Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier: fjwt+ElfwrylslA5EP0huEQmy8zkO6rw1deRM9rUvb0=
Subject key identifier: FF:FA:52:1F:B6:42:B3:AE:CF:8D:D5:EA:5F:A4:2E:2A:E3:67:64:6D
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial: 019D37C11F97376A2D038E1E27D2F107C1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 04:01:36 +0000
Manifest this update: Sun 29 Mar 2026 04:01:36 +0000
Manifest next update: Mon 30 Mar 2026 04:01:36 +0000
Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: EwjfBqxDw+OPJhyzKX5MGen6a00oEH1uiIQ0idIIwBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:1f:97:37:6a:2d:03:8e:1e:27:d2:f1:07:c1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Validity
Not Before: Mar 29 04:01:36 2026 GMT
Not After : Mar 30 04:01:36 2026 GMT
Subject: CN=fffa521fb642b3aecf8dd5ea5fa42e2ae367646d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:81:67:ee:61:b2:fa:61:7e:06:45:84:30:
b8:fd:32:42:9c:45:ea:a0:29:c5:99:06:bd:c1:66:
df:74:c5:a2:6e:c8:50:e4:48:84:ae:2c:60:4c:58:
f3:a7:14:74:ac:61:d6:7b:57:82:42:bd:da:a3:3b:
f1:08:40:89:36:49:72:07:2f:8d:f4:67:a1:53:59:
70:28:c7:07:90:ff:2d:3b:28:42:28:6b:fa:7b:b3:
11:d1:d2:21:48:80:e2:32:0d:f5:ee:4b:85:a0:ce:
58:e3:e5:5d:d2:a8:42:80:3d:92:9e:7a:f9:4d:98:
9d:7e:99:a4:aa:1f:9f:db:81:9a:ba:d5:0b:41:e6:
d7:35:05:83:1c:50:d6:51:69:31:b4:69:c1:c2:87:
49:d9:0e:f0:6e:69:17:fc:5f:26:91:d3:52:cb:17:
68:44:c7:53:ba:85:1f:c2:f1:86:79:94:59:45:b6:
c6:f5:87:4a:a1:fc:55:e6:92:83:85:9f:2b:22:47:
95:98:23:c1:de:b7:27:6b:66:b9:d8:4e:1c:fb:ff:
e3:fe:3f:d9:38:d2:49:0f:a2:c5:f4:50:e4:78:c9:
7b:06:ef:55:85:9b:ce:3c:b2:99:d5:f1:49:ca:6f:
fe:c5:d6:ee:6e:63:f4:a3:5d:79:02:d1:d9:e7:9e:
30:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FA:52:1F:B6:42:B3:AE:CF:8D:D5:EA:5F:A4:2E:2A:E3:67:64:6D
X509v3 Authority Key Identifier:
keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a3:02:b8:31:45:a3:be:44:db:88:45:41:7f:46:06:52:06:
86:bf:16:36:c6:b1:08:89:58:58:6c:85:60:18:7a:a6:f3:ab:
51:21:d2:25:be:fd:fc:5d:c0:d1:14:9e:c1:a5:6b:c4:70:1e:
b4:45:c3:93:11:a9:94:15:34:27:5b:81:c2:0a:93:cc:9f:29:
53:06:4c:d3:f6:cd:b7:63:5f:2e:07:4f:da:37:c3:7f:af:5f:
b0:b2:a4:88:73:25:a6:e5:fe:56:2e:50:4f:19:d5:67:16:3d:
64:58:99:40:3b:a3:19:54:e0:b8:4c:47:b1:ec:20:74:9e:97:
66:5f:dc:db:cf:dc:4b:db:62:c6:0e:54:5a:84:c2:4a:da:eb:
ad:74:65:a0:d1:e0:c8:5f:ca:62:2c:59:4c:ec:8f:89:55:f7:
b7:e0:9d:79:d5:31:b2:35:9b:c9:97:79:79:68:23:a4:90:93:
3f:ad:29:3a:4e:fc:c7:e8:58:22:3a:db:9c:2a:37:ad:89:db:
be:af:83:1d:e6:8d:a7:64:68:33:0d:77:ee:de:28:dd:c8:24:
d4:64:d4:32:c5:6d:47:2e:71:b5:d3:73:c0:05:60:7f:84:fc:
ab:19:60:be:97:bf:53:85:78:fa:52:07:46:83:6e:52:ec:b6:
00:71:10:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:52 2026 by rpki-client