Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
File: 9M3Ux8i_hxhwMKZEcCColvQeSZM.mft (raw, json)
Hash identifier: NfOVt9KmPQj6LctRES7qtjECbrxA89wovgjmmOgb6Lo=
Subject key identifier: 35:39:CB:B0:F4:1A:D7:76:AC:D8:E5:B5:09:0F:62:F5:D5:FC:FA:8D
Authority key identifier: F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
Certificate issuer: /CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Certificate serial: 019D3865AE6BB23A2EC7B75CCDADA70D21AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
Manifest number: 151D
Signing time: Sun 29 Mar 2026 07:01:20 +0000
Manifest this update: Sun 29 Mar 2026 07:01:20 +0000
Manifest next update: Mon 30 Mar 2026 07:01:20 +0000
Files and hashes: 1: 9M3Ux8i_hxhwMKZEcCColvQeSZM.crl (hash: IFOmN4Qdiyy4HtVykJrs0KzRSLG0NczM8Fuq4LGlcvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ae:6b:b2:3a:2e:c7:b7:5c:cd:ad:a7:0d:21:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Validity
Not Before: Mar 29 07:01:20 2026 GMT
Not After : Mar 30 07:01:20 2026 GMT
Subject: CN=3539cbb0f41ad776acd8e5b5090f62f5d5fcfa8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:6d:aa:16:98:db:65:d3:a4:35:88:1c:8d:
a0:3f:c5:0d:85:e2:67:7d:38:e5:82:a4:32:3b:21:
f5:91:13:68:23:54:67:be:4c:c1:91:1e:ce:ce:07:
bf:5c:39:cd:10:69:4f:d9:61:32:14:cd:4f:52:e5:
47:41:0c:2c:78:00:50:33:a6:61:69:9d:6c:c2:9b:
c2:64:13:af:82:90:e3:a6:18:c1:db:bd:b2:24:ef:
0b:56:6e:6f:cf:0f:43:6b:1e:f4:75:32:30:75:9d:
c2:41:c3:b7:aa:c3:32:93:10:36:00:a2:55:35:18:
3e:dc:47:6d:b6:11:39:e5:88:05:1d:f5:25:8f:18:
fd:2c:0f:e2:be:68:ba:a7:e1:8c:d1:34:82:81:28:
7d:fc:fd:c6:68:77:54:05:b7:9f:a8:71:4e:81:4a:
0e:d7:0b:e5:eb:1e:33:55:90:76:a0:00:f0:86:20:
d0:29:6d:10:a9:7f:78:5c:f3:49:d3:d6:06:0e:22:
2d:2c:b4:8e:7b:b4:1b:a9:ed:f1:9c:98:4d:a8:db:
25:b5:70:43:d5:73:89:5b:25:fb:d9:a9:ee:ac:ad:
5d:d3:43:2a:92:db:7d:60:00:90:b7:09:e5:5f:c7:
58:c4:df:ed:78:65:28:0f:d8:6b:5e:18:47:ea:e9:
db:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:39:CB:B0:F4:1A:D7:76:AC:D8:E5:B5:09:0F:62:F5:D5:FC:FA:8D
X509v3 Authority Key Identifier:
keyid:F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:96:cd:9d:e5:41:1e:b5:bc:70:a7:91:e0:80:ab:3a:90:65:
3c:6a:fa:43:03:61:83:88:da:c0:31:63:9e:38:88:8e:75:5d:
ab:10:d7:4a:93:5f:5d:61:ff:da:a3:aa:37:90:d5:ad:49:89:
c9:76:bd:fa:d3:e6:5d:5d:53:5f:1d:d6:35:e0:73:bc:be:96:
65:bd:30:17:41:9f:3e:37:53:11:55:7a:5f:df:92:68:18:5a:
f9:ba:d8:e6:9e:5b:69:e7:ab:a2:e6:ee:fc:a6:30:93:b7:f2:
71:40:d8:9d:28:0e:58:e8:73:f3:c8:65:0e:82:14:e9:70:71:
32:40:b8:c1:66:b5:69:ab:c5:21:21:34:48:56:3a:e8:4d:7b:
82:8a:e8:8e:96:09:ea:45:ef:71:68:3c:ca:42:c3:b4:b5:35:
48:21:c0:49:62:99:96:1e:b1:8a:7e:16:36:0f:22:d4:c6:02:
41:e1:59:fb:02:b7:3f:4e:86:41:53:95:42:85:f3:8e:bc:8c:
68:ac:81:ba:32:dd:47:bb:46:3b:d9:fd:4a:70:cd:34:99:3b:
9b:99:52:cc:6d:da:29:3c:58:08:c0:dc:37:39:4c:73:6b:80:
35:43:8a:e1:b7:f1:a6:3b:ae:c0:cd:d9:07:c6:5f:e3:cb:c4:
f4:da:6a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:40 2026 by rpki-client