Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier: XXCOt1xpxnisoJM2+16RTtY9gI+FbpX67DW+mW12tzE=
Subject key identifier: 40:C3:50:89:F8:B9:4F:41:C8:CF:75:01:1F:E5:45:19:83:63:55:18
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 019D38D298E8FB2493D833237C132708A6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number: 0DC2
Signing time: Sun 29 Mar 2026 09:00:18 +0000
Manifest this update: Sun 29 Mar 2026 09:00:18 +0000
Manifest next update: Mon 30 Mar 2026 09:00:18 +0000
Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: qrApWv1Jyk4fX4At0EpUveoA0bPcsIYGWyhVQCxRAHQ=)
2: yCy_86dbJqoexnTrD2dlicXc2yE.roa (hash: JBNXmhezJRCIp5u3OP1UX59OO3DddhKcgHEEF7XBd38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:98:e8:fb:24:93:d8:33:23:7c:13:27:08:a6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: Mar 29 09:00:18 2026 GMT
Not After : Mar 30 09:00:18 2026 GMT
Subject: CN=40c35089f8b94f41c8cf75011fe5451983635518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:f1:00:bc:90:9e:fd:36:b0:1f:b5:fd:29:
dd:2a:2f:dd:b7:fe:7b:c4:01:ba:26:74:f2:6b:90:
02:66:7d:be:b2:45:88:a6:cd:a0:87:c0:bf:f6:8e:
b8:2e:08:a5:94:29:31:d5:45:ae:90:9e:d4:eb:61:
d9:e4:fc:1e:3e:9c:04:34:69:b6:01:5c:80:8e:96:
30:cb:56:cb:b3:4d:54:5b:37:8f:5b:63:c7:dd:e7:
63:18:33:15:6d:8b:70:7a:4a:dc:dd:7f:23:36:f4:
93:30:3f:5f:da:b2:41:f0:3e:2b:b6:f9:44:b0:f1:
4f:49:be:48:22:1a:c9:ff:87:86:a1:64:9f:c5:a2:
b6:26:73:88:ac:81:32:3e:58:e5:bf:cc:ad:70:a3:
e5:34:ef:5b:f6:36:37:39:5e:50:99:43:26:17:3f:
28:fd:6e:46:62:31:55:9e:b6:66:61:20:46:95:5e:
41:88:e4:fa:c1:56:27:35:95:20:89:4e:be:f7:ae:
52:a9:e8:30:c2:9b:fe:03:63:d1:53:19:10:72:24:
c5:2a:b2:d7:fd:13:a6:2b:b1:bf:4c:47:6b:8a:1c:
b0:70:8d:89:42:8d:ed:cf:e2:48:97:30:f0:56:f0:
97:50:07:e7:15:3d:48:e1:12:62:92:4b:50:92:f5:
b4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C3:50:89:F8:B9:4F:41:C8:CF:75:01:1F:E5:45:19:83:63:55:18
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5b:24:98:b1:56:1a:9e:95:3e:90:71:a2:f1:69:92:b1:80:
8c:7d:1d:da:01:6e:84:d6:3b:0c:b9:1c:d2:0a:e0:c9:95:c7:
85:fa:66:5a:b0:c6:f6:e0:89:0e:db:f5:27:24:1a:c1:e3:6a:
f2:e6:95:d9:8d:f6:70:9e:8c:10:cb:30:38:fa:16:bb:5d:06:
ea:f0:a9:d1:66:f1:ba:be:72:3d:6e:7b:4d:2a:31:4e:34:73:
66:b3:17:f3:3f:bc:f5:27:6e:10:84:14:2a:9c:e6:ee:2b:33:
f0:bb:4f:67:85:19:48:71:a8:92:f0:be:79:41:a4:be:70:79:
91:72:c9:95:e3:f8:f2:ae:6d:6d:50:69:0e:c8:f5:da:ad:c8:
d4:4f:f2:9d:d1:3c:1c:65:a3:d6:e6:1e:a2:70:26:e6:34:19:
bd:9d:d9:57:1f:e0:72:8a:4d:f8:0d:2f:d7:9e:3f:03:13:42:
ac:fc:df:55:57:27:a7:75:8f:b1:06:4f:76:3a:f3:0b:14:ed:
96:7d:e2:2b:55:be:c9:7f:23:e7:51:79:07:68:8d:63:24:2d:
2d:07:11:26:d3:29:fe:9e:d8:c2:6a:94:bf:64:a7:fa:2a:67:
0c:3b:f9:5b:e9:e5:b2:e6:b3:e5:5e:ce:e4:19:d5:00:64:72:
6d:4b:d8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:50:52 2026 by rpki-client