a:df:26:32:b2:0e:4f:e8:d0:34:4a:
e4:89:b7:29:2f:22:58:c0:63:62:dc:67:ec:c0:b7:
4d:81:41:57:57:c2:98:7c:b0:13:f3:0f:7d:a2:3d:
eb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A2:6E:6F:B7:95:15:35:52:A6:2E:8A:52:05:6C:25:07:8C:CF:A7
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:64:c4:c0:84:3b:e6:28:66:49:51:84:8e:6e:f6:c2:ab:8b:
1c:18:89:2c:25:55:ba:db:c9:fc:c2:ed:0b:93:58:68:b8:a4:
52:a8:68:fb:c6:ab:b4:69:d4:f0:8f:26:ad:cb:f3:65:02:89:
b7:f9:d3:04:d1:73:a2:ff:0d:4e:31:8d:ed:a9:92:82:96:d6:
76:8f:aa:1b:f8:b0:8c:01:08:8a:36:7d:85:d4:c4:8c:a5:9a:
69:5c:c0:40:6b:28:b4:5f:8e:b1:79:ba:de:73:0c:33:42:0f:
67:85:88:af:f1:ee:ff:91:47:fb:0c:9e:84:3d:74:e8:db:63:
ef:74:09:2b:18:62:7d:ec:fc:3a:85:fb:37:46:42:36:19:3f:
38:ce:ec:80:37:f9:c2:bf:9a:7b:c9:fe:56:11:99:b4:7d:32:
f2:b4:bb:a3:04:33:52:9b:d5:08:8d:f0:7d:66:32:0b:09:1f:
af:74:e6:3d:5d:d6:d9:be:68:a4:3b:4e:3b:f1:34:17:0b:1f:
44:fb:8e:58:da:99:44:9d:47:ed:85:8f:27:04:d1:3b:2b:e9:
24:9f:98:78:e0:7b:4e:c6:99:a8:68:74:d7:f9:26:98:2b:9c:
43:21:aa:10:36:b6:b1:b3:d7:01:11:97:51:81:96:9d:7b:ed:
fe:87:ef:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:02:59 2026 by rpki-client