Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
File: 9h0r7udUOkGpCKGgHs_AqHJqOuI.mft (raw, json)
Hash identifier: yVHzCaonoI8T9tEoj1LM6Q9ybKdyEHaJgnjN2JAOQTc=
Subject key identifier: 07:6D:18:FD:E3:C6:E8:6E:63:31:56:69:7B:E2:EE:78:6F:BF:5C:3F
Authority key identifier: F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
Certificate issuer: /CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Certificate serial: 019D378984566215221048E351B57745A1FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
Manifest number: 0D30
Signing time: Sun 29 Mar 2026 03:00:52 +0000
Manifest this update: Sun 29 Mar 2026 03:00:52 +0000
Manifest next update: Mon 30 Mar 2026 03:00:52 +0000
Files and hashes: 1: 9h0r7udUOkGpCKGgHs_AqHJqOuI.crl (hash: cDSlbJnlgcJEGDLOxbJp95sf0bVTkMYk0Ft8gVl/pII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:84:56:62:15:22:10:48:e3:51:b5:77:45:a1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Validity
Not Before: Mar 29 03:00:52 2026 GMT
Not After : Mar 30 03:00:52 2026 GMT
Subject: CN=076d18fde3c6e86e633156697be2ee786fbf5c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9f:9c:8d:2a:02:24:f8:07:e1:e1:22:5a:35:
85:66:70:6b:da:2d:5d:99:5d:f7:dc:87:20:e4:5e:
e9:9a:51:26:db:19:50:61:20:66:4c:23:16:69:7e:
88:a3:61:d5:92:0c:9e:5f:2b:f2:d1:ba:78:86:32:
28:45:1e:0a:6e:ef:c0:76:6d:ed:40:e9:f4:35:84:
02:e2:ce:b2:17:d5:08:d3:3a:b7:f4:79:e8:fe:b2:
96:aa:f5:f6:a1:75:6c:50:c9:09:c7:c2:e7:b4:4b:
19:5b:61:34:30:47:b2:54:77:22:35:e0:e8:d7:1b:
da:72:17:b6:7f:0e:ad:61:47:c0:6a:ec:b0:c9:fa:
10:00:b4:ca:91:50:d3:60:1b:48:ac:18:7e:cd:3e:
5e:e0:54:7d:e7:c2:7e:b1:70:2e:0d:6c:e9:1f:f9:
c2:78:ef:e7:2c:3b:3a:76:2e:ae:be:b8:a2:a7:c6:
86:97:16:8b:1d:5b:6e:f1:02:16:36:37:3c:e7:34:
c4:d8:6b:3a:09:31:42:b5:29:e6:6e:c7:d8:eb:9e:
cf:69:bc:0c:02:95:43:a7:94:49:20:5e:14:7d:ae:
02:b9:83:b1:0f:22:ef:a7:f9:f0:7d:99:48:f4:c0:
fb:4b:93:fb:b0:61:bb:2a:1c:05:3a:1d:8d:85:47:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6D:18:FD:E3:C6:E8:6E:63:31:56:69:7B:E2:EE:78:6F:BF:5C:3F
X509v3 Authority Key Identifier:
keyid:F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f3:7e:d4:b3:55:be:5f:b1:75:03:cc:f7:65:43:da:1c:ec:
25:7c:1d:5b:d8:d9:2d:6c:d8:0e:d3:eb:e2:e4:aa:f6:6f:98:
d6:d6:dc:94:43:67:8c:fe:38:0b:07:7c:1b:00:1e:ad:74:4e:
bc:13:29:3b:30:46:16:55:e8:88:56:da:ec:23:47:78:15:b5:
49:29:ad:ef:83:ca:26:b1:a3:0b:46:85:70:80:b7:42:e8:32:
d0:15:40:c9:9c:46:c5:9c:dc:e1:07:5b:51:08:99:47:e1:ff:
9c:dc:5a:91:81:a0:07:1a:2b:88:bc:48:3b:97:70:4b:9c:92:
d9:e6:6c:6b:5c:28:d5:ba:09:41:a3:f9:9f:da:62:1b:50:80:
cd:69:42:26:05:ac:aa:81:63:36:4d:b1:5c:e9:8f:1f:9c:1d:
0a:e9:33:24:53:46:7e:5a:cf:39:9d:bd:ea:db:52:ed:a6:ae:
53:6b:1f:64:c9:81:b3:39:1c:25:06:04:d9:39:b9:9b:17:ad:
0b:07:2c:46:d0:ce:fb:c7:b4:7f:a2:96:89:79:5b:f9:41:a0:
1c:72:44:9e:bc:6c:81:e0:91:f9:51:f7:c6:43:e8:1e:19:12:
75:47:40:9a:be:36:b8:ab:e7:11:db:85:43:e8:cd:8e:6f:d2:
7b:40:86:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:46 2026 by rpki-client