Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
File: 9PpnFz_1YpCIuXCWGuG-dGldxmE.mft (raw, json)
Hash identifier: DCP60igGknQQbvFz1lJwXnTTw+qMnZ7MEj++MFygiA4=
Subject key identifier: 74:3F:68:DD:D4:51:DF:0D:A7:C7:FD:2B:B9:C2:80:F1:04:B5:D6:9A
Authority key identifier: F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
Certificate issuer: /CN=f4fa67173ff5629088b970961ae1be74695dc661
Certificate serial: 019D38660C61CFC4E1310CA184ACEEAC777D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:45 +0000
Manifest this update: Sun 29 Mar 2026 07:01:45 +0000
Manifest next update: Mon 30 Mar 2026 07:01:45 +0000
Files and hashes: 1: 9PpnFz_1YpCIuXCWGuG-dGldxmE.crl (hash: LIKD9FLOAVLRXfpk13YddTpeYkmh5q8B1mjidpE2jP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0c:61:cf:c4:e1:31:0c:a1:84:ac:ee:ac:77:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa67173ff5629088b970961ae1be74695dc661
Validity
Not Before: Mar 29 07:01:45 2026 GMT
Not After : Mar 30 07:01:45 2026 GMT
Subject: CN=743f68ddd451df0da7c7fd2bb9c280f104b5d69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:77:ee:70:30:5d:4c:a7:42:ff:e8:fb:b6:
d7:e1:87:ce:68:ac:a3:9e:1f:71:8f:0a:9d:50:cc:
18:0f:be:e1:bd:da:16:95:fe:37:57:e2:ca:4c:ba:
f8:81:af:a9:c4:5b:c1:48:fd:de:79:4a:62:fc:ba:
69:28:5b:a6:93:33:66:d3:3e:07:ed:27:a0:29:a2:
82:7d:9b:1e:85:63:be:2a:ea:64:30:ed:4a:c7:e1:
cd:4d:d2:91:ae:d8:f0:a8:56:0f:fa:6a:d4:5b:e8:
a2:5e:73:c0:91:e8:d7:54:08:37:cd:83:1a:8b:0b:
cc:21:e1:f2:16:00:db:d7:41:6b:eb:19:36:59:18:
be:90:21:09:6d:d6:91:65:c8:9b:36:18:7b:fd:e7:
6d:1c:af:fb:1a:44:4d:75:9f:0c:86:d9:2e:65:7f:
76:e2:e0:bf:fe:a2:b7:a7:d7:2e:27:94:3f:81:da:
e0:58:29:9f:ac:43:a2:1f:23:3a:91:fb:22:ce:fb:
5c:27:f3:47:91:94:2e:7e:aa:9d:ec:74:81:fa:45:
0f:c0:10:7e:c4:26:ba:65:7c:4c:75:2e:0e:6f:a5:
e7:85:30:8d:a2:c0:53:68:bc:fc:3c:ac:68:31:49:
4b:59:26:d3:ba:3c:65:d6:16:ec:76:ac:35:34:48:
93:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3F:68:DD:D4:51:DF:0D:A7:C7:FD:2B:B9:C2:80:F1:04:B5:D6:9A
X509v3 Authority Key Identifier:
keyid:F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f1:6f:d3:60:8e:80:cc:fe:6c:11:b6:c7:07:96:65:2e:35:
0d:fa:3b:bb:04:c5:69:36:67:10:22:7e:bf:4c:f0:74:e2:00:
68:84:8e:b1:8c:cf:02:bb:46:25:34:33:67:c4:2b:fd:64:83:
25:66:23:48:23:34:5e:bd:9f:34:af:12:b5:64:35:29:16:e5:
67:82:bc:14:17:34:c0:a3:49:35:54:dd:58:e3:06:ef:ad:57:
6a:da:6b:24:cc:d6:f6:9a:db:cc:52:0e:88:cb:15:49:92:d9:
e5:12:61:cf:40:1e:c3:52:de:57:5c:2c:23:21:f2:05:a9:bb:
b1:7b:8c:cc:b9:3d:da:96:a2:91:28:df:5a:df:78:e8:db:8c:
89:42:9d:50:16:3d:0e:76:d3:84:c4:37:d9:4e:66:78:5d:5b:
bc:78:76:87:9e:31:be:b3:72:b8:2e:8b:a8:78:49:b5:5d:5b:
c6:9f:62:4c:00:f6:ae:21:b8:1d:45:52:c3:2b:d6:18:c7:60:
a6:47:7c:ea:4d:e7:65:d6:bc:6e:d5:94:59:26:0a:27:a7:3f:
85:0c:9b:43:6e:ca:0c:90:27:c2:41:1b:de:e6:59:29:d6:f3:
31:b5:08:23:31:64:6e:d3:73:12:62:cc:a1:1d:dd:7f:34:8f:
f8:d2:aa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:46 2026 by rpki-client