Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
File: 9I2q8EbhmDbp4poD5DzVNeIXYXY.mft (raw, json)
Hash identifier: j17/utUUQHHMTH91a20BYguGEDmoC6SwCt1GzyynsdY=
Subject key identifier: C8:82:61:CF:6F:CF:29:01:1E:1E:88:7D:B8:20:02:1A:21:7B:EE:24
Authority key identifier: F4:8D:AA:F0:46:E1:98:36:E9:E2:9A:03:E4:3C:D5:35:E2:17:61:76
Certificate issuer: /CN=f48daaf046e19836e9e29a03e43cd535e2176176
Certificate serial: 019D382DE6545AF525A2AD62637550DA17EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
Manifest number: 01F0
Signing time: Sun 29 Mar 2026 06:00:25 +0000
Manifest this update: Sun 29 Mar 2026 06:00:25 +0000
Manifest next update: Mon 30 Mar 2026 06:00:25 +0000
Files and hashes: 1: 9I2q8EbhmDbp4poD5DzVNeIXYXY.crl (hash: KTyaa/hXIEcvRgBcuQSRlAUwQvqGeiPnmTh+OxUgnJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e6:54:5a:f5:25:a2:ad:62:63:75:50:da:17:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48daaf046e19836e9e29a03e43cd535e2176176
Validity
Not Before: Mar 29 06:00:25 2026 GMT
Not After : Mar 30 06:00:25 2026 GMT
Subject: CN=c88261cf6fcf29011e1e887db820021a217bee24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:4e:29:fd:8e:e6:a4:ee:71:19:9e:e0:42:
6b:83:2d:1a:03:a0:cd:1d:7a:aa:8f:75:eb:da:d4:
a4:38:2a:f3:0c:cb:53:b7:92:7a:4e:cd:c8:1b:25:
50:2d:b3:7e:32:ab:9b:63:06:66:a4:ad:a5:31:36:
93:88:d6:fe:2c:2f:bf:b8:b1:17:9f:1b:43:ad:cd:
30:3a:d2:fd:cc:bc:d6:a5:89:c4:56:1e:46:cd:09:
da:8f:f8:b5:71:b8:a0:c6:97:db:de:a3:a0:a8:74:
9f:44:2c:0d:10:1a:c9:0e:c8:38:2e:66:d8:3f:36:
13:db:b5:ac:8b:65:6c:52:80:b5:a1:20:56:cd:d7:
49:94:88:f2:57:00:61:28:7c:03:d0:01:67:da:28:
51:50:29:94:44:5a:c1:c8:11:2a:a1:69:ec:0c:ac:
86:de:1f:93:98:11:f9:55:4b:e8:89:88:17:01:bf:
5d:bb:ea:24:c5:ac:3d:31:ae:57:b8:5c:a1:2c:6b:
f5:75:44:5c:c4:a8:25:81:fb:6b:36:26:8c:a4:10:
e5:4e:a6:6f:8e:3d:7f:08:30:6c:9d:19:1c:77:ce:
92:f1:a8:82:9c:cb:74:4b:ed:2a:e4:08:c4:94:11:
fa:8f:ab:1e:b8:5e:f5:82:95:c1:4c:c7:bc:69:90:
43:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:82:61:CF:6F:CF:29:01:1E:1E:88:7D:B8:20:02:1A:21:7B:EE:24
X509v3 Authority Key Identifier:
keyid:F4:8D:AA:F0:46:E1:98:36:E9:E2:9A:03:E4:3C:D5:35:E2:17:61:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0b:39:1b:ed:45:dd:f2:ac:2a:8c:88:c5:1c:b3:f8:4c:2b:
dd:02:99:48:fd:70:fb:0f:c4:9c:c7:6c:04:23:d6:1e:94:04:
07:fe:09:bc:05:9f:9b:31:12:06:aa:23:8e:7e:f3:70:a3:8a:
8a:05:fe:19:41:db:ea:f8:5d:21:ae:80:aa:be:66:3d:54:24:
88:2c:82:4e:9f:75:83:50:61:39:9f:1d:74:5c:93:6f:1e:51:
a9:a2:7d:86:9e:b0:54:fb:16:17:c0:57:ba:35:34:f7:96:ae:
ce:f1:b0:dd:37:80:b1:fb:e2:be:bd:74:d0:98:52:90:09:13:
3e:94:25:9e:08:34:c3:d7:65:79:7b:0e:c3:5c:a9:9d:b3:c1:
4f:69:48:24:7f:dd:f0:98:cb:e7:0e:38:f4:91:07:1d:8f:95:
83:6d:33:a5:cc:44:fd:46:b0:4c:af:73:01:a4:67:d6:af:04:
50:0f:ce:1a:ce:35:24:47:d0:92:8f:e5:99:73:b2:58:75:9b:
5f:e5:55:86:c7:3f:20:79:2f:b6:b2:e1:f4:8f:1d:89:5f:46:
d1:ba:3c:8f:69:70:aa:3e:d7:41:4f:b9:cf:e1:a7:9b:ee:ee:
0b:16:0c:29:0e:7a:74:c5:31:17:25:01:f2:8e:9b:e1:0e:70:
f4:37:14:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:54 2026 by rpki-client