Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier: kRKwaLsQdGyaqOZtOWSkelXQdTq7RnxDdHuKtpQxL6s=
Subject key identifier: A2:B8:35:A7:40:57:80:30:8B:FC:DA:8F:EE:BF:D2:5F:E2:39:3F:18
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer: /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial: 019D25F143C00B3EBBA6CCE80D7E4A9A5CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number: 0B9C
Signing time: Wed 25 Mar 2026 17:01:01 +0000
Manifest this update: Wed 25 Mar 2026 17:01:01 +0000
Manifest next update: Thu 26 Mar 2026 17:01:01 +0000
Files and hashes: 1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: YhwMRKWDZGSsSuhB60BA54UZGtgdl4+6XTVCv2/T4AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:43:c0:0b:3e:bb:a6:cc:e8:0d:7e:4a:9a:5c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
Validity
Not Before: Mar 25 17:01:01 2026 GMT
Not After : Mar 26 17:01:01 2026 GMT
Subject: CN=a2b835a7405780308bfcda8feebfd25fe2393f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ab:ae:f9:65:66:77:f4:c8:72:8e:35:8a:4c:
85:83:d5:00:79:c6:b0:d2:05:a9:35:35:d1:f4:c3:
b9:17:17:66:7e:a8:70:b0:a1:c4:42:03:96:51:bb:
8d:92:40:97:29:64:70:c2:75:e6:7a:e2:a2:60:50:
bb:46:e1:11:4a:de:34:b2:b8:74:e2:24:73:93:0a:
b8:c8:c4:96:33:5f:29:67:5f:18:90:4e:6f:5c:14:
32:65:a7:fe:e1:8f:b8:89:97:56:b3:a2:95:40:5d:
20:39:cf:32:e5:8f:14:0f:db:e0:49:31:2a:b6:90:
bc:ca:7f:f3:79:4b:71:c2:7d:2f:60:8e:39:27:9e:
73:fa:7d:b2:fd:f3:ca:ad:4b:8b:2d:45:7f:db:df:
9a:7b:d6:a1:7c:72:2f:7e:55:e6:a2:4e:14:6a:2b:
fb:4c:ab:68:ae:c6:67:6c:1d:b9:0f:26:cd:81:ee:
95:46:31:2a:61:05:4c:dc:d8:23:5d:cb:4c:a8:14:
1e:7d:63:ab:6b:72:e2:2c:27:43:9a:b0:24:86:1b:
0d:0b:a7:88:df:72:b3:92:24:47:e5:b4:fe:6a:f4:
d5:64:0c:d2:30:8f:d4:8f:be:cd:81:f5:5e:0d:9a:
79:1d:a1:c0:0f:24:da:cd:05:91:53:53:6c:15:ec:
79:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B8:35:A7:40:57:80:30:8B:FC:DA:8F:EE:BF:D2:5F:E2:39:3F:18
X509v3 Authority Key Identifier:
keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ae:af:fb:02:b3:fe:77:e6:07:9c:49:28:b2:a0:9c:dd:95:
30:4f:4a:d2:ca:1f:43:13:66:2d:5b:20:ed:70:b9:e6:e9:e0:
3d:4c:7a:ee:c8:45:31:63:df:9c:a3:96:dc:fb:75:0f:95:84:
00:5c:40:38:50:82:c1:50:a2:85:19:f1:7e:3b:e2:3b:b0:b8:
c1:11:ce:e9:92:1c:9c:6b:28:68:75:0f:2f:19:fd:e1:1b:ef:
25:4a:d2:6f:35:53:51:e1:d8:9d:44:8d:65:0f:c5:33:9b:a2:
14:12:b7:4a:22:ce:1d:3b:b4:ef:e3:7f:2d:c8:60:ea:30:8b:
84:d4:a7:99:90:ca:d2:1f:8a:be:ff:c7:f1:e5:f1:b1:24:60:
02:5a:e4:9d:ab:20:ee:dd:90:07:15:db:55:b6:6e:b0:94:c5:
80:b9:40:b0:74:d7:38:0e:93:98:b3:80:54:2f:ff:36:f1:1e:
3a:88:b3:ee:06:58:2c:8f:85:8f:31:a3:4d:54:1f:3e:17:85:
39:14:17:a8:3a:dc:c2:d8:99:d5:b1:cb:6c:52:2b:2b:be:ee:
ad:80:79:07:55:a9:2c:58:07:66:8e:f1:c1:cd:df:86:1c:26:
9e:25:a3:f5:d7:5c:49:d2:61:dd:e2:28:98:4e:0c:6e:3b:a5:
74:89:75:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:16 2026 by rpki-client