Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File: 9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier: kyjPB3MHmZP9JVWxjEaOEc0hXsnNdhy0sjXzu2YlIeo=
Subject key identifier: 32:82:8A:5C:0C:41:F8:C2:D0:43:47:E3:2E:80:2A:F0:33:19:D0:5E
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer: /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial: 019D375244954D98BFBCEF1212EE06BBDAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number: 0D71
Signing time: Sun 29 Mar 2026 02:00:31 +0000
Manifest this update: Sun 29 Mar 2026 02:00:31 +0000
Manifest next update: Mon 30 Mar 2026 02:00:31 +0000
Files and hashes: 1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: L/ELEap73xHlZxBoCNHxSfjelpPLwOCeq1I36/kbV3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:44:95:4d:98:bf:bc:ef:12:12:ee:06:bb:da:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Validity
Not Before: Mar 29 02:00:31 2026 GMT
Not After : Mar 30 02:00:31 2026 GMT
Subject: CN=32828a5c0c41f8c2d04347e32e802af03319d05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:50:cd:73:3a:e2:42:3b:1d:c7:7e:a7:d1:9b:
05:07:00:7b:bb:69:ae:19:1e:21:11:21:59:86:b9:
03:d2:2f:3b:8a:d0:46:c6:70:33:5a:d6:05:7b:9a:
67:a3:dd:6d:32:a5:c7:6c:b3:54:44:6c:bd:dd:c0:
dc:e1:75:b5:3c:ec:e7:55:b8:af:16:53:fb:f5:36:
1d:5b:df:e4:a7:e6:08:d0:48:99:f9:9a:2b:0d:37:
f9:1a:1c:8a:29:12:a0:d4:72:78:31:e1:e4:75:58:
e1:94:e9:00:c6:79:14:81:38:40:4d:04:cc:bc:e1:
0b:3b:f6:c0:3b:2b:5f:26:e5:21:f4:f4:47:e2:2e:
ab:43:90:3e:80:21:96:f9:cc:63:62:41:09:3e:fa:
45:4c:65:c4:cc:7e:6e:95:e3:c3:ff:56:d9:3d:93:
0f:f3:d6:b8:71:47:b2:56:c9:57:1f:a5:cb:e1:ab:
1b:a3:35:7a:3b:74:74:5d:f9:65:1f:30:81:1d:09:
1b:ee:b7:12:8d:3c:0e:cc:6c:fa:af:f8:91:33:44:
4b:54:41:38:fd:2a:2f:79:ce:f4:80:67:ad:ca:fd:
3e:94:15:5f:19:20:f5:06:df:46:85:19:21:e7:2c:
97:43:b3:d9:d8:de:63:56:9d:5a:0c:84:88:50:78:
1a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:82:8A:5C:0C:41:F8:C2:D0:43:47:E3:2E:80:2A:F0:33:19:D0:5E
X509v3 Authority Key Identifier:
keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:10:59:f5:5f:a7:7a:2f:0b:5e:ab:7b:be:d7:a2:3c:a7:57:
8b:25:41:85:0f:69:96:1e:33:9f:aa:52:8d:18:b1:78:22:1d:
4e:2d:dd:e9:07:0e:09:27:2c:77:ce:c0:75:5d:8f:e1:32:a2:
bf:91:fd:38:36:66:3a:7e:e6:44:ae:86:c6:df:93:3f:e4:c5:
36:52:03:95:55:4d:6f:e4:34:9a:31:0e:5e:e1:ef:05:6d:f9:
d2:fd:ca:0b:4d:46:01:db:ca:b0:a0:90:bc:32:a9:3f:b0:af:
1f:4c:c4:b4:3d:8d:f8:ff:31:86:02:9e:8d:aa:e5:42:2c:ae:
ed:6f:2e:95:a0:7f:b1:69:40:db:39:4d:31:7b:87:51:9b:55:
d6:52:f3:33:25:33:91:e9:16:47:6c:c2:73:cd:a0:c8:a0:b6:
ec:5a:a9:dd:d8:8c:49:64:70:65:f7:54:84:9a:c1:38:b0:b2:
be:96:10:f8:97:10:4d:27:00:61:26:10:12:6c:b9:6e:80:21:
3b:ca:59:9e:73:bb:dc:3b:95:ae:ff:97:a5:92:48:fa:5a:a0:
3b:8a:d3:a3:9e:53:24:27:d4:f3:cb:4a:79:0a:6c:99:41:e3:
4e:86:a3:8d:32:8a:47:c5:35:4a:65:d0:5c:29:b8:5f:08:75:
40:0a:c8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:11 2026 by rpki-client