Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
File: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json)
Hash identifier: KAcHtfQo4D5vvZ9GkCbJ+7NKF+Sl5UbyVpmICRX8pgY=
Subject key identifier: 5D:AA:D4:AA:45:43:EA:6A:6D:55:CE:7C:BF:35:8C:D3:83:5B:7D:79
Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
Certificate issuer: /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Certificate serial: 019D31BEDD6847BCD40F544FA395DB2ADA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
Manifest number: 080D
Signing time: Sat 28 Mar 2026 00:01:25 +0000
Manifest this update: Sat 28 Mar 2026 00:01:25 +0000
Manifest next update: Sun 29 Mar 2026 00:01:25 +0000
Files and hashes: 1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: Zf+J7jxBdJeAIgzdT5780a3fddEg3EmZMtlzifK8c8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:dd:68:47:bc:d4:0f:54:4f:a3:95:db:2a:da:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Validity
Not Before: Mar 28 00:01:25 2026 GMT
Not After : Mar 29 00:01:25 2026 GMT
Subject: CN=5daad4aa4543ea6a6d55ce7cbf358cd3835b7d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2b:2c:79:f2:da:19:ef:c8:65:a3:a6:13:79:
51:c9:9c:c5:e5:a4:d8:74:72:bf:7b:fe:f4:53:4e:
1d:18:8d:33:7c:cd:ed:2b:6f:39:75:11:55:5e:11:
72:e8:30:8b:c4:5f:62:cb:ad:ae:91:01:ad:10:f8:
93:f5:58:4c:7a:8c:1a:a3:14:8c:3a:85:9a:1c:60:
bb:ec:4d:f6:c3:de:db:f9:c0:f9:9c:f2:b5:73:ff:
b8:ca:28:23:d1:04:b4:cc:67:8c:4b:46:8d:8d:91:
92:b9:48:11:10:9a:d0:31:c6:a1:5f:eb:2d:67:35:
14:21:7a:7f:4f:48:5b:20:71:5a:c3:9f:b9:ce:77:
1d:3e:bc:30:bf:de:43:05:8a:b2:d1:a1:ac:b8:72:
78:c1:2c:d7:0c:0f:e6:00:c1:20:f2:af:17:ae:2e:
b7:5c:a5:d6:7b:4c:7c:c3:93:62:7f:76:5e:73:bc:
c5:9b:ea:d7:84:c7:43:25:9e:57:3a:d0:25:33:7e:
34:89:ad:a7:f4:92:c4:ed:96:4f:03:a2:f7:d9:97:
86:5b:ef:73:3c:1e:ff:95:b4:a8:8b:19:09:b6:70:
f5:20:87:c9:3c:33:aa:4e:82:12:14:e2:e0:8f:96:
20:37:99:a8:ae:20:46:e0:d2:e4:22:04:6e:66:91:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AA:D4:AA:45:43:EA:6A:6D:55:CE:7C:BF:35:8C:D3:83:5B:7D:79
X509v3 Authority Key Identifier:
keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:85:e8:91:2f:0f:f7:e0:82:0a:da:6f:6d:a8:53:14:c7:ab:
29:f3:fb:a1:fe:be:74:9f:0e:86:9a:9c:55:cd:db:a9:06:5d:
03:f8:b6:d2:b5:50:b7:be:01:a8:6c:36:12:92:00:b8:ce:b3:
df:99:f3:7b:6b:bd:ee:0c:d9:96:dd:de:e9:8e:d7:9b:dc:c2:
33:87:64:be:e6:99:3f:d6:72:db:35:d0:c3:16:a8:5c:ad:6a:
38:79:53:3b:90:ac:3a:31:6f:6b:2e:28:6f:d6:96:69:86:67:
d4:35:96:00:3f:be:24:2b:16:69:1d:3a:a6:b2:bc:7a:cf:73:
0c:15:88:02:6d:71:db:26:9e:0f:14:ee:a6:c5:f5:90:a5:6c:
0e:54:ab:ae:fc:23:65:95:18:1c:6b:ec:03:b1:44:69:e6:55:
a5:5e:c6:ac:2e:63:1c:2a:d9:58:f7:59:45:32:5a:e0:b4:cc:
76:48:c7:e1:21:21:15:2c:35:e3:f6:9b:27:52:d5:57:c8:27:
50:a6:c4:94:d3:d2:2f:7e:2e:64:e6:84:c9:35:2f:57:b0:a4:
23:4c:66:21:9b:3a:c7:12:27:b9:7e:ac:b0:ee:e1:6a:c6:db:
1b:41:bf:19:0b:f8:fc:b6:2f:71:5c:4f:7b:14:46:50:78:01:
b5:ad:5f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:36 2026 by rpki-client