Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
File: m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json)
Hash identifier: 9ocTY1yqRDvHaRXMt3pL6Y+l8sgdQaO4URjLDrgkPWY=
Subject key identifier: 03:29:75:67:5D:87:68:45:E7:15:E2:43:30:9E:90:27:A7:D1:AA:7D
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Certificate issuer: /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial: 019D265F88813893B531B388A3AEA03ABD3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:28 +0000
Manifest this update: Wed 25 Mar 2026 19:01:28 +0000
Manifest next update: Thu 26 Mar 2026 19:01:28 +0000
Files and hashes: 1: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: kTWoHSeuRHoVhsOTNBA62Expc3TpQIoJcUn7ZaJNKs0=)
2: uqRQxH9qEjG0hA9B3Ap6knKry0I.roa (hash: aVZsCZDmcN6Rpr0mzKedChfzxWEnLoXai4QxhXhqgNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:88:81:38:93:b5:31:b3:88:a3:ae:a0:3a:bd:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Validity
Not Before: Mar 25 19:01:28 2026 GMT
Not After : Mar 26 19:01:28 2026 GMT
Subject: CN=032975675d876845e715e243309e9027a7d1aa7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:9f:12:ac:03:9c:29:7d:c3:51:50:ad:19:
69:58:96:01:96:86:e9:29:50:14:65:b8:20:b7:58:
7e:bd:89:d9:ac:8b:ab:55:b4:1a:aa:f9:c3:ee:96:
65:a2:93:a4:af:dc:1f:74:9b:19:22:00:b8:eb:f6:
4f:33:4d:34:9d:49:26:96:0c:d9:8b:49:e9:e8:38:
95:9e:46:81:5e:cf:bb:d2:8f:34:1c:5a:6e:d8:a4:
07:06:31:77:dd:ec:26:c8:ac:84:31:19:73:b9:af:
e1:97:c5:49:62:e8:61:17:aa:9e:e9:49:3d:1a:0e:
f8:57:91:f9:24:28:d7:ca:00:b7:e4:c4:bb:6a:34:
7e:33:51:fa:e1:4e:52:84:4e:bf:8f:73:0d:0c:2c:
ca:16:c4:65:69:d4:a6:eb:f4:50:67:08:fa:c3:2f:
b3:82:a9:c0:35:4b:ea:bc:5e:3a:72:86:09:4b:37:
da:81:5a:d3:7f:c9:ce:15:78:30:d9:47:cc:37:f7:
ec:69:04:fa:93:ee:8a:a7:b4:ea:f1:12:1a:ab:a1:
6b:72:92:eb:d8:59:6d:85:94:a3:e4:ee:50:36:d4:
87:71:9e:03:17:64:95:3c:e8:03:aa:b4:4a:ac:9b:
cb:69:b9:a2:46:c8:ec:72:8a:5c:42:de:4f:47:a1:
fb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:29:75:67:5D:87:68:45:E7:15:E2:43:30:9E:90:27:A7:D1:AA:7D
X509v3 Authority Key Identifier:
keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5c:d5:9e:f0:52:a5:15:8e:c3:8f:9a:4c:4b:17:bf:62:1d:
93:ee:ac:19:9f:99:61:13:ac:1a:7d:f4:67:42:d5:2b:d7:39:
bb:2f:a4:4c:84:d3:74:c9:6b:51:2b:ce:fb:e6:b3:34:a4:8c:
52:be:c5:ed:29:3b:aa:ba:d7:79:54:d4:90:60:94:83:a0:6d:
5d:df:b7:3b:50:7f:d7:e1:c0:8a:c7:7c:1f:b4:a4:a9:b6:0b:
3d:74:70:ca:48:34:db:0d:b2:5b:aa:df:d4:f7:62:70:64:ba:
90:c2:76:6c:02:80:cd:02:dc:63:e0:a7:73:81:ca:15:40:e6:
7a:0f:43:17:2c:f5:e8:64:d9:ae:9c:8b:c0:64:d4:3c:a7:77:
e2:41:d3:30:e8:24:2f:04:73:ef:87:88:44:e9:bc:a0:85:61:
e4:2f:f8:63:d1:08:7c:dc:f0:9c:e6:46:fb:54:eb:b8:64:5d:
bd:d8:ea:aa:ff:78:ec:7f:a3:b4:ad:ff:25:60:a7:13:a4:19:
89:f8:f0:5d:51:31:1c:8e:75:f1:88:fe:82:c6:2d:64:83:f5:
e2:28:79:ce:4b:b6:b4:be:bd:45:87:ef:27:7c:10:1a:9b:5c:
3c:9a:ae:3c:a5:a7:e8:9e:b9:a4:6a:a6:08:0a:16:9c:e8:d0:
ce:21:5a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:34 2026 by rpki-client