Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
File: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft (raw, json)
Hash identifier: UceJRc6uC5YJ4Q5UeZFmWPEHNBcEXlhTexqv7Xy09RY=
Subject key identifier: D4:F3:C4:E7:89:05:4C:21:CB:4B:58:62:82:22:6A:B3:83:4E:45:9C
Authority key identifier: B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
Certificate issuer: /CN=b7d296d69059457be39c3c82466aceed02766836
Certificate serial: 019D38D35284B109FD1BEDA393D93319C7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
Manifest number: 0981
Signing time: Sun 29 Mar 2026 09:01:05 +0000
Manifest this update: Sun 29 Mar 2026 09:01:05 +0000
Manifest next update: Mon 30 Mar 2026 09:01:05 +0000
Files and hashes: 1: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl (hash: prTWjU4kYELLUaoR3bmJEDfxKdd0ikCjvggzskbJ/jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:52:84:b1:09:fd:1b:ed:a3:93:d9:33:19:c7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7d296d69059457be39c3c82466aceed02766836
Validity
Not Before: Mar 29 09:01:05 2026 GMT
Not After : Mar 30 09:01:05 2026 GMT
Subject: CN=d4f3c4e789054c21cb4b586282226ab3834e459c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:1e:87:a5:fb:b9:74:83:55:91:57:81:f4:
64:10:75:85:51:05:a7:71:d0:4e:c1:af:f5:f4:36:
ab:cb:01:b2:00:98:e0:52:6f:1b:a8:f9:75:53:26:
29:e3:f5:fc:9d:a9:c8:ff:31:90:ac:43:73:d2:8b:
14:e6:58:87:00:32:42:aa:76:19:85:69:42:65:23:
5e:24:9f:66:2b:e6:a4:35:45:e3:a3:d3:b2:c7:f8:
23:73:86:fa:4c:eb:86:54:82:b7:25:97:c4:b7:5b:
e8:20:f6:68:0a:ea:7c:f2:b5:00:5d:9b:c2:e8:47:
d6:d7:f5:e4:a7:ba:2d:3f:f3:29:fe:b9:43:b9:21:
46:ae:63:55:e0:c7:2c:c0:5e:cb:24:47:37:cc:f0:
ef:ed:0d:a4:0e:ab:e4:40:ac:a7:70:35:f3:6d:43:
e5:ad:4e:e3:b5:a1:41:23:e7:79:af:5f:7b:5a:a4:
f1:c0:4e:7b:a0:a8:ac:6b:df:33:ae:81:e5:03:26:
73:81:55:52:2c:d3:93:5a:e1:84:6f:17:e3:dd:af:
6b:4f:69:74:ee:2b:28:91:9b:48:84:f0:e9:ab:15:
40:d5:5c:2c:e6:12:48:57:b5:5f:db:9d:62:51:e1:
ad:2b:1a:b7:d6:93:4d:9b:4a:70:23:81:24:80:8c:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F3:C4:E7:89:05:4C:21:CB:4B:58:62:82:22:6A:B3:83:4E:45:9C
X509v3 Authority Key Identifier:
keyid:B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:39:af:8f:35:a1:c0:51:66:34:ae:2e:a5:f2:ee:6d:fe:e9:
0b:ef:b8:37:a3:1d:33:2e:66:f1:c0:4a:b5:6f:eb:93:3f:d8:
bc:86:15:7d:78:de:5f:3f:14:6b:9d:c6:bf:03:7f:3d:df:42:
57:d1:46:2d:0e:f0:52:92:96:98:66:67:42:92:ba:d2:b6:fd:
81:7c:74:67:eb:5a:88:87:ff:da:8f:35:b0:e1:20:b0:60:4b:
a3:d2:aa:7d:0e:3e:08:07:01:40:25:a6:c9:e5:f3:7f:61:f3:
f7:99:f6:bb:1a:b2:0e:d3:a4:ca:d5:08:71:61:a2:be:f8:dd:
d0:4c:da:21:0d:8e:82:97:0b:b1:cc:fa:c1:eb:b8:e6:c3:05:
e6:a8:86:74:da:91:8c:4f:e5:52:26:fb:2b:28:61:e1:5f:9e:
22:eb:46:46:c7:5e:0e:73:f8:5d:ad:4c:d6:72:e9:5c:05:6c:
96:97:e8:b0:06:e0:e8:cc:3a:fc:88:c1:ae:93:fe:1d:db:b4:
39:ff:c5:48:7c:f6:b8:03:79:ef:12:44:b9:2b:60:98:f0:42:
9e:10:f4:8d:ce:e8:30:44:0d:a0:5b:7f:a0:ca:a7:58:af:53:
40:3d:d2:af:68:16:c7:ba:79:ef:c3:f4:fb:1c:6b:a9:c7:3e:
92:f0:aa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:48 2026 by rpki-client