Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
File: 9bMQ6dROhHDWzYAJWQZssA8pHvo.mft (raw, json)
Hash identifier: VBimDmPXqUebD3eSHv4MK8R8sXway6QaFPX/iBOm2gY=
Subject key identifier: 17:34:E4:CD:1F:0B:7D:89:04:F8:85:16:B1:E7:4E:36:9C:25:6B:9B
Authority key identifier: F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
Certificate issuer: /CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Certificate serial: 019D2703BD89E9A61506E21653F13A7E5557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
Manifest number: 12EA
Signing time: Wed 25 Mar 2026 22:00:49 +0000
Manifest this update: Wed 25 Mar 2026 22:00:49 +0000
Manifest next update: Thu 26 Mar 2026 22:00:49 +0000
Files and hashes: 1: 9bMQ6dROhHDWzYAJWQZssA8pHvo.crl (hash: pXjq+JILcai3uaIcsa+i07fvXPTRbv8gSjvT9HTz0NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:bd:89:e9:a6:15:06:e2:16:53:f1:3a:7e:55:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Validity
Not Before: Mar 25 22:00:49 2026 GMT
Not After : Mar 26 22:00:49 2026 GMT
Subject: CN=1734e4cd1f0b7d8904f88516b1e74e369c256b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:49:58:c8:3f:f9:f9:3c:54:71:51:80:15:
0d:2a:c5:d4:e7:d9:8b:60:d8:d0:c4:19:39:05:70:
25:5a:97:ee:63:5c:7e:47:98:81:99:19:b6:bf:9a:
f8:8d:34:22:23:fb:14:52:53:63:8d:23:9a:34:45:
3d:7c:32:5c:7e:56:8e:fe:13:7b:30:d1:ed:9e:ec:
22:34:e1:21:9f:20:52:62:bc:1f:94:b2:4d:fa:9b:
2b:10:47:f5:c5:b0:3d:74:f4:95:9a:26:ca:fc:a4:
de:d1:c8:a5:4f:7f:73:83:e7:92:1a:13:03:da:66:
82:bd:5a:57:2a:a4:97:33:f0:75:34:73:b5:41:62:
74:be:f6:c6:39:fa:f7:f6:4d:5b:b9:56:5a:eb:85:
8a:80:ae:bc:33:6a:55:d1:ce:5e:20:51:be:ab:79:
15:dc:05:5a:66:17:51:9a:5f:fb:d8:19:7f:c5:0e:
10:27:d3:81:af:14:07:3c:ef:70:67:60:9f:be:e7:
f0:8f:ee:c5:5c:38:c0:c6:40:28:05:86:3a:6e:4b:
57:0c:92:e6:62:9b:41:f0:27:98:6d:9c:86:0d:6f:
fa:02:14:3c:31:e7:97:87:51:a4:c5:f2:8d:1b:af:
80:fa:6b:9c:10:c0:ef:55:9e:0f:d3:9f:fc:3f:0e:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:34:E4:CD:1F:0B:7D:89:04:F8:85:16:B1:E7:4E:36:9C:25:6B:9B
X509v3 Authority Key Identifier:
keyid:F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:67:09:a8:78:a1:7a:71:45:21:b7:9e:12:8c:73:d9:4f:d4:
60:ff:a9:a7:24:33:0d:b8:f8:51:cd:1d:02:c4:a1:60:d4:09:
fc:bf:3c:9c:79:b1:41:24:09:18:55:30:c2:2b:d0:1b:e3:ff:
cc:93:53:28:93:52:e4:9a:45:d2:ac:90:b8:c9:05:b7:cc:6a:
78:8c:96:7d:47:eb:0e:c3:ab:4f:d9:6c:bb:0c:6f:70:e5:47:
f2:49:e6:87:71:0b:ea:3f:12:c1:23:3e:11:80:cf:5a:54:a0:
fb:07:77:ee:fe:ae:35:03:d7:86:0e:b1:e0:87:84:6b:18:7f:
c6:16:d0:57:fe:1b:af:f3:2c:c0:5d:60:4a:6d:a3:72:e7:d2:
20:bb:85:57:07:65:eb:fb:1b:5e:4a:0f:73:6d:db:cc:7f:c6:
bb:e7:5e:a6:0e:4e:76:8c:da:56:31:4b:22:fe:e9:27:4a:1a:
c6:f3:f6:c6:a6:21:eb:84:dd:01:5c:fd:f4:4c:5d:35:e5:6e:
d1:0d:23:eb:ee:76:f1:2e:cb:60:19:9c:a3:21:87:fe:fe:11:
2e:46:6c:ff:78:d8:0d:fc:dd:9a:60:47:b0:e7:76:af:79:d2:
da:40:32:75:a3:e3:78:39:7c:eb:6f:eb:ef:8e:2d:c1:d5:3e:
8a:30:fd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:29:31 2026 by rpki-client