Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
File: 9yjCKwJQJ1-m63NLoA55D343pVA.mft (raw, json)
Hash identifier: b6RFFqCo1DMCcs7/xi2yHtSGm8OGBPx+RYIzpIw2aUw=
Subject key identifier: 3F:B0:15:AB:C4:C2:94:35:13:34:AE:CF:32:7A:43:A8:6B:6A:A8:5F
Authority key identifier: F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
Certificate issuer: /CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Certificate serial: 019D386685B68334B440FC3B857CD9A2D40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
Manifest number: 0BBC
Signing time: Sun 29 Mar 2026 07:02:16 +0000
Manifest this update: Sun 29 Mar 2026 07:02:16 +0000
Manifest next update: Mon 30 Mar 2026 07:02:16 +0000
Files and hashes: 1: 9yjCKwJQJ1-m63NLoA55D343pVA.crl (hash: Lh+JZJss42iYEtC4s+xQib3x0z/f1zuLLlS44+pAgyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:85:b6:83:34:b4:40:fc:3b:85:7c:d9:a2:d4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Validity
Not Before: Mar 29 07:02:16 2026 GMT
Not After : Mar 30 07:02:16 2026 GMT
Subject: CN=3fb015abc4c294351334aecf327a43a86b6aa85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2e:e1:26:76:26:32:c9:4a:84:f2:ed:2b:25:
73:62:79:b0:2a:a7:d2:da:5c:39:7a:ef:95:69:4c:
5e:e5:f5:d5:f0:a6:89:34:48:6b:d3:cb:a5:a9:c0:
46:eb:f7:a6:8b:16:78:cf:c5:38:82:b8:96:9f:49:
b7:03:75:ec:57:59:2a:97:e6:90:16:ca:b9:b5:65:
d9:d7:c0:f9:f4:c7:b7:78:ca:c6:26:3c:b6:a8:70:
6c:88:ca:fb:14:36:16:ec:87:ed:19:f9:ec:33:71:
7c:5b:1c:8a:bb:b1:43:57:b2:ed:79:ba:98:ea:83:
93:59:d5:dc:75:46:f1:23:1b:01:45:6f:86:75:60:
79:43:5f:99:2c:a6:ed:23:3e:82:5b:0c:aa:a3:3f:
3b:1a:ee:ca:f5:ba:fc:43:dc:53:4e:68:da:7b:f4:
85:d0:7b:9e:93:ad:1c:45:48:28:3f:d4:24:b0:a6:
ae:72:d8:54:4b:76:b5:4e:84:ac:2e:bd:15:39:7e:
9a:67:e4:a4:89:00:87:27:62:17:1f:96:6e:95:60:
2a:d0:47:b9:f1:e2:42:d0:38:d2:c2:78:1f:f4:cd:
84:96:35:31:e0:fb:43:0c:24:1f:cc:5f:9b:00:fa:
4d:56:4c:0b:0d:e2:d9:73:69:e3:b3:ea:30:71:9a:
25:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B0:15:AB:C4:C2:94:35:13:34:AE:CF:32:7A:43:A8:6B:6A:A8:5F
X509v3 Authority Key Identifier:
keyid:F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fb:e1:18:55:80:e4:99:2b:7c:70:e2:04:79:be:d2:31:41:
44:32:0a:61:37:b6:b0:3a:4c:8a:f1:da:7d:8f:82:21:d1:51:
59:71:90:f5:cb:17:ea:a8:e2:35:fa:3a:99:6b:2e:46:ff:46:
63:b6:72:d7:c8:33:71:ea:5c:f4:c2:74:e7:34:13:4c:2d:56:
ba:91:3d:25:d0:ee:40:e3:1f:90:6d:22:8a:66:23:33:4c:9a:
19:fa:0b:11:aa:a0:2c:4d:e9:a4:6d:01:6a:3c:c6:8d:20:f0:
51:e0:15:25:fe:fe:62:e0:46:72:16:3f:ab:b2:4b:a8:37:c7:
be:c0:b7:69:c5:13:d3:d4:5e:cc:5d:95:1d:43:34:f7:89:16:
90:94:79:1b:86:e2:60:54:3b:a1:fb:54:3d:5d:dd:33:0b:b7:
49:68:b8:00:08:82:95:4e:4d:a2:b3:ed:80:e4:6d:38:d3:ba:
31:01:fb:eb:0f:00:67:f8:dc:bf:9a:95:1f:7f:7c:7a:62:6a:
9a:46:49:ce:8c:65:08:dc:f9:fe:16:fb:03:08:7d:03:63:c2:
b7:6d:1b:e5:37:29:8c:6a:48:ca:4b:89:ed:f0:6c:5b:65:f2:
f2:d7:71:ce:f6:42:1b:90:d7:1f:19:4d:33:2d:bb:c5:3a:56:
75:83:5b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:18 2026 by rpki-client