Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
File: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft (raw, json)
Hash identifier: 859jmT20Cwn4IFUuSUAc6w7+QaSvFJqRLrd5ATiJJTw=
Subject key identifier: DB:60:B1:33:5B:EB:4E:24:DF:AE:0F:51:3B:22:55:6A:29:F5:07:B8
Authority key identifier: F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0
Certificate issuer: /CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
Certificate serial: 019D38D38EAC507BB5E7955D0BE1769E4337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
Manifest number: 181D
Signing time: Sun 29 Mar 2026 09:01:21 +0000
Manifest this update: Sun 29 Mar 2026 09:01:21 +0000
Manifest next update: Mon 30 Mar 2026 09:01:21 +0000
Files and hashes: 1: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl (hash: bmeGUnx/cHUyQHz9dtn7cf/xANgXr3a+fDw3UikYUBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:8e:ac:50:7b:b5:e7:95:5d:0b:e1:76:9e:43:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
Validity
Not Before: Mar 29 09:01:21 2026 GMT
Not After : Mar 30 09:01:21 2026 GMT
Subject: CN=db60b1335beb4e24dfae0f513b22556a29f507b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:b4:f8:68:b0:dc:ce:bf:f8:e9:51:f6:d3:
9a:38:b5:a7:26:3b:ca:0c:a5:d1:6b:05:a5:1e:a7:
8f:aa:20:ff:7d:5c:57:d3:4c:8a:1b:aa:fd:2a:bf:
ac:69:56:a3:6d:fb:fc:10:98:19:18:47:52:31:75:
35:a1:8c:6a:b4:63:fc:d1:6c:cc:46:89:47:f9:5b:
fd:f8:0c:09:16:74:d2:64:3f:e0:65:67:c1:19:99:
7f:3b:d5:0d:66:a7:d5:e5:28:3c:72:e8:fc:1c:db:
99:2e:b6:86:5b:60:de:f9:43:e9:d0:7b:95:a5:86:
80:ac:b1:14:fc:a3:34:c9:99:ba:0a:69:3b:a4:15:
17:17:91:95:a2:db:60:98:aa:5c:22:82:3b:dc:0a:
e6:4b:b2:de:e6:10:52:df:50:fd:64:85:12:d3:e3:
da:0c:36:7d:bd:08:6d:a7:58:4b:97:b2:07:fd:0f:
fe:53:b0:5f:51:ed:1b:10:fe:f9:34:81:46:0c:d4:
34:59:7e:1d:a1:84:00:4f:84:c6:82:94:88:7e:2b:
c2:0d:a5:98:cf:c1:19:9a:1d:4c:c7:cd:6d:8b:46:
20:30:69:c9:e3:d9:4e:d5:3e:38:99:40:51:f5:e6:
b8:9d:03:de:69:1e:02:98:9b:d9:20:c9:e2:08:dd:
fe:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:60:B1:33:5B:EB:4E:24:DF:AE:0F:51:3B:22:55:6A:29:F5:07:B8
X509v3 Authority Key Identifier:
keyid:F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:78:c5:96:53:4d:05:b5:ce:78:16:68:c2:3c:0f:51:d2:44:
85:a8:5a:0e:ea:bd:b7:3e:cb:7b:be:32:08:7b:46:02:d5:9a:
a5:30:a1:e5:2a:83:69:ab:d3:a7:ef:e1:12:02:49:fb:e1:ec:
f2:31:7e:37:b1:09:d7:88:89:ac:35:48:4c:ce:68:f6:08:b0:
83:f8:8c:a3:b6:d7:f8:bc:46:0f:00:59:f5:79:9c:46:26:00:
b3:b0:68:3f:31:b3:23:be:40:a6:b9:c5:49:82:3f:f5:38:81:
d3:48:d2:25:0d:f9:9c:8c:97:9b:10:71:65:ab:35:c9:1b:8d:
a7:f9:99:62:57:91:97:3c:8b:db:19:80:07:99:69:98:62:fe:
db:6d:97:d3:18:f3:d8:b6:a9:28:9e:94:bc:13:00:19:2c:d3:
b3:7e:1c:11:23:6c:5e:1a:eb:ed:29:2c:2d:fb:64:6a:69:9a:
31:3f:69:b3:3d:2d:ec:f9:db:a0:da:9b:27:28:de:75:e5:c1:
8b:5f:ff:ee:02:99:6a:5f:7c:64:17:c9:05:c8:71:b5:56:fe:
61:9f:a0:a0:f7:a9:c4:46:6c:fa:81:0c:55:3c:a0:87:cd:3a:
39:87:63:1c:20:7d:5e:f6:11:74:e3:97:e3:30:32:f2:6d:e1:
d9:3a:ae:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:52:23 2026 by rpki-client