Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File: 9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier: Wz+qNSNAIz6tc3IK8YdkmfSMjLm1eU0dMdLj81rzXvI=
Subject key identifier: 49:D1:73:9A:E2:AA:F2:2B:29:C3:D4:F4:E8:DF:D1:31:3D:45:4A:B4
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer: /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial: 019D2B4EE48DB09470003DFB01812DBE4193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number: 179E
Signing time: Thu 26 Mar 2026 18:01:23 +0000
Manifest this update: Thu 26 Mar 2026 18:01:23 +0000
Manifest next update: Fri 27 Mar 2026 18:01:23 +0000
Files and hashes: 1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: /HksXyV6fxtZL7HNf9IgEtD4HI17yakvIhEbvQvCQ/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:e4:8d:b0:94:70:00:3d:fb:01:81:2d:be:41:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Validity
Not Before: Mar 26 18:01:23 2026 GMT
Not After : Mar 27 18:01:23 2026 GMT
Subject: CN=49d1739ae2aaf22b29c3d4f4e8dfd1313d454ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:95:b0:85:0e:fa:7e:13:99:d6:72:f7:b5:
c5:c7:a5:53:64:c6:d7:de:1f:3c:79:af:cb:a5:c4:
b5:f0:12:fb:1d:26:bf:43:89:67:c5:31:ca:47:44:
a4:17:8d:81:1b:96:e3:c6:24:38:1d:6c:71:cc:05:
6a:16:3d:99:01:03:1c:64:f9:d9:57:01:f5:4d:c2:
bf:cc:2e:e5:ef:49:50:a7:2b:7e:d4:c2:0f:03:b0:
42:35:38:fd:5e:fc:62:fa:10:10:63:7b:18:69:cc:
a6:da:28:29:2c:d9:46:a1:bf:eb:91:0c:f7:7d:88:
53:81:85:f0:72:03:14:0b:fa:ec:cd:10:e5:1d:25:
e4:45:1a:b9:e3:7e:7e:a1:5d:d1:f4:19:91:99:fc:
e3:5d:6a:96:89:bb:17:e2:c7:c0:37:51:65:3f:4e:
b3:ff:4b:6a:7b:b2:01:65:44:92:e4:f5:53:73:b0:
81:41:65:fe:af:14:9a:52:7d:a2:59:13:c0:79:d1:
45:96:44:47:15:29:e3:cd:ea:cb:a2:5b:be:4b:37:
03:bf:4d:23:a7:6e:4e:64:f9:03:cc:d9:ff:b3:5a:
c0:94:50:66:33:c4:23:5a:e8:bc:5a:21:01:7e:e1:
17:9e:61:47:17:2b:29:07:0a:19:77:4f:6c:6f:76:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D1:73:9A:E2:AA:F2:2B:29:C3:D4:F4:E8:DF:D1:31:3D:45:4A:B4
X509v3 Authority Key Identifier:
keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:57:a6:2e:6a:df:bc:cd:93:5f:24:0d:ed:37:10:6e:b7:e6:
10:6e:ba:1f:b4:12:b6:f0:d1:4b:77:a3:3a:8b:a9:71:be:5f:
95:99:71:5b:5d:89:55:5e:01:d4:b5:df:d9:60:66:6a:98:94:
97:29:76:ee:5a:a5:4c:6d:85:3e:d4:73:f0:5f:7a:f2:fa:1f:
8d:52:ab:0d:7f:78:0e:f4:5a:25:7f:5a:cb:4f:e4:7b:5a:15:
3c:57:38:64:ef:11:07:d7:1e:b5:77:6f:a0:ca:d6:03:5c:2b:
92:7f:2a:2a:c0:66:0e:b9:41:22:93:2a:e7:ef:6f:0a:d4:dd:
91:1c:72:ef:31:99:2c:fc:21:1c:97:a7:35:87:cf:f1:f9:d2:
d0:87:df:ea:1c:55:de:c1:c5:be:d6:19:91:08:91:e8:09:46:
21:58:62:a9:cd:23:af:d3:85:62:3b:9e:72:0b:77:f5:03:e1:
b7:23:d6:3c:7f:96:dd:41:95:db:3d:ee:49:b2:8c:57:8e:e1:
49:2d:70:ad:26:ed:c4:0d:16:a9:e0:96:e3:a5:26:84:e6:32:
4a:11:19:b7:14:08:88:51:07:5f:69:aa:2b:3a:a7:7d:dd:2e:
41:37:57:b2:01:f5:7f:a7:73:5a:b9:ab:fe:7f:a5:8b:21:d0:
bb:65:b5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:41:56 2026 by rpki-client