Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
File: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json)
Hash identifier: QbPk0jZmWPh29ioZnunWnt424L7S5CrGw98bJzpPMvA=
Subject key identifier: 9A:D9:60:96:4D:66:84:77:94:6A:13:6B:A6:53:52:5E:CA:4E:61:D0
Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
Certificate issuer: /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Certificate serial: 019D37892BCBF5CDD31A09A2724056EA8F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
Manifest number: 0810
Signing time: Sun 29 Mar 2026 03:00:29 +0000
Manifest this update: Sun 29 Mar 2026 03:00:29 +0000
Manifest next update: Mon 30 Mar 2026 03:00:29 +0000
Files and hashes: 1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: W/DTdzWBhEmN9WWkpIxKze3VRcVvSN4nzNmiBne2oWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:2b:cb:f5:cd:d3:1a:09:a2:72:40:56:ea:8f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Validity
Not Before: Mar 29 03:00:29 2026 GMT
Not After : Mar 30 03:00:29 2026 GMT
Subject: CN=9ad960964d668477946a136ba653525eca4e61d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8f:8d:fd:08:e4:a0:84:4d:bd:57:58:95:43:
5c:d7:ca:5d:d8:f4:0d:f9:67:1a:28:0d:ea:88:52:
4e:de:9a:21:a8:a8:52:fa:f7:a5:41:86:26:81:74:
c0:d1:44:f7:5d:e2:ef:02:85:c5:db:d8:df:cf:1d:
7d:77:00:b9:2d:86:df:dd:2c:57:ab:7f:7d:71:20:
78:d5:c0:b8:55:75:71:aa:8e:1a:f8:ce:21:e2:43:
0a:5d:3b:a6:5d:ba:9a:96:21:98:23:2a:1f:83:ce:
8f:7c:87:d4:a7:f5:9d:0e:f4:6a:07:d2:73:9c:7d:
2d:c2:9d:93:c8:f1:32:4e:26:c0:3d:ed:c6:a5:50:
a0:79:a0:4d:36:0d:6f:f4:b0:85:78:e1:9f:85:b9:
dd:a1:9e:14:e1:63:de:d0:6e:46:96:56:f1:88:38:
5a:ec:01:8e:79:a2:dd:34:ac:ea:13:e2:3f:ca:72:
17:05:01:8c:48:0f:a5:ea:24:8f:00:da:91:73:d7:
dd:b1:e7:b2:65:ee:32:72:d2:80:28:04:2a:36:63:
88:14:92:ba:17:a0:a6:e5:98:bb:7f:79:a3:e6:9e:
ac:13:5f:30:58:b4:89:d8:36:aa:fd:0b:16:df:08:
7a:3a:d4:a7:36:39:ab:e1:2f:f6:6d:21:69:7b:03:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D9:60:96:4D:66:84:77:94:6A:13:6B:A6:53:52:5E:CA:4E:61:D0
X509v3 Authority Key Identifier:
keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8e:e3:6f:21:b8:90:88:46:9f:1e:d3:6a:04:11:46:e7:a9:
fb:68:3b:47:18:84:c0:b5:43:a7:fa:4c:7f:c2:33:41:19:e4:
cf:b0:60:34:59:f1:14:80:c6:7e:bf:87:79:5c:3d:d3:1e:0e:
dc:30:a7:93:77:53:1a:7e:8e:22:c8:ab:27:70:3f:52:29:15:
5f:06:ba:42:e7:bb:b5:62:b4:15:4f:d5:ac:98:61:19:ef:60:
9d:6b:c9:ce:cf:f1:f0:a9:f5:61:4f:32:2f:ba:e4:d0:e2:52:
be:6f:ae:fd:1e:1d:17:e4:60:56:b9:3c:e0:fe:85:8f:27:b6:
79:3a:96:57:68:5b:89:cd:5f:65:9b:be:8c:64:30:83:07:da:
5b:8b:78:93:ca:ee:89:33:4a:39:a9:7d:ad:b7:23:51:ef:9f:
1e:d9:ac:53:ff:38:a3:85:f8:41:0c:68:8d:f7:11:14:3b:d8:
8c:62:2a:79:4f:d7:2e:77:b1:31:67:b2:f4:47:1c:5a:e8:1b:
3c:78:df:c5:49:e8:18:30:d5:6d:e8:6d:ba:99:80:37:21:c0:
6c:01:0c:ff:1e:02:e3:24:34:7c:2a:f6:b4:31:4b:46:ab:1f:
ee:f4:e0:8a:01:5d:16:6b:5f:dd:98:a8:a2:b2:c6:f4:f8:27:
4f:85:06:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:46 2026 by rpki-client