Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
File: 9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json)
Hash identifier: hIrX7BtIKbRMYJj4CfSlhBTmxxSiBKB8CcITsbgLC+0=
Subject key identifier: 28:FF:DE:20:C4:B6:A4:DF:B7:24:D4:CB:23:C5:21:99:68:CB:13:BE
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Certificate issuer: /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial: 019D38657A3EF05876D63D9EE86B13A3F60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 07:01:07 +0000
Manifest this update: Sun 29 Mar 2026 07:01:07 +0000
Manifest next update: Mon 30 Mar 2026 07:01:07 +0000
Files and hashes: 1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: QHJwvitDIlIsdbMS9/L/IPghZNgisFbHa6iRhHl0jw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7a:3e:f0:58:76:d6:3d:9e:e8:6b:13:a3:f6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Validity
Not Before: Mar 29 07:01:07 2026 GMT
Not After : Mar 30 07:01:07 2026 GMT
Subject: CN=28ffde20c4b6a4dfb724d4cb23c5219968cb13be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7d:25:ba:27:f2:cb:20:03:a8:11:bb:63:af:
d0:28:17:4b:41:34:9f:ca:75:a8:ee:54:ad:97:38:
73:f2:74:36:40:18:ca:14:20:7b:a2:50:1b:45:65:
fd:5e:b2:ed:8d:6b:15:3c:0c:9d:a6:23:21:ce:2f:
13:19:b6:a0:a3:79:91:78:9b:39:8d:4a:04:36:ef:
e2:2e:9a:42:02:db:e6:ed:12:92:cb:74:46:69:54:
09:bc:c9:9c:a5:2e:78:3b:62:50:45:80:75:2a:a7:
2e:fd:47:04:64:94:2a:6c:65:b7:9c:ed:73:80:4d:
ff:6a:0d:a4:ad:62:84:2a:2b:4e:83:cb:e6:4a:cb:
22:ef:06:fe:60:20:66:56:c5:c9:d9:26:4e:d9:a1:
55:49:5f:de:30:62:a6:cc:cb:d7:05:86:e3:de:e4:
70:13:6f:48:15:27:3b:b9:26:19:cd:5e:42:75:9a:
a4:e2:81:b1:c4:a3:e3:b2:c8:25:51:58:b4:ef:48:
06:a3:e2:78:80:65:9b:01:ce:17:dc:b5:d1:ec:a4:
52:b8:a1:c0:a7:6b:fe:37:33:8b:d1:8d:b0:fb:f4:
cb:eb:cd:57:64:2e:f3:7f:28:3f:78:52:91:5e:7a:
9d:b3:aa:3c:4c:76:11:e1:28:2a:3c:9a:ac:9e:c9:
7d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FF:DE:20:C4:B6:A4:DF:B7:24:D4:CB:23:C5:21:99:68:CB:13:BE
X509v3 Authority Key Identifier:
keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ef:aa:b9:4e:48:b9:4b:0f:11:3c:ab:d9:5b:9b:b8:2f:0d:
e0:ea:c3:f2:75:79:23:3a:c9:74:b9:b3:68:6d:1b:c4:1d:11:
a2:e5:8f:db:8b:af:94:5a:d9:1a:b5:d3:c7:f1:a9:32:88:d0:
73:ee:72:27:22:f1:32:2e:f5:15:c7:0f:42:75:a2:18:7c:53:
cd:41:c0:02:d3:91:ef:6d:79:a1:42:e5:64:b2:b3:85:27:35:
14:55:91:51:eb:c1:a9:80:52:ed:4a:cc:59:37:37:d8:80:c1:
dd:4f:37:63:b8:e0:50:9f:e2:6d:bf:84:05:2a:a4:7a:2a:06:
76:98:00:f5:3c:ca:e7:64:29:39:a8:be:01:e8:a1:5f:cd:c1:
0a:41:73:87:70:32:4a:2f:eb:2d:46:28:b0:30:96:cf:92:f6:
e5:eb:b3:8e:58:ef:eb:af:a3:8c:4e:b2:6d:5d:73:25:8e:bd:
f5:49:80:29:7e:d3:91:71:d9:b4:ae:50:55:7f:e3:3d:ad:84:
89:77:5a:7b:cf:e8:9a:ec:33:7f:af:8d:39:e6:60:cb:71:84:
b9:3e:95:fe:27:a9:43:d3:7e:c0:54:6c:a7:5d:9b:44:9d:83:
57:23:46:fc:6e:5f:6d:28:8d:f8:97:2e:dd:f7:6a:75:95:6f:
30:5e:76:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:15 2026 by rpki-client