Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
File: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft (raw, json)
Hash identifier: pfBSx3xx+XGW9h/H9xhF4qIzxTQD77wJs7v2v2mXjdU=
Subject key identifier: EC:FC:AF:0E:E0:32:AF:01:77:8C:D3:21:A3:F6:DA:86:E9:77:CC:BF
Authority key identifier: B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
Certificate issuer: /CN=b7d296d69059457be39c3c82466aceed02766836
Certificate serial: 019D34F68EC63C07DCCE528D4D983A50F300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
Manifest number: 097F
Signing time: Sat 28 Mar 2026 15:01:06 +0000
Manifest this update: Sat 28 Mar 2026 15:01:06 +0000
Manifest next update: Sun 29 Mar 2026 15:01:06 +0000
Files and hashes: 1: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl (hash: UB4v7YvA+qjPwWJVmAlnzpamPARd9aEgk0VKYVACxCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:f6:8e:c6:3c:07:dc:ce:52:8d:4d:98:3a:50:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7d296d69059457be39c3c82466aceed02766836
Validity
Not Before: Mar 28 15:01:06 2026 GMT
Not After : Mar 29 15:01:06 2026 GMT
Subject: CN=ecfcaf0ee032af01778cd321a3f6da86e977ccbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9e:1f:1f:d9:e9:bf:90:ec:de:3a:b7:0e:3d:
ac:f7:a6:e7:dd:3d:ad:58:fa:0c:c7:f8:1f:b6:0b:
fb:43:e2:30:46:04:fa:22:97:e2:ef:ac:f6:dd:89:
8a:18:27:c7:28:4f:f5:8c:15:65:54:82:e5:c2:91:
ab:74:ab:bf:bf:85:a0:df:9a:ba:36:3c:cb:f4:8f:
e6:be:16:6b:f5:ef:89:62:92:7f:4b:44:4c:74:90:
2a:cb:8f:26:0e:b1:e6:fc:22:e4:ca:06:8c:08:8a:
3d:19:e2:42:50:af:9a:42:ce:49:47:dc:3d:82:53:
f5:21:27:50:e9:d4:6c:64:32:b4:66:d1:86:e0:e3:
db:07:0d:a3:59:41:c3:ad:65:bd:81:d0:f9:d3:26:
0b:87:d4:0c:25:9c:cd:7c:eb:81:e0:ca:9b:b0:1b:
7b:dc:00:64:a4:38:42:75:76:e4:dd:8c:e4:3b:75:
f7:4e:10:bd:d9:83:58:59:e5:fb:cf:61:04:b3:a0:
b9:3a:5c:e6:43:cf:9b:8b:2a:1a:67:6a:f3:c0:1f:
a6:e2:42:50:de:44:1e:1f:5d:f2:c9:96:94:43:75:
3c:e6:5f:38:d2:ee:b0:3e:50:5e:66:7d:51:8a:c2:
e4:83:97:2d:f5:06:3b:42:5e:c7:73:24:96:e7:b2:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FC:AF:0E:E0:32:AF:01:77:8C:D3:21:A3:F6:DA:86:E9:77:CC:BF
X509v3 Authority Key Identifier:
keyid:B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:2e:c0:1d:44:56:40:58:7d:48:f3:35:d7:43:39:96:55:2e:
c8:d1:fc:8a:ee:6a:14:84:42:6a:e7:2e:0a:dc:f4:1a:1a:e8:
06:f6:d5:40:78:fd:cb:72:c8:67:5b:22:3c:32:bc:84:8d:04:
31:d0:cf:56:47:40:14:6c:2f:9c:24:2a:76:8e:b3:1f:f1:05:
93:59:95:84:64:b5:aa:e9:71:12:b9:c4:20:ca:4f:3e:70:d9:
20:7d:d6:b2:b5:d7:55:e2:64:ab:02:44:89:6a:36:c6:c1:49:
7c:2f:b0:61:41:ad:0e:12:f0:73:31:80:28:d5:38:2f:3a:60:
d8:48:92:a0:8e:39:22:5d:d1:a2:5d:e5:fb:29:41:11:72:2e:
65:0b:56:c2:00:d7:87:68:f3:f5:f6:86:c0:41:24:d8:76:83:
bd:74:3e:44:30:ab:d0:8e:a2:79:64:2b:59:31:65:26:37:86:
ed:c2:9e:db:48:ab:48:ba:18:4c:41:07:06:6c:d4:cb:8a:7b:
69:9c:f7:29:96:09:01:18:b8:90:ea:9b:cd:51:89:80:50:b0:
a5:cd:75:02:43:e8:ad:4e:49:87:5a:df:c5:8d:61:d6:51:15:
d9:19:07:43:34:ae:b6:dd:14:a8:83:3c:cf:b5:77:32:a1:10:
fe:37:a6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:02 2026 by rpki-client