Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
File: 9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json)
Hash identifier: 5U2s1SHWQ+IPEOGKj+bpW4WD84q5Mt4Jeoy1MlE/79E=
Subject key identifier: A1:9A:AC:CF:5A:31:26:19:5B:B1:05:83:65:FA:60:50:5B:04:2F:97
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Certificate issuer: /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial: 019D38D3B077C457BE01A7D6051D3710A101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
Manifest number: 07F9
Signing time: Sun 29 Mar 2026 09:01:30 +0000
Manifest this update: Sun 29 Mar 2026 09:01:30 +0000
Manifest next update: Mon 30 Mar 2026 09:01:30 +0000
Files and hashes: 1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: gGKBKZ7iagv4veLgVaPpE9NVb6emPGJgt7PWEMxFC8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b0:77:c4:57:be:01:a7:d6:05:1d:37:10:a1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Validity
Not Before: Mar 29 09:01:30 2026 GMT
Not After : Mar 30 09:01:30 2026 GMT
Subject: CN=a19aaccf5a3126195bb1058365fa60505b042f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e8:db:dc:da:ab:5b:b1:03:35:e3:20:85:9e:
04:e1:bb:72:6f:67:bd:56:cb:3c:26:28:30:2f:f1:
46:57:a2:b6:8b:09:11:84:04:a6:12:90:42:9e:1a:
70:53:33:bb:b8:b2:1e:9d:13:5a:93:92:01:e9:e5:
03:b8:04:cc:51:cd:dc:8c:4f:15:a2:7b:c0:a2:53:
3d:87:a3:6f:84:51:78:01:4a:28:07:c9:f5:1e:35:
1a:88:0f:2c:23:1a:ee:83:4d:d9:07:65:1a:e2:c3:
c1:43:24:db:03:fb:34:6f:c3:f8:27:85:03:33:a8:
4b:af:26:a6:ca:45:d1:ec:97:c9:b1:d7:33:eb:84:
9b:e7:89:e6:26:b9:81:92:88:17:f2:b3:86:e3:6e:
aa:b6:11:21:ff:3b:74:bc:fa:4b:b0:4e:9b:d5:05:
b9:b2:ab:ce:ff:3b:79:e0:63:3c:9a:4a:87:7e:15:
e0:82:7b:75:f9:bb:79:b6:b5:e9:f0:44:2f:fb:a1:
0f:2a:52:8a:8f:2e:ca:ec:bc:15:51:fd:68:db:2d:
10:a9:08:41:22:57:95:ad:c6:05:69:f6:c7:c6:8b:
cf:32:cf:5a:38:04:34:16:fd:c3:50:ee:6b:e9:7d:
e0:68:4a:d5:4c:94:40:55:bb:e2:26:90:52:2f:f8:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9A:AC:CF:5A:31:26:19:5B:B1:05:83:65:FA:60:50:5B:04:2F:97
X509v3 Authority Key Identifier:
keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:bb:9e:3e:c6:b0:14:80:d6:e4:6d:f4:80:37:71:1f:69:eb:
b7:d2:ef:7c:e9:04:88:72:8e:d4:4e:49:1f:a9:ee:4e:7a:fb:
42:c4:83:67:17:31:6b:49:eb:15:28:12:c0:41:91:bf:44:59:
87:30:56:6d:4b:41:65:8d:5f:6d:75:4f:13:0a:bb:96:3b:7e:
38:c4:d7:c0:64:da:a3:04:f3:af:78:31:22:bd:cb:46:7c:95:
cb:1f:9b:0f:67:23:3f:00:91:77:b1:38:81:1e:16:5f:37:a9:
f6:ee:94:d2:a3:9b:22:fe:15:03:a7:9d:ce:56:c4:74:31:b1:
f6:4c:44:58:4b:06:df:b2:9e:d5:14:8b:6e:dc:71:b2:f4:05:
c0:03:45:7d:de:c0:64:66:55:19:68:97:eb:49:a0:85:00:80:
1b:e9:aa:03:a1:a7:06:a0:d5:4d:7b:34:d8:55:33:e0:f4:87:
39:0d:a8:e4:3d:0c:4e:f1:4b:75:6a:43:16:32:5e:2f:49:72:
06:68:ad:9e:49:37:61:aa:7f:ef:54:24:f6:16:85:77:d7:ad:
47:62:85:86:ac:9c:e2:87:53:8a:f8:28:a9:c2:d0:70:ce:96:
c9:1d:82:89:b6:b9:7c:2b:b3:e0:12:3a:30:b0:96:a6:92:c9:
58:fe:0e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:02 2026 by rpki-client