Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
File: 9jOGnDZCtefqAii_DgspXO_MTd8.mft (raw, json)
Hash identifier: gYm7d7xGob+O49EdgT0O5CmvFO+lT9pmtrPBiwNb8Hc=
Subject key identifier: D2:1E:C1:9C:2E:B5:9E:F8:14:4B:A3:C4:97:80:E1:01:8D:59:D8:1D
Authority key identifier: F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
Certificate issuer: /CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Certificate serial: 019E303B44EF9E956317D1E1058510ACEFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
Manifest number: 1385
Signing time: Sat 16 May 2026 10:00:51 +0000
Manifest this update: Sat 16 May 2026 10:00:51 +0000
Manifest next update: Sun 17 May 2026 10:00:51 +0000
Files and hashes: 1: 9jOGnDZCtefqAii_DgspXO_MTd8.crl (hash: 1HymsiequQp06XioehvOAPRPBFwAsQCXvd80sPpdWHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:44:ef:9e:95:63:17:d1:e1:05:85:10:ac:ef:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Validity
Not Before: May 16 10:00:51 2026 GMT
Not After : May 17 10:00:51 2026 GMT
Subject: CN=d21ec19c2eb59ef8144ba3c49780e1018d59d81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:49:f6:21:5e:50:b0:00:ba:aa:f3:c8:46:97:
94:d1:a5:75:a2:d2:cf:f8:3c:e9:12:d8:e5:61:0f:
94:f8:18:ae:95:40:f2:d1:73:7b:54:93:b5:98:a9:
30:32:bc:f3:0f:59:ba:d5:d0:5b:df:f5:c0:4c:7f:
c7:ea:46:4d:5e:61:6b:2c:95:fd:00:35:41:38:df:
63:d9:b6:9d:b7:b1:7f:ad:5e:b8:6c:84:99:77:2d:
aa:6a:aa:fd:53:fd:82:b9:f7:f2:f3:7f:05:f1:9a:
ac:46:40:65:82:27:61:5c:e5:38:9f:f0:f5:1c:e5:
b2:54:01:44:29:85:33:c1:ee:a5:f8:a2:c3:dc:31:
4b:19:ac:f4:53:51:fe:b6:2f:e6:85:29:22:d9:3e:
ca:49:f3:14:50:60:d0:9c:88:73:03:f9:29:66:c1:
e5:76:41:aa:10:8a:8a:02:8e:6b:c6:7c:73:ac:4b:
42:4c:1c:c2:63:16:e3:58:63:f9:a7:0a:61:e9:eb:
59:1f:f0:67:24:2d:db:40:43:4f:6b:c5:1d:1b:2e:
f7:04:93:99:32:1e:cb:c5:30:36:7c:19:1c:4c:60:
17:88:d8:e8:40:ae:ff:2d:70:41:39:28:1e:6e:a8:
f5:c5:37:fe:d0:db:61:d6:ba:41:41:76:04:e4:97:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1E:C1:9C:2E:B5:9E:F8:14:4B:A3:C4:97:80:E1:01:8D:59:D8:1D
X509v3 Authority Key Identifier:
keyid:F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e7:46:91:6b:22:30:c5:d1:26:27:cd:e1:46:e5:1d:a9:82:
f2:2d:23:e5:41:40:ff:79:5f:f5:03:c6:b6:8a:3d:08:bc:77:
c5:fb:10:26:bd:6d:07:ae:47:90:10:97:19:c3:ed:ee:38:f5:
ba:5c:d5:0d:b4:9f:53:3f:4a:f8:21:c5:df:f8:95:e7:81:61:
f8:84:c8:47:c0:d8:ee:94:a1:0c:9c:aa:0b:4b:f7:3c:db:2a:
0f:47:74:40:75:97:d3:36:97:34:6e:5e:d5:dd:0a:2c:83:93:
07:c9:7e:f3:dd:84:cf:be:22:13:91:6f:67:05:af:c5:87:37:
89:d7:49:9a:f2:76:a9:37:0d:3e:5c:25:2d:9e:b9:8e:c3:b4:
40:c0:b3:18:2f:9b:74:f3:ae:e8:b3:38:2b:c0:1c:21:2c:5d:
ea:fa:28:19:e5:08:59:88:fd:e9:65:86:ef:00:a4:63:13:21:
b0:46:61:1e:55:45:20:70:07:aa:ae:4b:ad:c2:7b:50:79:c9:
be:eb:78:e0:5c:30:8b:dc:f2:b1:fd:06:89:c8:c1:5f:15:d9:
25:f1:06:1d:a7:11:3c:dd:09:a0:58:92:91:7d:c8:db:f5:8e:
9e:0e:f4:df:d5:04:eb:18:06:c4:45:25:a7:48:3b:63:ba:99:
5d:d0:52:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:52 2026 by rpki-client