Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/93faf8-862e-4d97-b2b5-676db4cd3540/1/mytwoo9kNGxDgfJr-ZPS8WNbBO0.mft
File: mytwoo9kNGxDgfJr-ZPS8WNbBO0.mft (raw, json)
Hash identifier: 4ilcH+ndOSitFodRjMWFPEq8TTFm67OJ1TEpyJR3zsM=
Subject key identifier: F3:60:FE:0D:E7:B1:BE:B6:0F:73:40:4F:DD:45:F8:26:1C:48:C6:8C
Authority key identifier: 9B:2B:70:A2:8F:64:34:6C:43:81:F2:6B:F9:93:D2:F1:63:5B:04:ED
Certificate issuer: /CN=9b2b70a28f64346c4381f26bf993d2f1635b04ed
Certificate serial: 019D389C48355CF647539D8F9847EC516956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mytwoo9kNGxDgfJr-ZPS8WNbBO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/93faf8-862e-4d97-b2b5-676db4cd3540/1/mytwoo9kNGxDgfJr-ZPS8WNbBO0.mft
Manifest number: 0156
Signing time: Sun 29 Mar 2026 08:00:59 +0000
Manifest this update: Sun 29 Mar 2026 08:00:59 +0000
Manifest next update: Mon 30 Mar 2026 08:00:59 +0000
Files and hashes: 1: mytwoo9kNGxDgfJr-ZPS8WNbBO0.crl (hash: zp8bi3M4/aPVxMOgiuacsvh98XwH5To/cjlTg8jczeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/93faf8-862e-4d97-b2b5-676db4cd3540/1/mytwoo9kNGxDgfJr-ZPS8WNbBO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/93faf8-862e-4d97-b2b5-676db4cd3540/1/mytwoo9kNGxDgfJr-ZPS8WNbBO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mytwoo9kNGxDgfJr-ZPS8WNbBO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:48:35:5c:f6:47:53:9d:8f:98:47:ec:51:69:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2b70a28f64346c4381f26bf993d2f1635b04ed
Validity
Not Before: Mar 29 08:00:59 2026 GMT
Not After : Mar 30 08:00:59 2026 GMT
Subject: CN=f360fe0de7b1beb60f73404fdd45f8261c48c68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:58:87:5d:e0:c3:42:27:d7:8a:65:4e:8c:
38:a7:55:b0:75:0b:39:a7:76:3d:78:a4:cb:ca:48:
1a:2f:90:d2:f0:22:5e:86:a5:e2:2f:85:e1:a2:3f:
a6:ec:04:f9:14:6b:1f:20:f0:72:f4:7e:e1:9d:03:
5a:53:76:94:c2:39:8c:2b:14:75:63:67:a6:2b:0e:
b8:8b:31:a1:98:e6:75:dd:60:66:9b:de:d4:81:56:
17:0e:80:ec:74:61:82:80:7d:a5:46:1b:9f:b7:86:
7b:1b:bd:aa:d0:1a:4d:c8:00:de:05:53:19:30:a3:
58:26:31:7f:f2:1b:fc:db:15:18:b1:e9:2b:a6:83:
9e:00:5b:8c:2f:ed:5a:df:94:07:61:d2:b1:fd:c5:
29:b7:84:8e:65:3f:09:b8:e8:fc:c2:e9:a5:7e:49:
21:d9:3e:08:cd:f9:6b:70:88:3e:e4:46:3c:6a:57:
2c:df:f4:ff:c8:27:0d:56:b3:7e:df:18:25:fd:4d:
80:99:78:fb:fd:44:68:91:d4:2a:d3:4e:58:9d:72:
54:8f:87:18:08:58:29:16:7a:16:67:c8:c0:fc:c4:
4a:ae:b1:db:d4:84:db:97:31:6d:29:0a:67:da:29:
9c:ee:bf:35:dd:2c:31:41:ca:e5:3b:92:a5:1e:3d:
a9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:60:FE:0D:E7:B1:BE:B6:0F:73:40:4F:DD:45:F8:26:1C:48:C6:8C
X509v3 Authority Key Identifier:
keyid:9B:2B:70:A2:8F:64:34:6C:43:81:F2:6B:F9:93:D2:F1:63:5B:04:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mytwoo9kNGxDgfJr-ZPS8WNbBO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/93faf8-862e-4d97-b2b5-676db4cd3540/1/mytwoo9kNGxDgfJr-ZPS8WNbBO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/93faf8-862e-4d97-b2b5-676db4cd3540/1/mytwoo9kNGxDgfJr-ZPS8WNbBO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:33:42:86:a7:2e:1f:79:02:1b:f9:75:e5:9d:f8:e5:1c:4c:
2a:8e:04:09:49:69:6e:31:58:d0:8a:f0:fc:9f:79:70:63:2c:
ed:ed:df:c6:3a:ea:3d:54:72:4f:e8:1a:85:88:18:80:ae:4d:
5f:cc:59:6f:6b:31:aa:ea:ee:b6:72:88:98:a4:7f:f8:74:7e:
cf:15:75:79:d6:19:01:34:35:11:dc:ab:90:4d:22:64:0a:6b:
5f:28:73:02:dd:a0:72:a9:ba:53:b6:c4:ff:e8:d2:ee:f1:c6:
8e:b8:27:12:57:0f:f8:bd:51:91:53:d3:25:8d:97:31:3e:c9:
09:d4:20:8c:8a:36:06:62:fc:3a:ff:7d:26:b5:10:8c:15:91:
1f:e1:2f:42:8b:ab:ab:df:a2:29:34:9f:45:32:64:31:f2:59:
50:86:1e:7a:b2:86:3f:e1:1d:57:35:de:0e:7f:6d:28:70:61:
29:e2:32:55:2a:a0:c4:ff:ea:f9:4b:e0:de:dc:83:bb:d4:f2:
9d:36:5a:c9:e8:f3:73:1d:56:7a:dc:ca:e0:d0:87:35:90:b6:
0f:20:bc:a4:03:1a:c0:94:9f:17:56:11:f9:d4:ba:c3:8f:7f:
81:30:95:90:7c:17:8b:03:57:d4:a2:3a:53:f9:17:9b:07:ca:
f4:3e:7d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:43 2026 by rpki-client