Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/RpuB3YEM_-NrbEAXQg6Rt2vEkjM.mft
File: RpuB3YEM_-NrbEAXQg6Rt2vEkjM.mft (raw, json)
Hash identifier: 5F+g8KpAPEd2fIOpu3q7d15lIGaoP9EzxOkdfZk+WoE=
Subject key identifier: CB:85:9A:23:B6:BE:C0:50:18:CC:D6:E6:90:60:0D:92:CB:20:70:4F
Authority key identifier: 46:9B:81:DD:81:0C:FF:E3:6B:6C:40:17:42:0E:91:B7:6B:C4:92:33
Certificate issuer: /CN=469b81dd810cffe36b6c4017420e91b76bc49233
Certificate serial: 019D39E5C65D53182E4D488C113032C5BB7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpuB3YEM_-NrbEAXQg6Rt2vEkjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/RpuB3YEM_-NrbEAXQg6Rt2vEkjM.mft
Manifest number: C9
Signing time: Sun 29 Mar 2026 14:00:52 +0000
Manifest this update: Sun 29 Mar 2026 14:00:52 +0000
Manifest next update: Mon 30 Mar 2026 14:00:52 +0000
Files and hashes: 1: RpuB3YEM_-NrbEAXQg6Rt2vEkjM.crl (hash: GP9SU8Xx8S0Isfjrj8yOPUcA/y5mXRavwwEs45zJCMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/RpuB3YEM_-NrbEAXQg6Rt2vEkjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/RpuB3YEM_-NrbEAXQg6Rt2vEkjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpuB3YEM_-NrbEAXQg6Rt2vEkjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:c6:5d:53:18:2e:4d:48:8c:11:30:32:c5:bb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=469b81dd810cffe36b6c4017420e91b76bc49233
Validity
Not Before: Mar 29 14:00:52 2026 GMT
Not After : Mar 30 14:00:52 2026 GMT
Subject: CN=cb859a23b6bec05018ccd6e690600d92cb20704f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:10:af:62:3b:57:ec:f8:9c:1c:0f:61:bc:
a4:a7:73:04:3d:82:48:69:c2:65:eb:18:a5:8f:c0:
6d:86:fa:aa:4f:01:da:ed:36:a5:46:e3:c4:aa:f4:
9f:f8:d5:21:94:9e:03:46:c4:c5:0a:18:1d:17:71:
a5:87:f2:89:8a:92:99:1f:cc:df:1c:e5:1d:87:08:
81:fe:22:ae:30:fa:84:88:78:af:d1:e9:4b:92:7e:
d3:b8:37:fc:9f:2c:ad:dc:18:51:cd:e1:ee:73:17:
09:7c:ce:15:a4:c6:c4:12:f8:c1:15:0f:02:78:c2:
36:ac:a0:09:54:eb:53:44:c6:40:4d:3e:6c:ca:13:
cb:a1:13:b6:32:53:b1:6c:02:55:5a:1c:25:49:d2:
b5:a3:01:ef:a1:45:70:79:0d:dd:92:7e:5d:20:b1:
67:68:90:35:57:f3:70:7e:7b:30:c6:2c:17:ec:7b:
9f:78:df:b8:bb:8b:7f:47:64:2e:e7:4a:39:ff:da:
4f:fb:7e:5b:f0:06:a9:58:3b:d0:30:83:07:6a:33:
e6:d5:21:5a:81:82:b4:09:7b:b4:6d:f8:d7:1d:14:
43:7d:cb:8d:ce:18:14:78:99:73:cd:79:ae:9f:c0:
e5:e2:54:5c:d9:12:0d:50:2e:27:3e:89:23:33:02:
42:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:85:9A:23:B6:BE:C0:50:18:CC:D6:E6:90:60:0D:92:CB:20:70:4F
X509v3 Authority Key Identifier:
keyid:46:9B:81:DD:81:0C:FF:E3:6B:6C:40:17:42:0E:91:B7:6B:C4:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpuB3YEM_-NrbEAXQg6Rt2vEkjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/RpuB3YEM_-NrbEAXQg6Rt2vEkjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/RpuB3YEM_-NrbEAXQg6Rt2vEkjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f0:ea:c5:ec:c8:0a:68:fa:0c:a4:28:d4:02:83:18:90:64:
f2:e6:c8:59:4e:e5:95:c3:94:74:40:d6:29:ab:07:67:e5:d6:
24:e2:37:df:6a:e1:ed:b6:4b:e4:ee:14:93:d5:59:ba:3b:a2:
ca:f2:9d:fa:0f:0e:31:38:b4:4a:04:80:0c:78:08:b3:0f:89:
a8:39:18:c7:30:81:2e:2f:c8:82:50:13:bd:60:09:1a:be:dc:
19:f1:43:53:e6:3c:97:d0:0b:35:e8:bc:57:9c:8c:b4:f5:18:
80:3e:e4:1e:26:70:d9:d0:0d:b3:d6:83:ab:ec:df:d0:c5:e3:
84:48:0f:09:61:fe:c8:e6:b9:e7:ca:50:f5:9a:9a:c7:27:02:
cd:3c:88:af:d4:9d:6c:dd:f5:3c:e6:35:bf:fd:9c:6d:a9:b7:
26:37:d5:b7:44:c1:cf:f1:ad:af:f7:ce:e7:b1:75:67:35:21:
61:ac:43:40:ab:64:c2:f9:ea:e2:2b:c2:d0:76:a1:64:10:73:
8c:96:7c:58:ad:33:03:75:5a:cf:3a:b6:75:39:e1:46:fc:da:
81:fb:6a:75:7f:3b:1f:5d:21:7d:5c:79:c5:f0:8e:f1:98:c7:
b0:07:0b:a2:8f:68:83:56:8f:44:f7:fa:a4:93:b3:6a:e2:02:
9f:fe:ad:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:48:17 2026 by rpki-client