Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
File: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft (raw, json)
Hash identifier: 8gs8rwrL8x0jE35UBd423SL0aTbL1dia659qtEyMOXw=
Subject key identifier: 48:CC:27:47:71:FB:4B:62:01:A3:5E:EB:CD:24:44:72:46:2D:AD:7A
Authority key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
Certificate issuer: /CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Certificate serial: 019D37C033528ACB0A1F148184BE3A01AEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
Manifest number: 0735
Signing time: Sun 29 Mar 2026 04:00:36 +0000
Manifest this update: Sun 29 Mar 2026 04:00:36 +0000
Manifest next update: Mon 30 Mar 2026 04:00:36 +0000
Files and hashes: 1: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl (hash: d6woxks7bHSR3c92jfT31Ppf/0KmGLnaaRHSNi4qfYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:33:52:8a:cb:0a:1f:14:81:84:be:3a:01:ae:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Validity
Not Before: Mar 29 04:00:36 2026 GMT
Not After : Mar 30 04:00:36 2026 GMT
Subject: CN=48cc274771fb4b6201a35eebcd244472462dad7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:5d:41:f7:64:8e:0a:dc:ec:8b:9d:b1:54:
d4:f9:f7:40:08:45:19:da:d5:ca:0b:ae:ef:b2:7b:
d4:6e:7a:c7:07:fe:cf:4f:6d:6a:0c:74:8f:52:4f:
38:ed:70:20:38:b8:72:c2:68:60:5e:00:ba:f7:13:
ec:71:a6:0b:e4:26:b4:e3:77:7c:bc:fa:d0:9f:c4:
25:9f:1b:1c:14:78:c1:4e:0c:79:dc:19:71:39:ac:
60:c7:22:64:56:04:85:7d:ad:96:fe:87:68:55:72:
29:d1:d2:d4:16:7b:e6:f1:9d:c9:13:56:60:7c:c5:
2c:5a:9d:83:d6:55:cb:0e:32:e3:57:92:63:59:65:
38:99:d0:f2:3e:44:22:38:51:d4:22:a6:01:a1:fe:
f4:0d:ea:24:1d:59:64:a9:da:04:92:7b:b2:02:2d:
4d:6c:53:e6:50:3d:44:20:f6:ec:19:71:ea:8a:75:
12:f4:54:ea:c3:7a:b5:48:89:30:42:fc:b5:cb:3a:
ab:c7:bd:ed:3f:8e:b6:2a:b3:e9:2f:e5:85:f0:7b:
39:0a:59:23:17:00:be:28:70:da:5e:b0:c1:aa:74:
72:54:8e:0a:5e:2a:04:6a:f3:29:f4:03:16:ac:65:
ec:29:a4:67:c3:93:42:f7:fb:9a:03:e6:36:9b:b5:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CC:27:47:71:FB:4B:62:01:A3:5E:EB:CD:24:44:72:46:2D:AD:7A
X509v3 Authority Key Identifier:
keyid:9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d3:20:7c:17:af:d8:a7:0d:e7:6f:cf:04:e3:00:15:33:0d:
fb:bf:d0:75:c9:f5:a0:4a:60:e0:66:d7:c2:12:95:e4:56:67:
15:2c:4e:0f:6f:65:74:77:4b:d4:e6:7b:9e:29:d1:a2:c4:8f:
c0:7d:7b:9a:5f:2a:f0:67:60:b9:66:f6:d6:bc:e1:81:5c:80:
44:1a:29:a4:a6:9d:7f:2f:b6:0a:03:c3:38:a8:0f:a4:6e:9c:
27:bd:1f:8f:a8:c3:11:7c:be:d3:73:83:b8:a1:d7:6f:d5:7b:
1b:bf:2b:47:4b:d7:d0:67:b9:f7:d8:38:4a:fa:7e:06:83:4e:
04:51:9a:cc:aa:47:a4:e3:4b:8e:44:ed:37:d4:34:c2:88:94:
3b:3a:06:aa:66:f8:54:a0:ad:f9:67:ea:44:d0:2a:9c:80:b9:
8d:6a:cd:5a:66:a3:03:c4:42:10:12:19:0d:f2:eb:45:66:17:
f2:2b:23:c7:be:1b:cb:db:77:48:f1:b4:61:df:8c:bc:85:f7:
53:09:5c:0b:f3:81:c9:8c:ed:90:94:72:db:a5:a0:c5:64:24:
bc:3e:f3:82:66:72:55:2b:8d:3e:29:1b:22:84:19:7b:49:2f:
58:4e:47:7e:4b:c4:41:5c:6a:c9:5a:b0:ab:7c:c1:ab:eb:7d:
92:fd:b3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:42 2026 by rpki-client