Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File: 9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier: mj2vEgnXt1zaaTMkHkiqIILzfoS2r5+RILz75g5Zhss=
Subject key identifier: 58:35:F4:7F:DF:0A:A5:42:C1:CB:80:E4:0A:3A:3B:E1:77:AF:3A:33
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer: /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial: 019D38D3D1AF64DD7E70F337D6E7B05EEDA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number: 0861
Signing time: Sun 29 Mar 2026 09:01:39 +0000
Manifest this update: Sun 29 Mar 2026 09:01:39 +0000
Manifest next update: Mon 30 Mar 2026 09:01:39 +0000
Files and hashes: 1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: snpBFCYGjpiC1jemQUF0seeMIV/JGRuwjdSsUYi/o0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d1:af:64:dd:7e:70:f3:37:d6:e7:b0:5e:ed:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54460596d6d532401de313df890366e5376d602
Validity
Not Before: Mar 29 09:01:39 2026 GMT
Not After : Mar 30 09:01:39 2026 GMT
Subject: CN=5835f47fdf0aa542c1cb80e40a3a3be177af3a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:6f:61:ac:b2:40:b7:cf:5e:9b:84:eb:73:
2a:c7:5f:6d:f0:1d:29:c4:a6:09:2d:ed:1c:40:d0:
d1:62:11:16:2a:e2:e8:cc:30:1a:cc:eb:d1:39:46:
00:aa:1d:3d:67:b1:47:05:52:5c:05:c7:0c:e8:79:
8c:f7:ef:90:15:8c:e2:6f:9f:f3:96:5e:e6:0c:c1:
29:2a:79:fa:13:98:79:28:76:1b:a5:28:39:d9:90:
77:85:45:63:fe:2b:43:69:52:ec:3f:1b:61:e7:a9:
46:59:42:6f:7b:f8:a6:10:63:14:6a:78:da:6a:f8:
bf:0e:ad:59:29:c1:b9:43:2d:8d:b6:a3:2a:5c:56:
74:19:72:9c:e1:5a:d1:4a:28:4e:24:95:79:a2:52:
0d:95:5e:56:cd:8a:9f:96:4d:25:a1:26:f4:38:d3:
a3:b1:01:5a:93:b0:6c:ee:3a:c5:b3:22:de:c7:1c:
fd:b1:f5:a1:5c:0a:76:3b:26:fe:3a:1a:a5:ff:c6:
da:ed:00:36:df:67:6c:29:74:e0:7c:1b:1d:d5:bd:
4a:ce:02:0f:cc:37:9d:4a:f3:c8:b1:4d:2e:97:6a:
a7:30:cc:b3:b1:20:6a:33:73:29:5d:d5:f8:d0:9d:
31:0e:2f:71:92:66:fc:b5:43:f8:d8:40:f4:40:a8:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:35:F4:7F:DF:0A:A5:42:C1:CB:80:E4:0A:3A:3B:E1:77:AF:3A:33
X509v3 Authority Key Identifier:
keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:55:c6:da:12:3a:a9:d7:1b:c5:e5:96:ad:35:9c:5c:1d:92:
44:45:fe:c4:73:47:10:1b:14:32:65:cf:57:13:4d:48:b8:53:
5f:be:93:51:bc:38:b1:55:94:2a:b9:9f:c9:19:c9:42:f4:e3:
8b:fa:a7:e7:99:d1:d5:73:32:7c:cc:08:0c:5a:05:99:4b:10:
ea:cf:e5:67:13:b3:05:45:56:0e:9e:14:18:1b:ac:1e:76:4d:
3b:f1:0b:65:17:e2:0e:d4:9b:8b:cd:a9:44:fc:c9:93:92:81:
f7:de:bf:51:9f:2f:b3:93:43:f2:93:7a:f5:72:19:24:f2:fb:
5c:e8:53:b2:37:83:a2:33:8a:d4:91:fa:24:78:e4:0b:4c:50:
16:2d:c1:69:f5:7c:ec:d0:1a:7a:6e:7b:b5:73:4a:6e:e8:fb:
f4:a3:f7:c6:d7:8b:03:51:a1:7a:e3:9f:81:c2:22:f7:df:7c:
ca:b4:00:63:4c:4c:c5:76:6e:6a:54:a8:d0:14:7e:67:fd:a8:
93:86:f3:66:93:2f:cc:ea:e9:4f:98:33:e8:00:4d:a5:80:52:
25:1b:ff:9e:28:d2:c8:96:f9:0f:4e:69:b8:9e:ff:03:32:5b:
a5:35:5d:21:f9:b7:90:be:42:7b:0a:8e:5d:6a:ec:ce:7d:8f:
0f:40:96:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:31 2026 by rpki-client