Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
File: mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft (raw, json)
Hash identifier: F909EXmmXWrgN+3mOitsxmFx9HrGD9T36/f+Pzu4lOM=
Subject key identifier: 61:2D:82:3B:CE:55:54:3B:9B:4F:9F:C9:92:40:C2:93:7E:71:84:85
Authority key identifier: 9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8
Certificate issuer: /CN=9b134b6e9024064b9057283489bf2c436f4075e8
Certificate serial: 019D3866908DAB865768F0B35D7AF2DC21C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
Manifest number: 09EA
Signing time: Sun 29 Mar 2026 07:02:18 +0000
Manifest this update: Sun 29 Mar 2026 07:02:18 +0000
Manifest next update: Mon 30 Mar 2026 07:02:18 +0000
Files and hashes: 1: mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl (hash: CV1XtolUTswmugP/8oxuSe5akU7tufqk3QV+UIaYBHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:90:8d:ab:86:57:68:f0:b3:5d:7a:f2:dc:21:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b134b6e9024064b9057283489bf2c436f4075e8
Validity
Not Before: Mar 29 07:02:18 2026 GMT
Not After : Mar 30 07:02:18 2026 GMT
Subject: CN=612d823bce55543b9b4f9fc99240c2937e718485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:64:cd:1e:7f:9c:ef:df:6f:94:70:f3:3c:
b4:44:e7:18:84:55:45:fd:2f:a6:79:36:f1:5f:41:
7e:50:11:30:66:25:2b:05:fe:da:e0:27:57:fe:f7:
23:7a:c5:9c:1b:ac:52:34:e2:a2:40:15:f8:22:aa:
7b:9a:44:28:5e:0e:e8:4d:c2:1b:9f:af:91:86:33:
36:d6:c2:9f:c2:46:b0:7c:c2:62:5f:91:58:78:4c:
6a:6a:99:67:2f:18:2d:06:fc:f5:a6:bc:32:d2:3d:
06:85:61:e8:26:cc:72:ff:2f:47:9b:95:74:f0:63:
33:0f:81:0e:78:e8:fe:6e:b3:1d:1e:f4:b9:a1:f4:
2b:10:30:bf:c9:44:57:84:52:a3:91:e6:e8:3a:0b:
7c:31:89:a5:79:35:81:95:69:15:84:28:1a:fb:b5:
95:13:c0:56:f4:1e:b1:a3:58:75:2a:58:51:6d:82:
78:79:ec:9f:61:ac:47:ea:0b:27:96:23:d2:6d:27:
88:2e:a3:e7:df:c7:ff:17:9a:31:6c:e1:fc:f2:13:
b4:f0:16:f5:9c:4a:1e:51:79:87:d2:a6:db:21:9a:
e6:d3:ce:e7:80:ea:a7:c0:1e:4f:89:f7:80:e2:3c:
4b:8f:38:36:5f:47:5f:22:6a:89:c8:02:06:bc:14:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2D:82:3B:CE:55:54:3B:9B:4F:9F:C9:92:40:C2:93:7E:71:84:85
X509v3 Authority Key Identifier:
keyid:9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b6:d7:69:30:e9:35:e1:9d:96:1a:05:0c:25:0e:ba:07:03:
2b:0f:6f:80:d6:8b:6d:13:97:9f:d8:b1:f2:26:6e:11:39:22:
71:d8:cb:c4:7d:3b:2b:04:d2:35:de:98:c2:8b:fb:fe:07:ea:
0e:58:3e:de:10:30:34:9c:fe:85:d4:cf:f1:07:f2:05:59:20:
be:39:e1:8a:18:93:aa:f9:3d:ad:a4:a4:3b:66:03:ce:fc:61:
5e:04:36:0f:6e:3e:18:40:ba:69:05:3a:6f:f4:2a:57:1a:35:
35:81:51:64:b2:88:f8:9b:b3:6f:63:c9:d8:8b:5b:a2:3b:f6:
fa:7f:08:fb:30:ac:cd:c5:5e:24:e1:a3:84:f2:a9:0d:84:45:
4f:90:86:9e:04:37:4a:ec:86:b1:14:58:1a:86:42:c0:69:65:
96:06:ba:a6:ab:c6:02:8b:fc:c8:68:3c:b2:11:2c:18:fe:65:
55:62:7c:69:7a:10:1c:88:fd:8e:84:a0:11:85:a9:ba:c2:c1:
0a:59:2e:ae:39:42:3b:f2:aa:dd:d5:19:5c:2d:b1:b8:57:87:
25:ab:d0:22:71:25:30:70:ed:3b:78:75:d2:78:61:8f:6d:ba:
2e:3f:00:64:2d:5f:51:ee:76:f7:00:c1:72:8c:c4:01:ce:bb:
a9:70:c6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:59 2026 by rpki-client