Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
File: 9BB8B7044997B7AAF52B54E757F998927956EC38.mft (raw, json)
Hash identifier: pjlDRZv+f7nc6S+bT12TWgflmLM4ZK8aCtJ6/LxXtF8=
Subject key identifier: 35:EE:F3:1B:C5:EC:9C:82:51:A0:BB:69:FD:5B:22:97:9B:4B:B2:90
Authority key identifier: 9B:B8:B7:04:49:97:B7:AA:F5:2B:54:E7:57:F9:98:92:79:56:EC:38
Certificate issuer: /CN=9bb8b7044997b7aaf52b54e757f998927956ec38
Certificate serial: 76134FBB907DDF8AA69977E0866C08500C8AF556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
Manifest number: 5D
Signing time: Sun 29 Mar 2026 01:40:50 +0000
Manifest this update: Sun 29 Mar 2026 01:35:50 +0000
Manifest next update: Mon 30 Mar 2026 03:16:50 +0000
Files and hashes: 1: 9BB8B7044997B7AAF52B54E757F998927956EC38.crl (hash: PL5LytHNZw4p1/y0jyYBbkCd2N43W9eVGov0QDAmxGs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.crl
rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:13:4f:bb:90:7d:df:8a:a6:99:77:e0:86:6c:08:50:0c:8a:f5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb8b7044997b7aaf52b54e757f998927956ec38
Validity
Not Before: Mar 29 01:35:50 2026 GMT
Not After : Mar 30 03:16:50 2026 GMT
Subject: CN=35EEF31BC5EC9C8251A0BB69FD5B22979B4BB290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:b9:30:6b:2c:0c:be:a8:37:db:14:e8:f4:
ed:37:1d:6c:33:07:97:9b:9b:31:bd:b0:63:d7:57:
c6:ca:84:99:13:5d:de:6b:2d:42:14:2b:63:b6:ec:
63:76:26:3a:09:c2:c1:d7:3c:ca:45:d0:e2:26:12:
24:67:d9:b5:ce:b5:13:2f:33:ec:63:71:52:49:f7:
1a:9e:7b:c4:e4:6d:9b:af:38:8a:72:69:d0:ff:90:
8d:e7:11:80:71:f5:4d:44:3e:67:f1:cf:00:13:fc:
b1:bb:fe:9e:ba:6b:2b:b7:63:31:3a:e9:65:64:d6:
2d:58:72:a5:41:ff:38:ab:25:2e:d0:1a:6b:3c:37:
92:5f:9f:b9:2e:93:5e:c0:7a:27:d2:54:cc:be:94:
47:ce:6d:7c:eb:a8:f8:c2:f8:a8:5b:fb:b3:07:5f:
60:ad:09:d2:29:07:51:09:e5:83:1f:3b:77:06:9a:
0b:b0:a9:1d:78:2a:ae:5b:e8:c2:f2:de:ab:74:ee:
0d:85:64:36:78:a9:87:86:e3:f1:47:12:d6:4b:11:
01:c0:5c:6f:93:2b:f1:19:cb:8f:fa:b1:c3:d0:49:
4b:bd:5d:08:78:ce:c9:3f:20:c9:37:4f:ec:ce:96:
1d:64:cf:b0:09:92:d6:ca:c1:4b:f8:fe:a1:51:6d:
9b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EE:F3:1B:C5:EC:9C:82:51:A0:BB:69:FD:5B:22:97:9B:4B:B2:90
X509v3 Authority Key Identifier:
keyid:9B:B8:B7:04:49:97:B7:AA:F5:2B:54:E7:57:F9:98:92:79:56:EC:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:38:43:a4:f9:2f:38:b8:ff:76:ed:5a:39:e8:7d:86:2c:ed:
a7:60:21:97:f2:e7:a0:83:33:4c:55:90:a1:c1:49:67:72:a1:
78:f8:e7:3f:05:21:2a:d8:50:19:74:0a:df:1a:e6:32:bf:8c:
f0:e5:49:57:14:bd:ae:eb:a1:25:be:bc:c2:8f:5c:29:ee:a7:
92:0a:fb:8a:b7:8c:cf:a9:9e:16:ec:20:3e:29:d2:d6:91:a8:
9f:76:15:9b:e0:b0:cd:07:05:3f:da:6b:69:b9:82:a9:cf:d6:
14:a1:66:37:4d:de:12:c2:a9:af:c4:67:45:b7:1e:eb:85:41:
00:38:1a:a3:00:19:2f:d8:38:32:74:37:54:6c:13:1b:c6:58:
18:fa:b6:30:19:8a:7b:f5:c7:fa:e1:51:77:7e:46:8c:80:f4:
97:7d:66:65:07:10:1a:3a:36:59:d6:bf:76:26:24:cb:63:bc:
e3:3f:21:d1:fb:5c:fe:9e:05:a1:82:7f:d9:3f:21:9b:96:e3:
d5:f5:01:69:7c:91:f9:bc:41:ec:bd:7e:d9:0c:24:d1:c0:16:
8c:a7:16:4e:62:39:35:9a:86:1e:72:12:2e:db:4a:f5:6c:da:
60:4a:8e:e1:bc:9e:36:f1:ef:db:4f:63:b2:ce:bb:ca:60:27:
be:dd:9c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:55 2026 by rpki-client