Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
File: _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json)
Hash identifier: 3+lg9KJUbZnn1/oFK8ysjVBvFKakhy+v6TI0FmvG8bY=
Subject key identifier: 2D:A2:65:3B:77:40:9F:70:A6:04:0C:CB:C4:C2:B5:7A:0D:E8:0A:F2
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Certificate issuer: /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial: 019CE4EC91728EB604FF28C5C884C5787FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
Manifest number: 09D7
Signing time: Fri 13 Mar 2026 02:00:34 +0000
Manifest this update: Fri 13 Mar 2026 02:00:34 +0000
Manifest next update: Sat 14 Mar 2026 02:00:34 +0000
Files and hashes: 1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: QWqXyoWpj7zTFN964rD3fjd28YRew25LxVqVOvj0bxA=)
2: jON8jV9Q2GLdoq1oYbTtzWvSeAw.roa (hash: CpfaNm7QCE9dRH1Z5uGSs1NzanRsXUOVz00UoK4+1jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:91:72:8e:b6:04:ff:28:c5:c8:84:c5:78:7f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Validity
Not Before: Mar 13 02:00:34 2026 GMT
Not After : Mar 14 02:00:34 2026 GMT
Subject: CN=2da2653b77409f70a6040ccbc4c2b57a0de80af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:40:62:19:3e:b0:8a:d6:29:6d:8a:39:bc:
6b:22:31:e5:3b:d1:f0:d3:48:ce:92:2f:4c:3e:98:
3b:5e:b1:fc:b3:03:e5:10:21:93:29:94:bd:7b:26:
6d:05:35:00:32:6b:0a:44:72:30:9d:b7:84:af:29:
1c:ba:7f:ee:7c:91:6a:01:29:fc:6e:8c:91:a8:bb:
9e:5b:68:86:9b:99:e2:2a:f1:a1:a0:f8:11:db:35:
25:73:65:07:45:ae:31:e1:00:fe:88:f1:55:4f:96:
83:1c:b8:ea:48:5b:28:71:28:ed:80:85:22:96:60:
b3:66:75:3e:8c:b9:ce:23:9e:5b:78:d2:0e:f5:a3:
43:fb:b4:0c:01:76:7c:ad:77:86:df:c3:b8:48:33:
96:c3:0c:05:11:ab:86:af:56:e0:68:16:19:0d:9c:
06:1d:d1:73:5d:61:3c:21:e7:bb:56:0e:57:fb:dd:
97:37:70:4c:81:8b:f1:17:4b:05:53:4e:55:b7:f8:
69:ea:ff:34:46:c5:1b:75:dc:ac:5f:4f:4c:aa:6f:
93:2e:3e:12:f0:df:df:68:99:ea:ae:77:74:40:da:
86:bd:f4:83:55:82:ad:dd:02:77:87:16:ee:a3:98:
d7:56:32:d5:2a:17:91:4a:c8:64:23:cb:aa:15:d2:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A2:65:3B:77:40:9F:70:A6:04:0C:CB:C4:C2:B5:7A:0D:E8:0A:F2
X509v3 Authority Key Identifier:
keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:be:6d:ff:e8:24:62:ef:13:8a:fa:5b:aa:2d:2d:3b:0d:0e:
67:20:09:c7:33:03:51:13:32:67:96:dd:3b:d1:f4:41:bc:ea:
99:c4:74:91:b6:35:56:19:d4:7b:b0:72:32:32:89:4c:5e:62:
cd:4e:fb:7b:a4:d3:1a:31:f6:c4:ab:90:50:9a:2a:8b:5f:56:
98:e1:9c:b4:40:51:0a:69:e0:5d:58:5a:0d:a7:90:0e:7b:b0:
c0:0f:4b:de:f6:34:63:a4:f7:68:a3:79:cf:0f:d3:8b:4d:08:
ad:00:4e:36:12:54:e8:3b:44:a4:01:d3:b2:59:9a:f8:91:65:
32:d6:ad:85:03:b7:4d:3e:0a:6e:6a:26:8f:d2:d7:68:fd:6c:
70:7f:3e:b8:94:c6:06:b0:7c:b8:6f:f1:0a:d5:26:b4:0d:99:
ff:33:cb:99:2d:75:a6:ff:61:ee:6c:bf:69:b2:79:a3:f9:60:
06:c1:49:6d:df:07:b4:01:6f:3d:b4:84:b8:0b:55:25:74:5f:
17:44:7c:1d:9a:b5:1a:7d:ee:8b:5f:a4:73:46:ae:b8:5d:be:
3c:50:ea:e8:ff:6e:43:8f:9e:b6:aa:02:c6:fb:c4:27:95:a0:
46:50:c3:ed:2f:4d:17:48:48:4c:46:07:ac:53:a3:d6:46:8a:
a5:56:c3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:36:54 2026 by rpki-client