Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier: l00lDQL1hMfwRfcHzHBIt/GA2lGklKBH03lAJVDHgLU=
Subject key identifier: E3:78:BF:7B:65:CF:7B:36:C7:C3:53:35:16:2D:8A:C1:95:44:2E:AF
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer: /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial: 019D39AED08B218988DFB311BB5F00B7E39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 13:00:51 +0000
Manifest this update: Sun 29 Mar 2026 13:00:51 +0000
Manifest next update: Mon 30 Mar 2026 13:00:51 +0000
Files and hashes: 1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: nxXYxQku94bIPZuN1jTp/Ng7ToAf+km6Uz7Vva1HnOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d0:8b:21:89:88:df:b3:11:bb:5f:00:b7:e3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Validity
Not Before: Mar 29 13:00:51 2026 GMT
Not After : Mar 30 13:00:51 2026 GMT
Subject: CN=e378bf7b65cf7b36c7c35335162d8ac195442eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0e:03:db:d8:23:25:52:c9:c6:1a:80:66:cc:
5d:ed:c7:66:76:25:0e:44:0a:7c:c4:d1:1b:10:94:
26:72:7e:74:3e:c7:72:b9:a8:1c:88:25:b4:c4:ab:
88:2b:b0:d0:24:1c:fa:93:c8:44:5c:fc:09:0f:bb:
f2:ac:48:79:7e:d6:ee:94:22:a3:43:2a:07:08:00:
d3:c4:a7:4a:2c:af:41:dc:4e:1b:e3:07:68:53:0c:
8a:73:dc:0e:27:30:5b:cc:d5:eb:57:bc:bf:3d:e2:
0e:56:d4:54:62:8d:d4:a4:cc:03:66:26:59:65:10:
c9:48:97:9f:80:eb:92:3e:8d:69:8e:87:fc:1e:35:
b4:01:b2:69:9d:98:24:11:ea:67:17:24:c2:2b:84:
c9:b7:c7:fd:60:9b:d1:6e:f2:b7:4d:3e:0b:48:55:
d6:c4:ab:8f:b6:35:59:58:be:ac:cf:96:2a:67:b1:
cc:c5:4e:05:35:74:90:9c:7f:88:58:9d:aa:0a:9f:
16:97:f2:a8:e7:00:bf:a1:36:b1:c4:bf:83:83:b9:
73:f2:3f:7d:08:f8:de:a7:0c:2b:b3:a5:ce:e0:0c:
f5:29:17:cd:c6:ae:2c:7c:de:4b:97:f6:54:37:8d:
bf:89:11:41:ee:9e:bf:43:4d:2c:f2:d8:ad:9d:e0:
5b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:78:BF:7B:65:CF:7B:36:C7:C3:53:35:16:2D:8A:C1:95:44:2E:AF
X509v3 Authority Key Identifier:
keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:02:dd:0a:8d:df:e9:c5:ae:c8:4f:23:2e:00:1d:48:41:3c:
41:da:e2:84:ac:36:47:9a:4c:8c:2a:6b:0d:99:14:f7:45:cf:
27:e2:a1:e6:7c:85:f0:09:9b:42:18:a4:7f:66:bf:04:d4:b9:
6b:c9:06:ef:dc:0f:9d:f4:5d:7e:cf:aa:8e:0a:3e:36:10:33:
41:c6:bc:66:6e:ea:d1:ad:c3:8a:c4:72:07:a8:a2:6d:38:4f:
c3:76:22:0d:35:3c:36:b0:24:98:a8:55:17:5b:f3:b5:ba:fe:
21:42:4a:5d:cc:fe:19:17:a1:30:0c:b6:ff:b8:9c:40:7b:98:
21:2a:13:b0:11:ae:59:a7:ba:da:41:c6:53:12:e5:bd:ad:af:
e1:ea:5d:e0:7c:44:dd:18:40:80:95:63:43:76:8e:30:47:3d:
b7:5f:15:2a:e6:3f:7e:48:07:ef:14:96:2c:16:fe:88:a6:96:
cd:bf:08:34:c5:f1:3a:80:58:71:8f:1f:1c:5f:f0:f9:3b:18:
7c:e6:81:82:52:a8:1f:fc:5c:d8:e8:f5:5e:be:63:f8:dc:09:
da:26:5f:40:76:30:64:f2:78:a5:47:d9:cb:23:39:2f:4d:43:
77:e8:ab:23:36:f5:b3:90:40:48:2a:63:e7:80:75:d5:50:a7:
37:70:90:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:54 2026 by rpki-client