Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
File: 9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json)
Hash identifier: 0NP+QKSGfedpjCx1nO7Je2lYgOLk8iSiyb9ZfC+GuA4=
Subject key identifier: D4:28:1B:F0:B6:26:B0:61:05:72:A9:A6:5D:F4:EB:35:5C:38:D7:9C
Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
Certificate issuer: /CN=f67d67da8860b8322c4f204d611b006138f1b391
Certificate serial: 019D371BA1C689543394C61CFD0D488172B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
Manifest number: 058D
Signing time: Sun 29 Mar 2026 01:00:50 +0000
Manifest this update: Sun 29 Mar 2026 01:00:50 +0000
Manifest next update: Mon 30 Mar 2026 01:00:50 +0000
Files and hashes: 1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: Y71T+Uz6mK2VfEfWBqvHsWpGLSvG/sLaRdIO7VWiIH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:a1:c6:89:54:33:94:c6:1c:fd:0d:48:81:72:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391
Validity
Not Before: Mar 29 01:00:50 2026 GMT
Not After : Mar 30 01:00:50 2026 GMT
Subject: CN=d4281bf0b626b0610572a9a65df4eb355c38d79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:b8:fb:11:32:95:1d:d5:b3:52:26:06:13:
54:85:fa:d4:d5:eb:bd:d3:d5:9a:60:07:bd:61:af:
4f:ad:9a:4a:2e:cc:4b:88:ac:78:06:fa:f9:f2:6b:
01:f4:b2:84:39:4b:a2:85:19:23:24:e2:a5:39:1b:
67:ed:e2:4d:b9:10:45:95:10:fa:62:92:88:6f:a5:
8f:3e:fd:f5:bc:68:9e:bb:fd:5d:c6:b1:16:15:f4:
38:fc:e6:e7:81:6d:0a:07:6e:04:48:d1:86:e2:8e:
ab:e6:cb:49:b7:53:b9:cd:bb:ff:ee:48:9d:ce:00:
1b:54:87:79:c9:9d:8e:5d:f5:13:1b:5f:84:24:bc:
0f:a9:90:02:3e:af:0b:d5:72:5e:6e:81:4b:e0:62:
f5:e2:69:16:22:07:2a:14:da:89:13:63:78:d6:c9:
04:2c:67:23:4b:44:19:84:cd:86:da:91:f4:14:81:
12:f2:45:55:63:a6:8f:b1:c7:ac:ba:46:61:1e:b8:
41:fe:82:06:ce:d3:0b:7e:a4:ab:25:eb:1b:f5:48:
88:f1:2f:11:80:83:4e:6d:fb:a4:ef:9e:7b:ee:41:
12:87:5a:59:8a:0e:85:8e:b0:9a:47:02:38:bc:98:
03:a3:e1:bd:2b:0d:46:44:24:ef:93:7c:83:42:76:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:28:1B:F0:B6:26:B0:61:05:72:A9:A6:5D:F4:EB:35:5C:38:D7:9C
X509v3 Authority Key Identifier:
keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:37:e6:66:ff:b5:4b:d6:0d:29:f0:d6:da:b1:36:da:84:dc:
d0:f8:1a:e1:19:8e:f1:31:59:7f:d3:3e:26:65:1c:1a:48:b1:
80:16:b2:1f:2f:8e:52:c1:c8:c9:14:49:b4:75:cf:0f:84:6d:
ac:72:2d:ee:c1:3d:d4:05:cd:e8:52:47:ef:70:84:de:35:48:
75:7d:b6:63:8c:7d:69:37:60:dd:f2:e0:68:09:d2:48:70:ca:
94:00:b5:96:bd:6d:76:9c:16:e3:11:5c:c4:b7:2b:d0:e3:89:
18:d1:2a:54:49:12:59:8e:57:f2:15:95:0c:9c:85:80:5a:08:
2e:93:5a:8e:a2:7b:ad:43:8b:ba:a1:dd:4f:62:5a:da:ea:07:
87:9d:2a:a8:0a:fe:57:68:a5:28:71:04:12:a7:f9:9e:d8:33:
5a:59:ac:2c:1b:1a:b1:ef:8d:ac:c0:fe:14:e3:4e:a6:33:99:
38:fd:e0:71:b2:05:8f:7c:45:9d:36:4b:85:48:df:e8:a6:21:
ad:db:ab:a1:ed:d8:69:0d:ce:f2:c0:86:21:a1:0a:77:0e:11:
4d:b1:1c:8e:56:69:05:65:9e:ee:c4:5b:c0:68:ed:7e:8b:91:
f1:75:49:f4:b2:64:b5:1c:51:b5:a2:f5:ca:a2:80:b7:44:d6:
69:22:91:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:40 2026 by rpki-client