Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
File: 9IFCCQRj_g9JoTDRUYZql3F9RCo.mft (raw, json)
Hash identifier: 4QAaypnNmw8H8DFMhvTI0RmHum3HzwEo10VMVH4Tq8w=
Subject key identifier: 4E:06:63:EC:CC:C4:68:25:54:98:1C:26:FD:27:BD:7B:79:33:59:EA
Authority key identifier: F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
Certificate issuer: /CN=f48142090463fe0f49a130d151866a97717d442a
Certificate serial: 019D389BD226DEF2E0B1010B53D893D93F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
Manifest number: 05DE
Signing time: Sun 29 Mar 2026 08:00:29 +0000
Manifest this update: Sun 29 Mar 2026 08:00:29 +0000
Manifest next update: Mon 30 Mar 2026 08:00:29 +0000
Files and hashes: 1: 9IFCCQRj_g9JoTDRUYZql3F9RCo.crl (hash: w/9BqQskzpAC+YXb2vYLRDUGvjO78/dVzsMugI/k5WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d2:26:de:f2:e0:b1:01:0b:53:d8:93:d9:3f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48142090463fe0f49a130d151866a97717d442a
Validity
Not Before: Mar 29 08:00:29 2026 GMT
Not After : Mar 30 08:00:29 2026 GMT
Subject: CN=4e0663ecccc4682554981c26fd27bd7b793359ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d8:84:ed:66:bf:07:99:97:4c:0b:82:9d:7a:
6e:69:ef:5c:9e:5f:53:ea:41:44:e5:70:3f:9b:aa:
2f:e8:bc:cc:41:c2:c3:94:6c:ab:c9:19:15:fa:fb:
64:ad:4f:b3:6a:98:9f:6d:28:8c:48:33:f9:fa:f3:
bb:da:15:0f:2f:85:3d:f5:9b:45:fc:aa:55:d1:3a:
ae:e6:50:34:47:e5:14:8d:46:e0:19:7b:ab:ac:b8:
4d:6d:3c:5d:38:e0:7d:79:38:73:c1:8c:fc:51:8e:
09:f4:52:0c:0d:9c:43:89:f7:e4:ca:a5:4f:d6:10:
70:3e:d7:8e:d9:1b:5b:21:2e:90:fd:98:f9:de:2e:
6c:7e:6f:d8:e7:d8:60:39:c3:ea:42:59:8c:09:27:
92:8f:81:6a:65:55:98:58:08:9f:e1:10:46:c4:76:
62:93:f3:5e:6a:68:23:b5:48:6e:da:0a:62:b7:94:
af:54:fd:6f:5e:5b:2a:a9:6d:df:2c:f8:a9:4d:60:
b5:c9:42:44:d8:26:68:e8:81:73:b9:e5:c4:01:bc:
88:20:f1:f0:8a:53:d5:6f:31:3d:85:9e:e3:be:80:
cf:c7:f1:46:8f:60:a8:54:ed:a8:04:45:58:3e:7d:
e1:96:d9:5c:bb:cc:ea:62:39:1a:c4:e2:c0:94:51:
28:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:06:63:EC:CC:C4:68:25:54:98:1C:26:FD:27:BD:7B:79:33:59:EA
X509v3 Authority Key Identifier:
keyid:F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ec:d1:e8:1d:72:52:7c:f7:7a:40:1d:41:ed:07:ec:20:69:
59:73:dc:74:28:3c:c8:20:0a:e5:fb:06:f2:f8:15:1f:82:89:
c1:46:35:b1:ac:d8:78:21:ad:78:e3:ce:eb:f2:e9:36:0b:b6:
15:78:a9:b6:2c:a7:8e:9e:85:0b:0d:b5:4b:30:7f:76:c6:e5:
b1:81:a4:ee:93:4f:04:d3:91:d4:c1:af:15:f5:56:92:1e:2f:
cb:21:90:34:84:bf:af:2c:5d:e9:ab:1a:97:dc:39:67:0d:ab:
79:e1:62:7f:3c:cc:7a:e1:73:bb:49:13:32:ca:d4:8d:a2:31:
93:fe:72:2a:61:c7:ed:7b:6a:af:f1:d9:35:f4:2a:d9:d9:41:
b6:b0:51:63:64:04:7e:ed:79:75:d4:28:4c:e4:9d:5e:fc:f4:
eb:91:83:38:84:23:59:6f:df:2b:ed:0a:17:81:02:c8:e2:ad:
4f:e8:67:cc:d8:bb:33:e0:3c:84:d1:c1:9b:92:e9:96:81:c9:
e9:e3:22:e6:f3:5b:5f:7a:a0:db:ae:d3:4f:8d:f4:cb:fd:99:
f4:d1:7f:44:b5:e3:49:0a:79:1f:05:99:16:5f:c3:75:9d:24:
5e:ac:4e:95:eb:13:8d:79:4a:04:b5:f4:de:1b:66:da:05:43:
d4:a9:f7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:31 2026 by rpki-client