Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
File: 9keQtSf6QLqj8ts_oqFL-UzSgv8.mft (raw, json)
Hash identifier: NjKhXMZIyr4g12y2GM5kXEAiZGUncAYK21ecEjHrznU=
Subject key identifier: BA:23:F5:BC:A4:F3:93:91:9D:85:C2:1A:0B:DA:40:3B:D2:EE:57:21
Authority key identifier: F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
Certificate issuer: /CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Certificate serial: 019D25F1C46438DCC68EB44A5F980469BCDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
Manifest number: 05AE
Signing time: Wed 25 Mar 2026 17:01:34 +0000
Manifest this update: Wed 25 Mar 2026 17:01:34 +0000
Manifest next update: Thu 26 Mar 2026 17:01:34 +0000
Files and hashes: 1: 9keQtSf6QLqj8ts_oqFL-UzSgv8.crl (hash: h/klaZOFpXp8dl8/8oYtUeehMZDoSWlneiJ1j+T9r9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:c4:64:38:dc:c6:8e:b4:4a:5f:98:04:69:bc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Validity
Not Before: Mar 25 17:01:34 2026 GMT
Not After : Mar 26 17:01:34 2026 GMT
Subject: CN=ba23f5bca4f393919d85c21a0bda403bd2ee5721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:1b:83:c7:a6:7a:85:e2:ac:26:26:80:e1:
0a:f3:f6:ac:d0:41:52:19:13:1f:7a:77:1f:2a:3c:
9f:00:51:c3:f3:2a:bd:16:61:ae:1f:61:27:17:e7:
7a:51:4d:22:d1:78:8b:54:50:c6:ef:5c:2e:ab:d7:
16:e7:df:86:f3:75:be:71:e0:1a:7d:94:4d:49:d9:
cd:40:33:e9:6d:34:90:18:ce:7b:5e:a0:b4:de:39:
6c:18:da:42:fb:2e:da:ae:e2:ae:f0:db:ba:aa:f7:
1d:61:28:e6:9a:c1:06:da:99:47:bb:06:06:0d:42:
58:8e:88:b2:f1:9d:17:dd:82:cb:e6:50:25:d8:f0:
27:8e:74:3c:41:1f:db:1a:b2:6c:5e:ae:e4:b9:d7:
d1:30:8e:fe:b7:56:13:8c:47:9a:4f:ac:6c:c4:31:
ec:97:cb:99:5c:51:91:8a:9a:9d:20:ed:02:4b:a3:
e6:6c:61:f3:81:6e:27:b2:42:d3:5c:d6:4b:74:51:
f6:4d:07:d4:bd:1e:2e:d1:c6:34:77:11:83:6a:f0:
1e:75:60:44:8a:c0:b6:e6:bd:f5:8d:d4:d8:22:0c:
f9:de:3a:98:d3:2c:a0:4d:b3:d8:e2:67:d9:d2:cf:
90:5d:6c:89:1e:53:12:da:5b:44:fb:b9:59:3d:25:
2f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:23:F5:BC:A4:F3:93:91:9D:85:C2:1A:0B:DA:40:3B:D2:EE:57:21
X509v3 Authority Key Identifier:
keyid:F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6e:da:13:e8:ec:dd:1f:6f:3e:d9:0f:d3:68:ed:53:51:55:
f2:cd:7e:c0:c4:a9:9e:5e:a3:ec:67:15:3d:61:02:40:c0:6f:
f8:d1:e6:08:36:56:c3:8c:74:3a:9f:da:8e:e2:dd:45:a0:80:
0a:be:fb:4c:23:c2:ae:a7:99:8c:62:c7:37:4e:76:50:8c:a2:
56:e4:91:3e:8b:3b:82:84:fc:21:54:2b:8f:be:01:a3:6a:0f:
ac:dc:8e:15:0f:50:21:f2:57:69:f5:72:de:58:89:70:14:d3:
95:80:95:11:8e:91:0e:73:70:52:91:af:2a:01:7f:24:9c:ec:
e9:0d:0c:ef:3a:a2:55:20:6b:37:75:c5:21:16:75:c5:07:1e:
b4:e3:90:48:e3:a7:65:f7:cf:ce:90:78:ce:64:21:ae:ff:5e:
f6:79:05:94:41:cc:6b:c0:69:05:93:1d:d7:10:f8:00:2b:b5:
4e:56:f6:78:9c:20:9c:3f:98:14:4a:48:bf:db:2f:2e:1a:be:
30:22:8c:74:40:d4:57:1b:65:0e:48:e9:5c:22:ff:b8:15:ba:
ce:cd:67:28:da:94:09:0f:a3:39:16:af:0f:22:97:5f:7f:8b:
c0:e8:8c:ed:80:b7:8b:71:1e:f4:d4:17:0d:d3:8f:0f:81:62:
20:c7:61:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:30 2026 by rpki-client