Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
File: 9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft (raw, json)
Hash identifier: ogWqjfm6FEVZau7uTSgeCGwr5obzbV5m+Ix1qWAjFuM=
Subject key identifier: F8:92:F4:3C:17:36:07:C2:CB:CD:9A:9A:BD:ED:9B:B4:A8:1E:54:24
Authority key identifier: F7:14:3E:85:7E:21:54:30:FE:0C:B5:2C:2D:F4:CB:ED:1B:34:73:8D
Certificate issuer: /CN=f7143e857e215430fe0cb52c2df4cbed1b34738d
Certificate serial: 019D37F71AA28C7862859006AF45FEA0595A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
Manifest number: 0231
Signing time: Sun 29 Mar 2026 05:00:34 +0000
Manifest this update: Sun 29 Mar 2026 05:00:34 +0000
Manifest next update: Mon 30 Mar 2026 05:00:34 +0000
Files and hashes: 1: 9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl (hash: orWrXxh91HF7ZDIQXldA/+6B9kqKw67H6fejpvmU8Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1a:a2:8c:78:62:85:90:06:af:45:fe:a0:59:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7143e857e215430fe0cb52c2df4cbed1b34738d
Validity
Not Before: Mar 29 05:00:34 2026 GMT
Not After : Mar 30 05:00:34 2026 GMT
Subject: CN=f892f43c173607c2cbcd9a9abded9bb4a81e5424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5a:32:b7:0e:c5:db:36:30:4c:64:3c:2f:61:
c9:b0:ac:3b:0b:80:15:07:86:72:14:a5:4f:ee:63:
14:8e:36:68:b3:02:36:7c:fe:61:21:c0:74:da:a1:
d0:55:c0:99:61:4f:46:01:30:c9:fc:57:c6:4b:b5:
35:c8:bf:6c:ed:d4:59:e7:11:13:94:aa:8c:a4:4f:
26:5f:b9:47:1c:12:7f:fe:53:91:5a:2b:d9:d2:3b:
56:59:76:44:a6:ec:76:98:3f:fa:d2:87:fd:10:10:
ca:50:2e:46:20:5e:1d:f5:62:6f:91:02:47:c7:9d:
a6:90:c2:88:14:a1:c0:02:37:2d:27:2a:05:c0:20:
3e:e1:ee:73:66:e0:b8:c1:a6:d7:eb:6d:04:a1:2a:
f8:01:72:fe:51:cc:df:c6:fc:90:3e:2e:08:a9:67:
1f:17:14:bc:7e:65:17:b7:89:5c:38:86:44:9f:30:
04:fb:0d:ef:70:73:fe:3b:9b:03:77:4c:35:5f:b8:
7b:73:60:8b:4c:b5:d5:64:2d:18:7c:00:62:2c:bc:
a9:eb:ec:dc:4a:8e:2a:0c:7a:2b:2e:06:e7:c3:86:
9f:09:13:9b:54:50:ef:e1:0e:92:aa:fd:24:b4:57:
f0:9e:36:ec:53:af:34:6e:7a:a2:93:a3:21:5e:48:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:92:F4:3C:17:36:07:C2:CB:CD:9A:9A:BD:ED:9B:B4:A8:1E:54:24
X509v3 Authority Key Identifier:
keyid:F7:14:3E:85:7E:21:54:30:FE:0C:B5:2C:2D:F4:CB:ED:1B:34:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c2:b2:09:18:26:f4:42:69:77:6c:d6:b0:a3:6a:05:65:74:
8b:bc:f0:32:f9:48:47:4e:3e:f9:59:c4:e2:94:e1:5d:cd:af:
8b:fa:c6:18:be:ea:fc:ab:f0:b8:58:ea:3a:4b:02:32:dc:32:
2e:dd:72:6d:1a:7c:9c:af:bc:e0:fa:cb:ce:18:ba:25:1e:db:
66:c0:57:38:02:cc:41:b6:85:d0:ac:1f:9b:42:aa:4e:6e:95:
a1:0e:ac:33:a4:77:47:68:60:67:86:42:9f:de:7d:40:e3:d7:
06:41:ea:dd:e8:27:28:a3:13:df:d8:24:04:03:5f:99:44:33:
69:7a:b8:9a:59:4f:9b:b8:af:0b:b8:c7:2f:54:48:ce:20:21:
7a:1a:14:0c:47:fa:85:0a:71:5a:f3:3a:b4:5e:9a:4e:4f:d1:
1a:ff:42:cb:80:6b:e2:ae:12:10:5f:e1:1c:8c:ce:b9:74:8a:
c3:68:91:70:3e:01:7c:ac:d8:9f:45:8c:03:5b:6c:82:dd:17:
f6:f4:61:e5:c5:2b:59:1b:6f:30:0b:d8:90:b6:31:d8:db:c9:
7b:0c:50:cc:54:91:ac:19:f0:67:27:ce:32:76:73:64:86:a8:
bb:06:ae:b2:d8:df:6d:b8:10:5f:7f:36:0f:a7:ba:b0:ab:c2:
ea:f0:2b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:53 2026 by rpki-client