Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File: 9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier: Z4f5fLVCrhNOpf3WXrvJs4XNtoK5JO3gg40vOiK0vVw=
Subject key identifier: 0B:C2:30:B9:24:0A:94:4E:2F:0D:4E:66:00:6A:AF:7F:FE:E1:53:DF
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer: /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial: 019D38D39977647250F7EEF1588B52524E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number: 17A5
Signing time: Sun 29 Mar 2026 09:01:24 +0000
Manifest this update: Sun 29 Mar 2026 09:01:24 +0000
Manifest next update: Mon 30 Mar 2026 09:01:24 +0000
Files and hashes: 1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: SCAcPcNJE8x2DiNfSAwS5GWGqg67aoF0xqYTwR97Q2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:99:77:64:72:50:f7:ee:f1:58:8b:52:52:4e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Validity
Not Before: Mar 29 09:01:24 2026 GMT
Not After : Mar 30 09:01:24 2026 GMT
Subject: CN=0bc230b9240a944e2f0d4e66006aaf7ffee153df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:88:88:a9:7e:9d:f0:a3:ef:33:c3:ad:70:65:
30:e1:7a:43:1e:1a:35:02:29:96:98:38:8b:54:84:
e3:4c:25:42:6c:5f:a7:62:c8:18:d7:f0:b3:d1:4c:
e2:0f:39:55:3b:21:2d:fb:ba:7a:a2:94:5b:8c:ae:
cd:13:35:ec:76:47:92:3b:8e:18:21:aa:7e:e5:0c:
e1:7e:73:0a:c2:17:63:3b:f7:7d:c2:cc:2b:f2:e1:
7e:42:4b:2f:05:71:34:bf:89:12:90:9f:63:50:16:
96:1c:6d:c4:b4:f1:22:b4:70:7a:bb:21:9a:8a:df:
92:5e:75:4f:11:4e:22:50:51:a2:ec:e8:bf:75:bd:
2d:02:cc:2e:b7:ca:80:05:2a:b6:54:a2:34:61:a5:
02:15:02:35:aa:44:97:8d:05:3b:0b:ec:19:74:62:
bb:88:68:f7:cb:ed:4d:ee:ae:68:cf:00:4b:18:28:
e5:a9:14:a9:96:3f:40:6c:16:8c:32:b4:1b:66:ee:
95:1d:c4:b4:3c:f1:64:85:41:f3:10:91:14:4e:95:
90:f5:0b:23:80:2c:24:11:86:3d:bd:36:74:41:82:
89:22:b6:68:d4:6f:86:59:28:62:cc:7d:62:bf:3a:
dd:13:e7:4f:49:72:3b:48:e1:44:6e:a4:f3:73:c2:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C2:30:B9:24:0A:94:4E:2F:0D:4E:66:00:6A:AF:7F:FE:E1:53:DF
X509v3 Authority Key Identifier:
keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c2:c5:df:e0:76:7e:48:21:72:ae:68:14:27:1f:e1:2a:3f:
2a:fe:28:e5:65:b8:46:f5:b4:e4:8a:16:bc:d3:07:6e:16:0e:
dc:af:79:eb:8b:e9:69:6e:77:6d:7c:72:30:60:98:a3:1a:55:
cf:a5:6a:c2:3c:5e:86:79:17:3f:97:fa:54:d1:0a:e2:ea:09:
4a:e2:74:bb:97:47:c0:4b:01:ca:69:3b:e7:6f:0c:25:a3:2e:
66:2a:a9:9e:f1:68:d9:52:d0:22:31:8d:8f:03:fa:8f:ba:39:
0a:fa:59:80:82:88:97:7e:4f:38:2b:7e:84:f8:9a:c5:20:0d:
44:5d:c7:79:04:33:07:8e:70:42:0d:df:65:d5:c8:d5:1b:c2:
87:a7:0f:4a:7c:c2:bc:cd:8c:d3:0a:17:3d:9b:df:21:08:c7:
73:a7:46:a9:56:5c:f2:c2:fc:5d:34:39:9d:46:24:7d:3e:9e:
35:dc:af:cd:e2:02:5c:27:6f:c1:70:87:ce:b1:01:9a:13:cd:
9d:35:15:02:d9:2a:83:34:a1:69:0a:07:43:99:06:15:0e:84:
0f:ab:01:d1:97:0a:b3:9b:48:fc:43:c4:a5:08:b4:89:76:79:
38:4a:31:2c:72:b9:dc:37:45:1d:72:64:a2:ea:7a:48:87:14:
cc:17:04:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:53 2026 by rpki-client