Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
File: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft (raw, json)
Hash identifier: VcvmqPBXq+jF8mVPt56W6bEp6Q3o+Ba+QHoQj3/Y530=
Subject key identifier: 99:85:DE:CF:E9:2E:91:5A:4F:9F:48:08:BB:17:48:52:68:FE:4C:EB
Authority key identifier: F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
Certificate issuer: /CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Certificate serial: 019D38D2B75979D4BA676AE91CA317026A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
Manifest number: 0F6F
Signing time: Sun 29 Mar 2026 09:00:26 +0000
Manifest this update: Sun 29 Mar 2026 09:00:26 +0000
Manifest next update: Mon 30 Mar 2026 09:00:26 +0000
Files and hashes: 1: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl (hash: 9AaOAn81R1FJO8AVUmQQj5H90j82G7HaXNu0UnEI8jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b7:59:79:d4:ba:67:6a:e9:1c:a3:17:02:6a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Validity
Not Before: Mar 29 09:00:26 2026 GMT
Not After : Mar 30 09:00:26 2026 GMT
Subject: CN=9985decfe92e915a4f9f4808bb17485268fe4ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:5b:cf:d0:d5:60:94:c2:ba:74:fe:7d:ba:
ba:8c:92:be:c3:7a:8c:b2:0a:d2:e6:e3:02:1b:bd:
70:18:68:7a:10:8c:d5:77:e0:8e:c9:0f:51:3a:37:
97:54:bc:7e:66:8d:00:ec:b0:77:e0:7c:b9:35:f0:
70:d8:41:d2:c5:25:8b:6a:ac:0e:13:85:43:6f:81:
47:b5:a4:b5:99:af:36:10:2e:3e:a7:74:2c:d1:85:
3c:1e:21:20:be:96:6e:f7:26:ee:45:e3:90:75:c0:
79:02:81:00:b9:d4:01:80:43:10:4c:3d:9d:ea:1d:
8d:38:55:d0:d7:d4:75:b1:02:9f:70:7e:f3:f2:22:
4d:ad:c4:43:ec:60:05:b2:d9:d6:ee:e5:4a:83:2d:
cd:2d:a5:18:ad:13:0f:4a:88:c8:e4:57:02:1e:c4:
b5:07:be:17:8e:9a:a4:bf:ac:fb:ad:85:a2:03:e6:
ac:ad:d6:1b:bd:d5:b0:8f:52:19:14:9d:78:df:36:
c7:f3:49:e2:bd:36:9c:e1:19:9b:99:cc:50:79:48:
6d:7b:58:fa:3c:cf:58:98:61:b0:99:3e:9e:da:eb:
59:79:88:74:32:27:a1:9b:a6:8f:9d:38:99:37:f6:
e4:7e:8b:0b:54:55:8f:61:e2:a4:07:7b:20:24:5f:
ae:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:85:DE:CF:E9:2E:91:5A:4F:9F:48:08:BB:17:48:52:68:FE:4C:EB
X509v3 Authority Key Identifier:
keyid:F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f3:d6:a3:b1:5a:45:c5:28:4a:d1:3d:cb:bd:46:1c:4b:c8:
91:22:82:5c:45:d2:35:d8:46:c3:37:91:23:56:43:18:0a:31:
80:64:58:9c:0b:34:8b:d1:0e:fb:17:23:f3:c3:d5:93:78:19:
29:41:46:35:d1:eb:f1:bf:1d:58:6e:eb:db:e7:9b:6e:2c:79:
bf:77:66:74:05:54:01:c2:14:5b:10:bf:ad:62:40:66:17:ca:
56:6f:e0:41:b9:32:86:a6:7d:15:83:5a:b7:b5:f6:fa:e8:4e:
52:d0:d6:fd:08:e5:c1:da:ba:7e:7a:82:89:6b:3b:b0:99:16:
7a:f9:da:49:7c:7a:26:18:df:a7:65:c5:0f:6c:99:34:07:c2:
1d:da:b0:d4:95:b2:94:2e:e7:53:b4:5c:0b:1c:6b:06:7d:5a:
10:78:75:44:af:5e:1c:33:0c:73:7b:ed:a2:b7:03:ed:b2:d1:
b0:ad:8c:43:c6:8f:25:b5:25:0a:95:f4:1a:87:5c:20:10:39:
b6:13:f0:7a:df:f7:0a:fe:92:a1:e0:8e:7c:86:ef:03:07:d3:
52:97:6b:e0:74:c8:fb:f3:94:f2:31:19:bf:ac:c7:60:64:ca:
95:fe:97:83:b2:48:55:8f:a5:ab:10:4a:09:1f:ab:7e:5f:ce:
2b:b1:8e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:51 2026 by rpki-client