Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft
File: 9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft (raw, json)
Hash identifier: vCZsVGQ4q1v+6yemcGNMLIsPXUaRvysKqYKNvWGVdso=
Subject key identifier: A6:F0:6A:A0:DC:D4:1A:76:65:E4:D7:4D:0B:53:FA:8E:A1:16:91:62
Authority key identifier: 9C:9C:8D:51:85:D8:12:5C:9D:65:49:0A:0E:E0:60:1C:99:7F:DA:A5
Certificate issuer: /CN=9c9c8d5185d8125c9d65490a0ee0601c997fdaa5
Certificate serial: 5F60BABDAA323CC2586632C15232EBFEF27D706E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJyNUYXYElydZUkKDuBgHJl_2qU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft
Manifest number: 018C
Signing time: Sun 29 Mar 2026 08:14:36 +0000
Manifest this update: Sun 29 Mar 2026 08:09:36 +0000
Manifest next update: Mon 30 Mar 2026 11:40:36 +0000
Files and hashes: 1: 9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.crl (hash: 1p167EdSkDEK7310ZftnqVefeNMUZrrCzcKaNTIdfes=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJyNUYXYElydZUkKDuBgHJl_2qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:60:ba:bd:aa:32:3c:c2:58:66:32:c1:52:32:eb:fe:f2:7d:70:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9c8d5185d8125c9d65490a0ee0601c997fdaa5
Validity
Not Before: Mar 29 08:09:36 2026 GMT
Not After : Mar 30 11:40:36 2026 GMT
Subject: CN=A6F06AA0DCD41A7665E4D74D0B53FA8EA1169162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:a3:5f:a7:3b:ca:86:a2:9e:72:3c:6d:59:
36:81:42:28:4b:7f:a6:72:44:3f:2f:80:de:c2:d2:
99:d0:33:08:f4:81:9c:81:7f:1e:b5:bb:f2:57:4f:
10:ee:bd:8e:0f:a2:51:f6:da:eb:37:0a:d6:86:4b:
83:41:a9:02:32:dd:e9:4a:98:37:44:67:b1:73:13:
41:07:b9:31:b8:4c:bb:4c:fa:1b:03:0c:27:53:04:
c6:7c:b9:b1:48:2a:c7:ad:75:ab:c3:03:0a:df:5f:
78:0f:63:d0:45:fc:60:6a:c8:9b:ef:8e:87:b7:fc:
79:97:d2:df:ac:d9:5d:cb:00:af:37:f8:27:8a:16:
a4:aa:50:23:41:1b:bd:e3:7a:b4:68:07:85:7e:93:
08:2b:99:4d:95:4b:f3:db:7f:da:9e:cd:1f:d2:ce:
7d:42:f0:90:5c:42:73:d1:64:c3:ee:3c:3c:2b:d2:
62:b2:ab:e9:c2:65:8b:16:a7:be:08:53:d5:72:91:
65:b4:02:d0:08:e9:4c:48:d4:8b:79:b3:f2:de:61:
64:59:d5:d3:65:bd:86:96:24:6d:7f:cd:35:68:1a:
32:bb:b5:f0:b4:4c:d8:61:70:c4:2d:ef:11:99:8e:
01:7c:f4:57:28:56:4b:22:9d:7d:d3:7f:48:32:47:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F0:6A:A0:DC:D4:1A:76:65:E4:D7:4D:0B:53:FA:8E:A1:16:91:62
X509v3 Authority Key Identifier:
keyid:9C:9C:8D:51:85:D8:12:5C:9D:65:49:0A:0E:E0:60:1C:99:7F:DA:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJyNUYXYElydZUkKDuBgHJl_2qU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:84:c1:64:c0:98:26:22:6d:16:bf:3d:9d:6d:5d:85:53:f8:
5c:09:ce:5a:e3:d3:f2:20:4b:cf:fe:ce:bd:2c:08:bf:b4:fa:
c9:fc:38:34:11:42:8c:9a:9c:f5:97:0c:dd:ee:cd:ce:86:4a:
0f:cb:c9:ad:ef:be:67:dc:ed:db:53:cf:20:cf:f9:29:57:0f:
e7:94:3f:ed:ba:d4:6f:34:06:9f:97:ef:36:c9:b4:29:d4:b6:
28:ad:5e:58:64:4e:00:9e:91:87:52:ba:1a:bc:53:a8:cd:9e:
9b:03:84:85:37:15:1e:c6:ba:d9:b7:13:1c:a9:7b:81:45:03:
4d:ae:ee:8f:7e:50:08:1f:63:bc:bc:2e:4d:f5:bd:8d:ad:56:
d6:3e:55:d3:3b:77:af:31:b0:8f:fd:1b:b8:5a:8c:4c:05:3c:
57:86:fb:7f:01:a6:66:f2:ec:cc:1a:c1:7b:82:4b:6c:49:c1:
78:27:62:53:5b:76:29:80:87:85:ee:6d:ad:b4:6c:c9:ae:e4:
5c:de:da:13:bc:58:d8:92:c9:18:d2:40:14:05:09:90:69:a0:
27:d3:9d:79:90:4d:87:68:12:5f:8e:bd:35:68:c1:d2:39:f1:
a4:c6:87:8b:75:20:5e:4b:59:db:93:ad:c8:67:32:70:ee:36:
79:dc:7d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:57 2026 by rpki-client