Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
File: 9vwoeVAOHrgIVXBc-ENeA2NRN94.mft (raw, json)
Hash identifier: BY3jlhWJNbUmHOOvAcv13sVh98HOr4M8sxDsnv/SaVg=
Subject key identifier: B0:60:4C:39:B1:44:76:3F:AF:16:C1:0B:74:A1:63:9B:9A:A4:D0:F0
Authority key identifier: F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE
Certificate issuer: /CN=f6fc2879500e1eb80855705cf8435e03635137de
Certificate serial: 019D3A54967FA8ECA3C1CEF7E3EF121B111A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
Manifest number: 08E2
Signing time: Sun 29 Mar 2026 16:01:55 +0000
Manifest this update: Sun 29 Mar 2026 16:01:55 +0000
Manifest next update: Mon 30 Mar 2026 16:01:55 +0000
Files and hashes: 1: 9vwoeVAOHrgIVXBc-ENeA2NRN94.crl (hash: tcIrTXVa/M56B8ka9QkYiwB6UpnAKP7rKG1aReFMaRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:96:7f:a8:ec:a3:c1:ce:f7:e3:ef:12:1b:11:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6fc2879500e1eb80855705cf8435e03635137de
Validity
Not Before: Mar 29 16:01:55 2026 GMT
Not After : Mar 30 16:01:55 2026 GMT
Subject: CN=b0604c39b144763faf16c10b74a1639b9aa4d0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:4e:50:9c:b9:e7:fa:bc:64:c4:12:65:6e:
73:63:8b:d4:47:ad:bd:c6:ca:dd:d8:6e:92:4e:06:
00:84:65:15:0d:3c:84:15:a6:e8:23:e8:a4:a6:f9:
28:2a:7a:00:d5:e4:12:0a:3e:43:9a:93:68:97:61:
0f:d4:e1:e8:19:a7:3a:f5:e4:0d:0c:41:49:f7:bb:
8a:d1:b3:24:15:7c:06:c9:ec:e1:25:e3:97:c5:25:
3b:ee:ad:58:b6:56:b3:1b:81:4d:32:ba:40:e1:5d:
0b:eb:0f:dd:6e:70:db:55:ab:d8:fe:9f:0a:18:64:
4b:49:ee:41:7b:ad:ca:cd:3c:7f:a8:c1:d4:f7:fc:
e9:0e:66:71:b0:3a:e2:39:24:b9:f2:b9:89:07:8d:
d6:b0:a2:ad:e3:bc:f4:22:d2:51:90:76:f8:7a:33:
20:bb:68:af:3f:ce:dc:56:ee:68:3b:f3:c7:f1:6e:
d9:f9:d9:a2:1d:22:7e:a4:63:a6:55:64:2d:b4:61:
f1:18:20:0c:51:d9:5b:5c:9c:4c:92:3e:32:e6:75:
00:c8:a4:eb:49:d5:37:05:3a:3f:f9:e7:13:6b:61:
a8:34:7c:a8:19:66:f6:44:cd:5f:74:2f:ef:e1:db:
98:49:b2:b7:58:de:2b:07:32:3c:cc:e3:b9:fe:3f:
3c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:60:4C:39:B1:44:76:3F:AF:16:C1:0B:74:A1:63:9B:9A:A4:D0:F0
X509v3 Authority Key Identifier:
keyid:F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:51:0e:b9:f4:96:74:5a:b1:01:f4:e0:f2:28:bc:ac:f3:7e:
8b:fe:bc:65:26:b4:50:29:52:e3:b5:97:73:fc:ef:a2:70:e3:
65:20:3b:e0:13:fa:8f:42:6f:ca:29:a4:62:54:a1:4a:ab:bc:
9b:2e:0f:51:fc:c5:f5:9f:7b:cc:78:e1:1b:6b:8c:9b:a9:71:
87:ea:25:93:50:22:cd:bd:70:0b:c2:f9:67:dd:f4:16:10:a5:
7c:2d:2f:68:eb:2f:b9:62:99:30:06:dd:a7:87:b2:4f:79:65:
11:c8:77:3d:ad:0a:47:9b:5c:7e:eb:76:fe:27:43:4a:1a:a8:
fd:cb:92:95:42:4a:38:f7:23:78:e0:3a:61:5b:fe:d7:f7:51:
3d:66:68:b6:7e:ed:63:92:da:00:31:1b:df:e3:9f:ae:6d:90:
15:57:f9:44:29:fc:73:33:04:e0:17:90:0f:37:98:af:29:02:
c8:5d:26:26:8d:56:be:f5:07:bf:cc:14:2a:50:d7:21:77:5b:
4c:dc:1d:7c:b8:46:25:c1:8c:dc:1d:48:17:ce:34:cd:27:d5:
03:f9:eb:85:b6:d3:46:3e:10:36:34:4d:8d:fe:71:2d:12:c2:
bb:e7:a8:d8:c6:3b:79:85:a6:d8:51:c3:b0:a2:33:f1:40:42:
b7:78:17:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:59 2026 by rpki-client