Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier: gJDlugY6FLe1Evmonb1NaNoyvS+m79NnBPSbgJ8K4CU=
Subject key identifier: A2:2F:09:7E:7F:21:DC:F8:2C:A5:6C:CD:AB:D9:B1:EB:DF:A8:B0:7C
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 019D382E164C729423DCF173F1629153D971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number: 11F3
Signing time: Sun 29 Mar 2026 06:00:37 +0000
Manifest this update: Sun 29 Mar 2026 06:00:37 +0000
Manifest next update: Mon 30 Mar 2026 06:00:37 +0000
Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: tahvgf84wzios1TBx9Ain7IxqHxoSSuRJMXcl4Gv+6U=)
2: vybKFSnUUtCvuNDjBmPdlEc4moI.roa (hash: NvnlzgrButbUBUuTuJIYrEkvgNvaHTxK68ujFnkuVpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:16:4c:72:94:23:dc:f1:73:f1:62:91:53:d9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Mar 29 06:00:37 2026 GMT
Not After : Mar 30 06:00:37 2026 GMT
Subject: CN=a22f097e7f21dcf82ca56ccdabd9b1ebdfa8b07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:11:95:bd:d4:c8:46:99:db:ca:4b:c1:0e:
28:7d:13:e2:4f:93:78:5b:9c:c4:32:0a:f3:4d:9e:
ac:4f:c1:3e:7a:a0:02:9b:0f:3f:4f:96:11:d6:e0:
14:82:1e:e5:a7:bb:3a:84:ae:88:4b:78:52:47:a2:
20:26:af:b8:61:a2:e2:df:b9:ca:dd:64:a8:6f:4d:
24:00:33:45:48:b9:aa:87:ea:1b:34:78:e6:db:58:
d7:40:ed:65:ed:57:10:fe:38:2c:8d:46:10:a8:59:
ec:fb:ae:09:f1:52:f1:ed:43:67:f5:82:de:e5:19:
9a:06:d0:e4:9b:4a:1b:de:4d:c1:0a:b5:d6:60:25:
c5:37:ca:3a:e3:05:1b:01:67:e3:92:bd:98:7c:69:
4f:fb:3f:be:4e:a5:79:df:4f:17:17:8b:6d:a4:64:
a5:53:e8:cf:51:1d:2f:16:d7:a3:6e:33:56:92:9c:
a0:b9:22:8e:51:8c:4e:25:1f:fb:21:ac:13:2f:4f:
67:ca:a7:81:bb:ef:de:02:62:16:a7:01:58:58:d5:
67:ad:ca:2b:25:d7:d9:4a:31:d2:82:e9:fb:fe:12:
9b:51:50:30:0b:3e:99:f3:c5:22:38:4f:32:d1:89:
c2:67:34:e5:e7:15:94:4e:be:68:9b:ac:9b:cd:1e:
d8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2F:09:7E:7F:21:DC:F8:2C:A5:6C:CD:AB:D9:B1:EB:DF:A8:B0:7C
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f5:94:73:ca:ca:db:4e:ea:bb:9b:bc:e9:3b:46:54:65:d7:
94:fa:e8:86:c3:e5:68:06:8f:b3:f0:96:28:a9:1a:8b:63:19:
4f:df:e3:cd:79:b6:f3:b2:d5:19:ba:12:86:40:e1:e8:ad:36:
f6:9d:23:d1:0c:44:57:dd:77:57:4e:34:fb:ce:20:a8:1e:5d:
92:f5:45:79:91:72:92:10:61:64:2d:34:12:57:d4:a3:50:d9:
d9:75:be:40:18:31:ce:74:8c:94:85:1e:0b:0e:1f:fa:be:cf:
9c:c6:2c:49:c8:64:ce:4e:f0:f3:9c:e3:f1:f5:1e:9e:93:da:
56:5a:56:3b:d9:60:80:80:e2:48:94:43:e3:f3:6a:0a:95:c6:
cf:cb:e3:84:cc:0a:96:7e:58:31:ff:17:fe:9e:8b:90:26:b1:
05:50:a4:f4:7f:42:12:bc:5c:d5:32:6d:66:0c:3a:ab:c5:c0:
91:6a:88:2b:b1:ea:21:c9:e4:16:e3:4f:dd:3c:26:77:2f:80:
96:8a:19:c5:9a:c1:19:50:75:cc:71:c0:ea:a7:bb:b6:63:cc:
f0:09:89:95:86:e7:50:58:71:65:d0:61:8e:41:c0:c3:1a:83:
44:45:4b:74:b3:76:3a:ea:8c:75:8d:95:d3:21:d8:c3:7f:95:
9b:4f:eb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:07 2026 by rpki-client