Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier: Y4V1odDU0h5jm+coHu8PBNHE7r3+ALmnHeLx4SIx174=
Subject key identifier: F9:8A:E1:F3:01:A0:AC:57:0E:75:4F:BB:B4:9E:DC:C1:F5:51:51:82
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial: 019D265F2CB308E1F48436DDBADBADE42B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number: 17D5
Signing time: Wed 25 Mar 2026 19:01:04 +0000
Manifest this update: Wed 25 Mar 2026 19:01:04 +0000
Manifest next update: Thu 26 Mar 2026 19:01:04 +0000
Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: //YTcKfAIF9rre1DQggmJrzifvPqVOKrIMb/hRi9dzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:2c:b3:08:e1:f4:84:36:dd:ba:db:ad:e4:2b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
Validity
Not Before: Mar 25 19:01:04 2026 GMT
Not After : Mar 26 19:01:04 2026 GMT
Subject: CN=f98ae1f301a0ac570e754fbbb49edcc1f5515182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:93:d4:8b:63:33:90:8b:df:b6:6e:9a:ad:
53:f6:36:d2:64:78:11:48:b6:67:79:de:0a:ee:b9:
da:4b:70:62:2a:b7:90:09:f3:a5:5d:6f:f4:30:0d:
ca:96:15:6d:1d:3e:5f:c7:9f:36:9e:05:b0:9a:f1:
80:29:39:22:59:52:e6:76:ec:84:fa:0c:87:a1:46:
85:6b:ac:0d:b8:70:6f:70:4a:1b:69:02:c9:df:39:
6d:d6:33:db:a2:06:13:e4:6a:78:ba:a9:c4:fe:db:
5a:bb:66:e4:03:05:57:86:6c:cf:b5:9c:0b:b7:5c:
8a:9b:7c:be:27:ec:33:e4:74:2d:a2:80:c6:f6:f8:
3d:ff:55:03:b3:64:d9:4e:a6:84:ff:f0:28:c8:38:
69:5f:47:f4:9e:88:04:d3:0b:f5:9b:ac:8c:2f:c5:
4a:c5:e4:88:4d:f2:30:22:14:75:cf:83:07:13:1a:
07:aa:74:40:91:da:4a:be:a4:99:06:eb:d6:16:17:
86:63:63:0d:3c:e3:44:00:e7:c1:e5:4e:08:dc:15:
f3:0b:90:83:2c:d0:85:ef:93:a6:ed:6a:e0:0a:55:
8d:47:18:85:ea:14:50:0f:75:ef:92:3e:e4:e5:6d:
b3:ad:ca:4b:16:32:28:0d:e4:a5:31:56:bb:2e:58:
b5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8A:E1:F3:01:A0:AC:57:0E:75:4F:BB:B4:9E:DC:C1:F5:51:51:82
X509v3 Authority Key Identifier:
keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:80:be:b1:3e:5a:0d:1c:36:88:66:22:e9:f3:75:8e:db:70:
49:3f:32:dc:6e:54:86:6d:02:2a:3f:eb:b9:6f:55:1e:e7:62:
88:2a:94:74:e7:fc:e7:93:3c:e8:9e:84:3b:d7:b7:ed:ce:55:
04:56:a9:e2:56:52:f5:aa:e7:25:5f:eb:3a:91:42:91:9a:5f:
d2:d1:d0:39:9c:15:b2:1e:38:4f:b5:33:d5:c0:29:98:34:74:
19:59:b0:6d:3c:7b:79:8a:55:72:da:29:39:34:d4:85:58:c3:
e1:de:bc:78:97:b8:e1:77:a4:a4:8e:34:c1:62:b8:b2:56:0a:
ac:76:25:dc:1d:a9:4a:16:da:78:46:5a:68:48:4d:45:85:1c:
9e:ca:f1:31:c3:10:88:62:cc:18:e4:ca:db:0d:bf:8d:bd:18:
9e:90:ef:64:4a:09:03:cd:5e:cf:1f:59:eb:27:5d:4f:99:2e:
c1:17:2e:bb:45:dc:a1:49:46:3f:6b:6a:08:d6:5d:ca:41:21:
d0:7f:1e:25:c9:59:f9:0e:ca:4f:f1:f7:3a:75:56:49:75:4a:
fb:04:7f:e4:2a:59:e6:f6:93:01:5a:a7:15:b5:9b:01:88:30:
19:af:df:c8:b4:28:b3:b0:ae:0c:94:d3:3e:b2:35:52:42:29:
df:26:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:11 2026 by rpki-client