Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: UefnPWbVpdsvJFjB2O8/SiNHuim9HVWPaq1aL0rqMj0=
Subject key identifier: 02:95:8A:2E:6B:C4:C7:7F:EE:77:09:AA:45:D1:4A:67:92:6C:85:29
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 019DCC74180F4D8FA8E071E8DB755722816D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 18DA
Signing time: Mon 27 Apr 2026 01:00:53 +0000
Manifest this update: Mon 27 Apr 2026 01:00:53 +0000
Manifest next update: Tue 28 Apr 2026 01:00:53 +0000
Files and hashes: 1: BKEbuwMgtraLYD7tz_bOlWvPTyU.roa (hash: 4+VeGIyK69ig1zU9o8l43jPylF7T3GhRdlEeEiB531Q=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: Gomgyh3bEyyNZYbFcvVPAO4BF5xW25pQss/5pcqqsdc=)
3: zr9U94ldVmEqABzp28N8U7oLDs8.roa (hash: uuO8FGDaDTUpNR5s2Koo87GcscBCUOkl1Mw1TeypQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:18:0f:4d:8f:a8:e0:71:e8:db:75:57:22:81:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Apr 27 01:00:53 2026 GMT
Not After : Apr 28 01:00:53 2026 GMT
Subject: CN=02958a2e6bc4c77fee7709aa45d14a67926c8529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:74:c3:16:3e:f0:48:f6:8e:f5:ee:38:0a:
04:fc:79:dd:43:82:44:33:09:ec:74:05:34:25:ea:
ba:3b:cb:85:a9:75:33:f7:60:f7:50:5a:9e:d5:1d:
43:87:33:7d:06:43:6f:83:8a:0f:01:a8:6b:81:3f:
81:30:3e:e8:8e:1d:a4:00:5e:8c:e2:96:ab:a4:fd:
b8:5c:f7:95:10:2a:d2:9d:84:87:af:fb:18:3d:38:
8c:66:53:87:38:19:75:7e:d0:e5:2a:81:2e:9a:b3:
97:e1:43:34:e1:61:0a:09:00:fc:fe:46:f1:89:c9:
98:6a:ba:25:e6:2e:0f:19:ad:1a:25:ab:6b:78:f1:
2c:9a:c2:35:d9:09:3c:68:a8:b8:3a:2c:b1:6b:97:
c9:b8:02:dc:cc:04:b6:b8:9f:2e:0c:1c:66:f2:b3:
a1:b4:18:bc:db:d0:bf:1b:5b:85:fb:23:57:b5:46:
b1:cc:80:48:29:0d:13:51:bd:a3:a9:12:96:cc:67:
70:7f:49:55:db:c8:74:d3:e9:2e:d3:46:bb:96:c7:
88:6c:46:1e:4e:a4:ae:36:90:0f:7c:aa:8e:ea:5d:
85:dc:9e:91:68:db:0b:0d:d2:05:e2:8e:9e:03:c8:
b6:39:26:52:1f:68:a6:95:35:69:1a:19:81:ec:34:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:95:8A:2E:6B:C4:C7:7F:EE:77:09:AA:45:D1:4A:67:92:6C:85:29
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:50:8b:a5:f5:57:f5:f0:44:13:54:31:af:5d:10:ec:1b:f0:
b6:8e:2c:17:00:23:5a:ec:df:97:c2:3b:37:ea:74:20:13:dc:
a8:de:58:03:da:14:11:46:45:d2:b9:8f:5f:71:01:7f:37:df:
77:17:4b:74:31:7c:f7:d1:42:67:4c:c7:27:c7:cc:ed:b3:5d:
fa:0e:ff:8a:63:97:0a:52:ff:67:ba:da:ba:01:c4:17:ab:95:
27:02:c3:f3:02:d8:bd:4a:19:9a:7d:15:7e:91:9a:09:bd:4c:
f7:c6:a9:e2:49:bd:10:d7:ed:bc:1c:6e:ab:33:3d:25:c0:8a:
75:7a:01:37:91:6a:c2:80:ae:d3:de:56:5c:ba:ed:92:8e:e7:
bb:4a:fc:be:60:f6:c4:8e:c5:51:8f:fd:15:91:e1:d6:af:f1:
78:4b:35:fe:12:bb:b8:48:2d:4e:2a:83:c7:be:98:5c:5b:88:
0e:f9:a3:80:10:f5:a2:92:e1:2e:b5:61:f9:a1:f1:c8:97:16:
2a:94:23:63:c1:e7:2e:ec:50:65:2e:e9:90:65:f5:c6:5f:ae:
b4:18:f7:d5:e8:c3:7c:71:04:2d:57:24:68:32:ff:b9:d7:38:
cc:eb:9b:51:f0:92:b7:0f:8b:c0:df:e5:62:ea:b7:bb:0f:0e:
1d:ea:0b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:23 2026 by rpki-client