Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
File: 9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft (raw, json)
Hash identifier: OSgiSj2LEpzVRsvPQSJzkhmlL1YPznx88GavLFtF8lQ=
Subject key identifier: DA:61:30:96:EE:AD:4B:FF:E6:FF:D7:E0:0B:D3:71:7D:E6:97:D1:59
Authority key identifier: F6:09:32:C7:B8:94:51:9D:34:62:47:30:2E:B3:65:F5:C4:09:B0:3C
Certificate issuer: /CN=f60932c7b894519d346247302eb365f5c409b03c
Certificate serial: 019D389BCEFD342F2356C94ECD62303CBB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
Manifest number: 01CB
Signing time: Sun 29 Mar 2026 08:00:28 +0000
Manifest this update: Sun 29 Mar 2026 08:00:28 +0000
Manifest next update: Mon 30 Mar 2026 08:00:28 +0000
Files and hashes: 1: 9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl (hash: 4CXyGvEUOOppedgaMLCwAEE83p7nvOrnZcp5I9zlzzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ce:fd:34:2f:23:56:c9:4e:cd:62:30:3c:bb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60932c7b894519d346247302eb365f5c409b03c
Validity
Not Before: Mar 29 08:00:28 2026 GMT
Not After : Mar 30 08:00:28 2026 GMT
Subject: CN=da613096eead4bffe6ffd7e00bd3717de697d159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6e:e3:a7:06:6c:38:e4:c8:50:27:52:77:3a:
8e:ee:16:ca:9b:61:c9:cd:dd:3b:37:4c:0c:de:a7:
b5:7e:a2:ea:aa:78:58:df:4d:44:b9:6f:0f:26:ad:
16:dd:f5:f5:f6:74:47:a6:d7:b0:46:b1:e5:57:f3:
c6:ac:11:b2:b2:48:a0:e4:e0:04:04:32:16:53:bd:
94:a3:b0:c3:5f:dc:f8:09:e1:0f:60:1e:8e:a4:ad:
22:84:0c:05:24:c4:14:b5:d0:c8:76:2d:9c:54:e9:
1a:2e:11:82:fc:f0:ab:70:5a:80:2b:f7:7b:41:cd:
67:83:85:dd:a1:fe:28:1c:d4:19:32:d4:1c:e0:97:
d6:d3:70:ab:1b:1c:ea:6b:fd:d4:76:75:89:09:c3:
06:7a:8d:e4:ff:06:9a:56:40:69:09:6b:49:c9:1f:
7e:e9:d4:63:af:df:ec:a5:e7:09:7c:77:95:14:0e:
d3:e5:e3:4f:a9:b8:c7:6c:e7:7f:61:a2:2e:ca:b2:
d9:4c:5d:80:81:a2:84:49:e1:8e:be:ab:2d:b8:e5:
0b:a9:44:a5:38:9f:98:0f:ae:df:5b:2a:9b:c1:d5:
c8:32:6d:b4:8f:a3:b3:3c:d0:ed:ca:76:d9:ee:16:
7a:a4:ec:7a:d5:52:98:8d:ad:13:3d:0c:33:fa:23:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:61:30:96:EE:AD:4B:FF:E6:FF:D7:E0:0B:D3:71:7D:E6:97:D1:59
X509v3 Authority Key Identifier:
keyid:F6:09:32:C7:B8:94:51:9D:34:62:47:30:2E:B3:65:F5:C4:09:B0:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:65:52:e7:bd:73:03:3f:37:54:b1:87:86:39:18:0e:8e:e6:
e2:2e:0b:98:25:f1:ac:0e:ca:da:b9:44:2f:1e:69:94:20:bd:
aa:89:a0:30:41:10:b5:dd:be:86:ce:c9:7c:a8:75:d1:4e:2e:
d1:8c:81:72:79:1f:30:d5:e0:d1:a6:d2:15:3f:97:8f:a5:a1:
1e:f8:f2:0d:f5:66:62:8e:ae:b6:7c:a6:b3:86:e1:d2:61:ef:
b2:be:e8:45:ad:2a:00:e5:26:13:79:ad:bd:f2:de:29:d8:19:
58:45:a0:1e:de:03:32:92:fd:55:5e:81:cd:e7:f8:4c:3c:2b:
05:a4:59:9a:84:d2:6e:c2:43:5a:ac:cb:b0:23:db:c0:7d:8e:
1f:42:35:94:16:c6:ba:9e:23:68:c9:1e:b7:36:36:cc:77:5b:
18:e0:60:62:e8:9b:64:b6:02:03:da:28:fd:49:e7:30:dd:ba:
b6:f8:c9:c9:1a:bd:b1:c9:49:7a:53:7b:c3:03:dc:32:ad:c4:
74:81:c7:cf:c8:dc:ce:bc:29:24:fe:41:64:99:6e:2b:80:af:
83:45:06:27:ab:52:10:8e:3b:20:f4:b4:99:4c:0d:b8:f5:57:
2e:25:20:51:b9:11:53:4c:29:da:5a:3d:52:6c:a4:c3:88:7a:
a0:a0:95:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:20 2026 by rpki-client