Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: 5UgRps1OtESIqMsGw9znolSgC0GkiWW4K1tMZbV8oKs=
Subject key identifier: 83:9F:AB:97:91:FE:0C:E0:6E:9A:3A:9A:08:5C:3C:4F:34:4C:C6:91
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 019D382E20E6588A1014F4D0FBF6AB5FDCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 08F6
Signing time: Sun 29 Mar 2026 06:00:40 +0000
Manifest this update: Sun 29 Mar 2026 06:00:40 +0000
Manifest next update: Mon 30 Mar 2026 06:00:40 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: BBPAfHyhercv6wDOSAAHZN+f051mwCun6VchKnNgg5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:20:e6:58:8a:10:14:f4:d0:fb:f6:ab:5f:dc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Mar 29 06:00:40 2026 GMT
Not After : Mar 30 06:00:40 2026 GMT
Subject: CN=839fab9791fe0ce06e9a3a9a085c3c4f344cc691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a4:38:ba:f7:6d:1c:d4:21:e2:00:49:e5:82:
7f:89:e6:27:c4:0c:55:3e:ba:e0:ab:66:a9:bb:28:
3f:55:d2:17:80:e2:00:60:46:74:7b:82:94:af:4b:
ad:a1:6c:44:81:0b:bd:6f:dc:81:d5:a3:8d:32:68:
0c:10:b5:c2:d8:dc:2b:e5:d4:53:06:7d:e5:1a:49:
b3:9f:57:bb:f8:e5:ab:e6:57:86:a2:72:0d:b5:3a:
ef:60:7a:b8:4e:13:2a:5e:c1:48:55:b4:fe:a4:64:
19:6a:b0:1c:d7:86:cb:e9:94:63:69:6d:f5:d8:95:
a1:70:f5:31:fd:c1:ea:7f:5d:9f:23:35:54:50:73:
76:93:0d:ce:f6:86:94:c7:3a:dd:78:ae:3a:1b:e3:
71:4c:e7:03:5f:25:ac:03:be:1e:20:e6:4a:6d:25:
e1:1d:0e:2c:b5:7a:b6:e6:e6:60:39:bc:b3:5b:24:
e5:1a:f9:52:6c:c9:f5:2e:36:37:54:c1:59:94:18:
bb:22:be:7b:10:d6:9c:70:ce:3c:72:0e:1b:85:6b:
60:f7:7c:60:42:14:10:03:85:3f:7c:72:39:29:28:
00:2b:39:e2:1a:8c:d2:f6:f0:b2:16:d0:79:57:a4:
2e:42:2f:ac:21:95:f1:67:fc:5c:c7:6a:9a:b7:d7:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9F:AB:97:91:FE:0C:E0:6E:9A:3A:9A:08:5C:3C:4F:34:4C:C6:91
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a9:c7:a1:25:5c:8a:ab:fc:ea:39:ce:cf:cd:f5:88:99:0b:
cd:f3:62:56:11:08:ab:83:e7:1a:25:1e:fc:67:0a:73:67:12:
fe:75:d4:2f:90:77:06:c4:d4:37:bb:33:96:fb:6f:3f:39:65:
21:e4:82:0e:e8:89:4a:ae:c1:bb:f2:d1:4e:fc:1f:18:9c:e6:
ab:e6:aa:13:6f:11:08:87:9d:5d:c7:bb:b0:ea:d2:93:d3:ee:
ce:15:cf:e9:8a:df:f1:62:75:90:4b:00:0d:fa:6a:64:5b:ad:
b3:25:63:dd:e3:89:b2:b4:73:d2:cc:e5:87:f0:64:b1:06:28:
9d:ed:8d:ea:58:e2:b3:12:3c:79:dc:af:35:a6:57:ab:fd:90:
28:fe:fe:15:33:cc:83:24:26:ef:f6:9d:30:a2:a3:24:5e:99:
b7:d9:b5:cc:05:d9:ee:dd:d6:14:63:5f:b8:97:d8:0f:c3:1e:
8a:74:d3:a8:14:28:49:bd:41:5d:78:45:36:9f:22:d7:dd:15:
e8:1c:7b:19:58:c3:60:2b:da:1a:1e:66:f6:33:1a:2a:8d:2e:
83:b1:f2:35:1f:83:9a:f3:7f:a7:fa:9a:be:c1:06:f9:a8:17:
f7:19:78:61:3f:f2:01:48:9e:6a:c6:4f:4c:72:c4:fc:a4:db:
74:03:2d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:32 2026 by rpki-client