Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft
File: 9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft (raw, json)
Hash identifier: /BnZO2PoZ/aBCmG0B3mtOdI3BTkOQVhzD7Y+gKMIbPU=
Subject key identifier: CB:D2:4B:1D:16:9F:0B:CE:68:C6:C0:13:94:26:16:DF:EC:12:4C:A1
Authority key identifier: 9C:2C:B2:B4:BE:C6:01:B3:E9:A4:74:02:15:E1:DE:D2:11:72:2D:64
Certificate issuer: /CN=9c2cb2b4bec601b3e9a4740215e1ded211722d64
Certificate serial: 74BC070733735D9E055123BED17091AD5CB0E9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCyytL7GAbPppHQCFeHe0hFyLWQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft
Manifest number: DE
Signing time: Sun 29 Mar 2026 04:40:36 +0000
Manifest this update: Sun 29 Mar 2026 04:35:36 +0000
Manifest next update: Mon 30 Mar 2026 05:14:36 +0000
Files and hashes: 1: 9C2CB2B4BEC601B3E9A4740215E1DED211722D64.crl (hash: /rnFFQOvNxs9AhOZPRsDKSyf8uAKvVVth2Ti+5Ws5F0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.crl
rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCyytL7GAbPppHQCFeHe0hFyLWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:14:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:bc:07:07:33:73:5d:9e:05:51:23:be:d1:70:91:ad:5c:b0:e9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb2b4bec601b3e9a4740215e1ded211722d64
Validity
Not Before: Mar 29 04:35:36 2026 GMT
Not After : Mar 30 05:14:36 2026 GMT
Subject: CN=CBD24B1D169F0BCE68C6C013942616DFEC124CA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:60:2c:d1:5b:a4:7a:5d:97:92:17:fc:fd:
c6:57:1b:eb:d3:c8:cf:fc:de:7d:50:d0:81:ed:56:
7a:20:f8:88:1e:26:14:9e:08:76:d3:9f:68:9b:cd:
8b:4a:c3:60:22:0f:29:33:4a:5a:97:e4:22:90:d1:
3f:c6:56:ba:2b:82:b4:0a:aa:bf:b4:59:e7:f2:ec:
69:ed:19:6b:bd:b6:0b:d1:39:69:5e:d2:14:70:03:
1f:e7:03:dd:0b:8e:9c:61:ae:01:dd:a2:a2:7b:44:
18:e3:0b:ad:23:10:05:95:de:96:c9:30:58:4d:88:
f6:c2:a7:9d:13:6a:59:ef:49:a2:95:38:95:7e:00:
e4:52:7e:d6:00:b2:a7:ec:45:49:36:b3:64:27:a5:
7b:1c:55:21:80:8c:e9:64:66:75:98:82:a4:9c:35:
4a:d0:a3:d6:5d:e0:0f:b8:24:31:7a:a1:e0:cf:ab:
d3:e9:21:a3:6c:53:c1:d4:53:c6:8a:2f:8a:5a:47:
54:55:f7:17:c4:9a:97:85:53:b5:16:0d:88:66:02:
f9:09:47:b5:f2:89:6a:54:20:71:45:fd:70:53:5e:
24:31:b6:bb:a4:d4:b7:98:47:2f:0c:36:c1:0c:46:
ca:bd:bb:2e:97:62:22:7b:ef:5a:dc:a1:f8:ad:e0:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D2:4B:1D:16:9F:0B:CE:68:C6:C0:13:94:26:16:DF:EC:12:4C:A1
X509v3 Authority Key Identifier:
keyid:9C:2C:B2:B4:BE:C6:01:B3:E9:A4:74:02:15:E1:DE:D2:11:72:2D:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCyytL7GAbPppHQCFeHe0hFyLWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:57:26:3d:96:99:25:f8:c1:07:2d:33:f8:e2:19:0a:e7:be:
bc:f7:6a:9e:bb:be:0a:09:12:ab:b7:e5:ad:9e:ce:89:f1:54:
2c:ae:20:7f:46:6d:04:e1:78:0d:0d:cd:62:6a:cf:39:c0:71:
ca:ee:65:a0:c1:79:96:7b:f2:64:fb:ab:bc:22:97:b6:58:dc:
a7:26:96:86:cf:d4:6c:05:86:2c:3d:d5:00:49:2e:de:a1:da:
75:0d:eb:d1:d5:b4:3a:9b:d8:eb:6b:19:54:ca:ea:29:b2:b0:
03:15:eb:5b:c2:20:8d:93:39:6f:95:7a:03:b6:93:80:36:be:
e5:33:d3:b8:0f:9f:fc:94:24:69:04:c4:82:7e:60:76:11:f6:
98:fb:90:21:e0:be:ae:d2:59:bc:13:4b:47:a9:2d:71:ba:e5:
3f:b0:64:68:4d:53:47:a5:b8:fa:83:c3:79:b5:71:e3:cc:c0:
7d:da:63:c9:a0:2d:91:41:3b:e5:3a:26:b3:81:ae:5c:57:50:
cc:8a:f2:1b:ad:ee:00:86:f3:d6:24:ea:38:d2:51:19:dd:4c:
1b:2d:3d:65:5f:86:d6:cd:21:7c:4b:69:30:b4:e9:57:1f:5c:
30:1d:c3:e7:0d:39:97:6e:95:3a:2d:93:cd:69:db:df:f5:34:
e2:52:78:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:58 2026 by rpki-client