Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File: 9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier: WD6KGnpwGFrKyATR6iQBgbti/64YNzb7/lOhYHNGcrM=
Subject key identifier: 0A:0D:FA:06:E6:7E:E8:81:00:63:DE:50:73:4C:5A:F4:08:1B:9B:F6
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer: /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial: 019D37C107C610B966D11676E86828E49F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number: 0F6C
Signing time: Sun 29 Mar 2026 04:01:30 +0000
Manifest this update: Sun 29 Mar 2026 04:01:30 +0000
Manifest next update: Mon 30 Mar 2026 04:01:30 +0000
Files and hashes: 1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: //S/aKRYF2DLVHl7lEU9BfblMWgFohmW41jKudSiq9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:07:c6:10:b9:66:d1:16:76:e8:68:28:e4:9f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Validity
Not Before: Mar 29 04:01:30 2026 GMT
Not After : Mar 30 04:01:30 2026 GMT
Subject: CN=0a0dfa06e67ee8810063de50734c5af4081b9bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:52:23:e9:1b:52:29:4b:da:3c:6c:7b:fa:
46:f6:75:3a:a2:6b:a0:ee:06:dd:98:6d:27:b4:eb:
26:77:ab:af:9f:64:06:74:bf:bd:ad:e0:28:d5:f2:
11:cf:b0:44:e2:e8:ba:07:84:25:59:86:30:19:0e:
01:dc:f4:7a:8c:14:2e:37:b1:51:98:0e:8c:b2:a4:
ba:ee:9f:95:a1:cb:da:9b:6f:aa:35:9c:88:ce:df:
7e:d8:6f:06:e4:b3:b1:d3:3c:d0:f5:d1:41:47:7e:
e1:29:d6:7f:e0:3b:36:46:00:b1:79:4b:62:9d:bf:
43:9c:6d:d3:4c:13:6a:e8:3f:18:1e:3b:1f:42:81:
4c:0d:19:0b:2d:ad:0b:5b:85:e8:f1:1e:cf:8f:fc:
18:a9:8d:40:42:e8:37:a6:f6:26:d4:d2:44:89:d4:
5b:3b:fc:9b:a6:c4:b9:c9:dc:fd:9e:c1:e8:97:35:
6c:a5:b7:3e:5e:9e:f4:81:ab:a9:98:ed:8f:f4:e4:
df:22:e0:b9:b0:aa:7c:ab:fb:a0:5a:d4:d6:91:3c:
9e:aa:3c:df:5c:7c:ad:0d:0c:45:9f:8d:30:a6:8c:
76:07:18:d1:c7:a6:0b:d8:44:ae:c9:31:af:27:53:
35:12:10:2d:36:99:c4:27:43:40:51:90:32:e7:5c:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0D:FA:06:E6:7E:E8:81:00:63:DE:50:73:4C:5A:F4:08:1B:9B:F6
X509v3 Authority Key Identifier:
keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e8:e5:94:94:99:10:35:d9:95:5a:70:e6:6c:80:9e:98:c8:
ed:70:fb:56:2b:c1:f0:65:81:4c:df:38:fa:a7:4b:23:4b:23:
f4:57:d9:03:40:06:f4:4b:83:fb:c7:92:8b:d1:69:a8:1d:45:
4f:fd:65:75:84:a7:5f:7b:f0:3b:cd:c4:88:42:a6:f7:5e:cd:
b9:3c:4e:d1:9b:b3:04:f7:d8:61:c4:18:1a:ef:44:f6:f7:96:
82:98:e6:2a:b8:39:52:2c:56:25:17:f4:15:b1:63:8f:40:cd:
e1:dc:1d:32:38:a5:47:9e:a3:52:7a:4e:2b:ce:89:56:97:14:
e1:97:cf:2e:40:d9:ea:15:f2:f8:64:75:4d:4f:fb:42:8e:c8:
8d:58:e0:f4:18:cb:46:e2:87:05:4d:74:e9:40:16:06:ba:0d:
21:8d:ff:36:87:45:aa:5a:cc:d4:3e:44:b3:8e:5a:90:bb:b5:
5d:d9:86:7d:c7:47:b2:c2:0b:9f:7e:40:f0:17:01:62:fa:94:
9c:08:80:35:9c:17:4f:c0:76:ef:33:b9:c3:eb:b7:2d:ff:31:
c8:a3:bb:bd:36:da:7a:86:58:aa:4f:27:6b:6f:e3:98:4c:88:
e2:7a:b4:cf:8e:a3:62:95:16:3c:30:a2:56:c8:34:0b:a0:73:
bd:c0:2c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:02 2026 by rpki-client