Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
File: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft (raw, json)
Hash identifier: V1mGhtu4pKzmH2EDMCyL8urQk2c5ZcSY9JxmSl/YjkQ=
Subject key identifier: F3:11:9D:3F:F2:5A:04:1A:B6:5A:D5:94:8E:6B:6A:D7:34:1E:BB:73
Authority key identifier: F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F
Certificate issuer: /CN=f89e882276f80e6750490eef006de943dacb6e0f
Certificate serial: 019D3909D1D7AC88B00FBEAB4E04E9AF1E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
Manifest number: 0B40
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl (hash: 9zv7/7ahAZEgsy+sCImLxHrmhyFGxnGp/WgXmaMkDvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d1:d7:ac:88:b0:0f:be:ab:4e:04:e9:af:1e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89e882276f80e6750490eef006de943dacb6e0f
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=f3119d3ff25a041ab65ad5948e6b6ad7341ebb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:87:3f:12:60:45:b5:30:b7:61:0f:b2:f8:6f:
95:d9:6f:c7:30:cf:03:34:f4:67:de:8d:0d:e2:0b:
26:9e:85:c5:de:5d:ae:36:56:bf:06:f9:eb:df:a3:
84:9f:00:c7:9b:58:86:08:43:11:e3:64:ab:44:60:
59:bb:a0:2d:28:9a:a7:ee:69:24:a6:73:58:d4:59:
df:66:12:02:5a:06:2f:44:be:8e:2b:9f:12:d0:2d:
cc:09:c8:d2:cc:1e:2e:e2:2e:8b:c8:72:8b:fa:f3:
85:82:b1:79:f6:c6:2f:26:6a:6d:5b:78:ac:32:1d:
14:7d:c6:3e:9a:51:df:29:ac:b6:db:aa:fb:c5:13:
e6:23:b5:76:2d:07:ca:d2:ee:b0:f1:fd:e7:e4:39:
10:f4:98:67:17:a2:59:df:3c:cc:6d:e5:14:70:b0:
12:8d:10:22:ac:75:be:f7:30:bd:37:8e:3b:84:ef:
08:26:15:3e:ba:e7:8f:3a:c9:80:9d:42:13:b4:aa:
b4:00:36:3e:95:a0:4d:f6:ec:f9:83:2f:2f:c6:29:
4c:7b:21:d6:84:6e:34:34:66:1f:aa:de:b8:4b:3b:
5a:fd:43:4c:24:08:8f:88:57:ba:0b:ff:78:f6:b8:
e7:7e:82:1f:3e:e1:99:e0:98:ad:08:d9:d8:5b:34:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:11:9D:3F:F2:5A:04:1A:B6:5A:D5:94:8E:6B:6A:D7:34:1E:BB:73
X509v3 Authority Key Identifier:
keyid:F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3a:4f:8a:be:74:76:18:8b:45:2f:2b:93:cf:f0:92:d6:32:
08:1b:d3:20:bf:48:0f:df:be:03:7b:9f:70:e8:9d:86:3e:1d:
78:8f:4b:0c:5c:f9:45:d6:e5:ac:17:1e:4b:d2:61:f1:e3:4d:
54:1c:ea:84:6f:59:f1:ac:0e:85:a1:4f:65:b5:1a:9c:3a:68:
3a:be:26:57:e5:8a:64:54:89:11:6f:0b:66:a7:2f:d6:18:fe:
54:94:21:ba:3b:42:6b:1e:e4:d8:3f:d3:82:08:78:73:4c:83:
7d:22:a4:e4:7d:0b:96:70:bf:b2:8d:fe:09:51:ff:5e:33:85:
52:48:01:ec:b0:ce:f4:e8:5a:6c:a5:a7:70:a1:20:6a:01:32:
2b:da:45:3c:fd:8d:d7:35:6a:35:e4:ee:f9:7a:8b:49:ad:14:
e4:bf:c4:6a:f0:92:da:39:91:01:90:27:eb:88:d6:36:c7:a5:
93:67:7a:ac:b4:86:5f:43:9d:b4:7f:da:60:fc:30:0e:c5:97:
18:0b:e9:9c:0a:51:49:15:62:0d:08:5a:28:fe:b1:52:3c:f1:
84:15:4e:89:84:f0:44:72:12:4d:86:71:7c:ab:46:c0:1b:7c:
50:22:bd:af:24:0e:14:eb:70:bf:80:e6:e9:ef:be:5a:7f:97:
3a:4a:27:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:35 2026 by rpki-client