Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier: 5S00iv2D/6z7UKxJou1WdGcndFwj0zTkGx//5mpT3hY=
Subject key identifier: 96:AC:25:17:D2:2E:77:AD:75:74:0B:25:6E:BE:53:A1:C5:B5:7D:ED
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer: /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial: 019D284D969DEDC8A4FC64591647A14DFD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number: 0FB3
Signing time: Thu 26 Mar 2026 04:01:06 +0000
Manifest this update: Thu 26 Mar 2026 04:01:06 +0000
Manifest next update: Fri 27 Mar 2026 04:01:06 +0000
Files and hashes: 1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: imBBhmIdSLV8a5+kSf4eQYeyJYRhzKHhPuDv883y7bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:96:9d:ed:c8:a4:fc:64:59:16:47:a1:4d:fd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
Validity
Not Before: Mar 26 04:01:06 2026 GMT
Not After : Mar 27 04:01:06 2026 GMT
Subject: CN=96ac2517d22e77ad75740b256ebe53a1c5b57ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d8:36:ea:d4:59:25:54:d1:d7:95:16:42:8d:
a4:47:c9:3a:3f:bc:1d:5f:23:30:d8:54:0e:51:28:
bc:61:53:a6:03:ad:37:ea:66:02:9a:27:21:9e:42:
28:67:62:68:a2:89:30:63:de:c1:10:2f:75:92:2f:
7c:d6:d6:ae:2a:28:a8:ff:d2:5e:e5:f7:fd:2e:10:
f7:ee:64:b5:c0:47:c5:24:07:c0:db:72:12:2b:b5:
e0:a0:b5:bb:71:8b:ed:23:41:98:23:22:0a:53:2b:
78:8f:fe:38:3e:90:3c:18:2b:e4:5d:6b:97:08:8e:
28:d4:8b:96:15:38:d0:a7:48:1a:77:b1:38:af:36:
a3:23:96:fe:94:0f:4b:de:6f:c2:63:64:c6:c8:d2:
ae:e8:1f:48:b6:46:f3:b2:6f:e9:d8:32:92:a4:a5:
62:3f:71:8a:e5:bb:6a:9c:de:07:7e:7b:9a:61:9e:
20:a3:d7:c7:f2:40:42:f1:c2:2c:ee:74:3e:ef:d1:
6e:59:8d:38:f5:99:24:2d:cf:15:d0:48:20:9d:e2:
6b:df:26:f8:7b:fc:75:8b:5d:13:43:a3:be:06:d5:
db:f2:99:5f:df:c8:89:6a:ae:b9:e3:49:79:44:d0:
f9:3b:9b:c4:81:1f:aa:65:a7:24:3d:44:e9:f3:fa:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AC:25:17:D2:2E:77:AD:75:74:0B:25:6E:BE:53:A1:C5:B5:7D:ED
X509v3 Authority Key Identifier:
keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:10:b3:2b:f7:0b:91:18:4c:7e:2f:69:66:c3:4a:42:b0:3c:
ed:eb:3e:20:0f:76:0c:b7:1e:10:0a:1d:7c:72:f1:74:db:07:
60:ad:6c:1d:d8:14:f6:6c:cc:36:9d:7e:5a:65:4c:35:8b:1d:
bc:04:3a:30:f5:83:37:dc:93:80:b3:59:47:ce:65:fa:5f:49:
f3:be:72:7d:03:7a:fb:f4:d1:13:27:79:41:4c:b6:46:38:99:
f2:89:13:a9:06:77:4c:5f:6c:5a:fc:b2:a0:f0:a8:79:f3:e3:
04:15:f7:66:4c:0c:c9:0a:4e:21:c7:2b:ce:5b:24:b4:56:ed:
55:54:11:0b:73:29:32:0d:4e:ee:b5:b4:3a:6e:f0:3d:e6:fb:
8e:f8:ea:00:71:cd:f7:70:90:4c:4d:92:c5:e2:9b:42:78:2b:
c2:62:a3:a5:bb:36:86:7a:17:68:7a:ce:a2:20:46:36:3f:0d:
1e:32:98:2c:f8:47:e4:bc:72:cd:92:3d:52:4a:fa:26:92:54:
df:32:96:99:4d:e6:4f:d8:11:c2:a3:8b:2b:c6:0c:46:0c:90:
b0:c7:f5:a4:f0:16:6e:c2:f8:09:3e:48:05:b7:09:b8:69:62:
ab:57:d2:20:23:a6:3a:d5:d9:be:89:1a:d7:7b:70:2c:20:d9:
66:33:19:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:53 2026 by rpki-client