Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
File: c-9b03Yu9g-njtVfVE-joFE_2EI.mft (raw, json)
Hash identifier: 7pYOcLNAkl5hybD51KAsRnJcmzvz26Uwnw0RLmeqhHg=
Subject key identifier: 40:CF:C3:79:09:2F:C3:FA:8E:AB:93:62:B5:3A:EB:C5:55:3F:1A:44
Authority key identifier: 73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
Certificate issuer: /CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Certificate serial: 019D3865D28D1669F646D9D53B9D8BE1A061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
Manifest number: 1395
Signing time: Sun 29 Mar 2026 07:01:30 +0000
Manifest this update: Sun 29 Mar 2026 07:01:30 +0000
Manifest next update: Mon 30 Mar 2026 07:01:30 +0000
Files and hashes: 1: c-9b03Yu9g-njtVfVE-joFE_2EI.crl (hash: 5HfzHdB8iEwnI2ZHNCj1pNy4yRxDkNfnw3zXF7++L/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d2:8d:16:69:f6:46:d9:d5:3b:9d:8b:e1:a0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Validity
Not Before: Mar 29 07:01:30 2026 GMT
Not After : Mar 30 07:01:30 2026 GMT
Subject: CN=40cfc379092fc3fa8eab9362b53aebc5553f1a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:25:4c:e6:5a:50:fa:5f:7f:f1:2d:7c:cc:f5:
f1:e4:cd:07:40:b4:34:1f:13:1a:6b:d9:b9:e4:29:
dd:e8:49:7d:81:a2:8d:24:32:37:7a:90:d8:41:a4:
56:13:68:2b:d5:ca:0e:90:2f:4e:1c:69:fa:92:4d:
06:03:88:b7:df:47:93:46:58:62:36:2a:92:77:61:
60:de:2b:47:00:89:ff:43:13:92:36:4e:3b:73:f4:
65:77:ec:74:78:c3:0d:69:d4:93:75:cd:66:1d:f9:
5d:d6:c9:30:f9:9b:56:8b:0d:2d:5e:6d:bd:d5:26:
b1:7a:cb:9a:76:89:92:e4:db:d4:46:b6:67:65:c0:
9b:0b:e5:52:14:68:6a:b7:51:a1:5b:b8:c3:4b:33:
66:0f:9a:38:f7:1c:7d:92:70:46:36:ef:52:f0:88:
11:53:ad:36:58:e8:42:32:87:96:61:65:48:e6:80:
0a:0e:6c:f1:3b:56:66:10:5c:15:2b:04:d2:d3:e9:
ab:f7:4b:62:5d:64:bd:c1:e5:a0:58:f3:94:37:e2:
99:c8:a3:07:b1:4a:d7:47:98:61:ec:bc:14:96:2b:
2f:9c:0b:a7:da:bc:cb:08:94:c8:ca:1f:09:ed:8e:
5a:31:cb:f8:90:61:ce:53:c5:13:41:1e:7e:5d:85:
f1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CF:C3:79:09:2F:C3:FA:8E:AB:93:62:B5:3A:EB:C5:55:3F:1A:44
X509v3 Authority Key Identifier:
keyid:73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fe:6b:11:60:f4:1c:fa:fe:fc:19:a2:a2:05:b6:ec:cb:e3:
19:13:6e:c6:c7:b6:b7:06:8f:b3:99:65:33:04:3d:4b:d6:7e:
2c:18:d8:0f:22:5b:e7:e7:6c:cc:d2:af:6f:bf:3c:85:23:e7:
5d:b5:22:f5:b1:17:8e:d0:44:4d:cb:94:a4:20:00:8f:e3:89:
23:7a:96:8d:3a:2e:d9:cf:e4:da:0c:db:6f:57:d3:e3:81:30:
65:b0:eb:c2:0c:ca:14:4c:33:49:4d:44:e5:04:e5:53:a0:6d:
34:31:0a:17:31:c7:e8:56:42:0a:47:72:d2:3e:4c:1a:39:79:
8a:9a:5f:42:ab:c4:af:ef:bb:2f:0c:e2:4c:1a:20:a8:62:c1:
47:53:52:a2:ed:b3:48:b6:65:da:0b:c7:eb:ac:76:76:e1:04:
8e:0a:43:34:0d:e3:16:d0:bf:85:e9:68:1f:e0:7c:31:24:79:
98:f2:5f:e3:ff:ed:72:b8:63:0c:17:b1:0c:13:14:1d:27:43:
c2:40:ef:c7:a1:65:5a:34:c3:2b:5e:28:73:9f:47:e1:d1:fd:
10:b2:5e:e3:44:82:b2:bf:60:1b:5b:fb:80:48:b9:c2:f4:8f:
85:75:bb:99:cc:fa:87:1a:2e:62:be:c7:51:fa:37:30:e1:1a:
4c:dd:1f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:10 2026 by rpki-client