Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft
File: 9yQQnyF3AuaYDbkFOo9HEPwKCno.mft (raw, json)
Hash identifier: L/W+f1UF8Bf7G5iyTbl2ueTr/fO7ZH9X91CZRI97inE=
Subject key identifier: 26:B1:7A:81:BE:B9:16:F1:D6:7D:50:C1:D1:2D:D8:F4:F5:E3:B7:FD
Authority key identifier: F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A
Certificate issuer: /CN=f724109f217702e6980db9053a8f4710fc0a0a7a
Certificate serial: 019D29607AF2F4E6766C520522EE89FC5EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft
Manifest number: 0397
Signing time: Thu 26 Mar 2026 09:01:21 +0000
Manifest this update: Thu 26 Mar 2026 09:01:21 +0000
Manifest next update: Fri 27 Mar 2026 09:01:21 +0000
Files and hashes: 1: 9yQQnyF3AuaYDbkFOo9HEPwKCno.crl (hash: vXm66iEtieixOWqfZzBiAjNLkqex8Pm1OPfe9Bzkmqs=)
2: Zx_5tP2jFEhTq6MgQIAH7OLDeG0.roa (hash: kGORWAX4JZQpp1zftluvvyW3B2PFf7CnlAdwIGmwd68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:7a:f2:f4:e6:76:6c:52:05:22:ee:89:fc:5e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724109f217702e6980db9053a8f4710fc0a0a7a
Validity
Not Before: Mar 26 09:01:21 2026 GMT
Not After : Mar 27 09:01:21 2026 GMT
Subject: CN=26b17a81beb916f1d67d50c1d12dd8f4f5e3b7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:2f:6d:21:77:77:50:55:0c:a0:8c:77:3e:
cd:11:c4:5e:f0:33:4b:a1:e4:4d:c4:58:74:5f:d4:
85:76:96:de:09:b3:a5:b8:23:be:8b:8f:e4:00:c4:
e2:a8:00:fd:fc:d7:b2:13:36:26:b8:59:ec:ae:20:
08:44:e2:20:75:4b:fc:d9:15:71:da:0c:e4:15:26:
e3:b8:12:ff:b3:c2:da:c7:63:cd:5e:54:a2:60:cb:
c5:de:12:e5:3f:b6:2a:c3:a7:01:3b:70:74:55:24:
eb:bf:68:fd:aa:c6:d0:4b:b6:cf:8f:1b:a4:43:2e:
15:df:dd:85:f0:17:65:27:bc:72:2b:e0:e0:09:e6:
61:5b:ea:a0:57:fc:50:6b:c2:2c:8b:0b:c0:70:2a:
bc:d8:92:0f:80:72:4c:bc:1a:10:59:93:c2:fe:b4:
ab:56:9b:db:86:6e:38:0c:d2:52:06:ef:0e:0a:76:
eb:d5:73:f6:b0:be:0a:9a:f9:51:02:6c:d7:81:2a:
4d:5a:e6:ee:7f:5d:f2:47:bd:a9:9d:ca:b1:51:a2:
c8:88:db:47:09:f4:6d:d1:48:eb:36:ea:ef:5d:df:
df:71:d4:ee:3f:63:f2:a4:51:84:81:51:fb:6f:b4:
17:12:be:1e:6b:20:64:70:3c:81:7f:06:29:bd:5a:
87:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B1:7A:81:BE:B9:16:F1:D6:7D:50:C1:D1:2D:D8:F4:F5:E3:B7:FD
X509v3 Authority Key Identifier:
keyid:F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:46:e0:e2:68:1a:91:a6:58:fa:a7:02:09:6d:42:64:a8:58:
0b:c2:f4:44:06:76:22:f3:6f:8a:d3:a3:7b:a6:7b:5d:d4:28:
b4:d7:44:48:23:76:56:8f:09:2b:9f:a0:54:71:f4:57:f6:1b:
3c:c0:e4:ea:05:01:76:50:89:a2:44:a9:8e:b9:c8:e9:83:94:
87:7b:71:fe:a5:3d:69:9b:73:e8:5c:15:d2:69:27:03:0c:22:
86:20:98:ea:0d:df:f9:0a:83:61:98:f5:93:3d:66:57:01:f5:
7f:d3:70:2c:63:23:cc:29:9a:8b:11:fd:58:21:7a:d6:dc:9e:
ba:80:15:90:59:45:ce:0d:23:03:e0:f5:fe:a8:9f:b8:50:4f:
94:e2:dc:84:e9:57:56:12:c3:24:c3:d7:4c:53:c1:08:8c:4a:
b7:e2:aa:fc:cf:2d:f1:68:e8:4f:c0:cf:09:2d:94:52:8c:39:
07:c6:a3:46:1b:31:23:b9:3e:d9:e4:e6:ca:f2:41:9b:6a:f7:
57:c3:b5:51:3e:b7:e2:b1:67:cd:a3:b3:55:26:d8:1c:90:d8:
c4:56:89:f8:41:5b:d2:a8:d4:43:5f:d0:f8:3f:6e:85:3a:66:
f5:29:6a:bf:fb:15:68:60:18:0c:69:15:54:85:ef:4c:cf:a5:
b0:ec:85:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:55 2026 by rpki-client