Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
File: 9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft (raw, json)
Hash identifier: R8BacWn9AaQnK0AFUijk/vCFUdPYqd+PuzOmiUgcXZg=
Subject key identifier: 1D:7C:98:C5:F3:3D:7B:60:55:98:F8:B9:38:DE:91:AA:AE:80:5C:0A
Authority key identifier: F7:14:3E:85:7E:21:54:30:FE:0C:B5:2C:2D:F4:CB:ED:1B:34:73:8D
Certificate issuer: /CN=f7143e857e215430fe0cb52c2df4cbed1b34738d
Certificate serial: 019D2695D9388EA720D36A0233F22F161DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
Manifest number: 0228
Signing time: Wed 25 Mar 2026 20:00:47 +0000
Manifest this update: Wed 25 Mar 2026 20:00:47 +0000
Manifest next update: Thu 26 Mar 2026 20:00:47 +0000
Files and hashes: 1: 9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl (hash: gXBSPrnzdmbd5fBB2PgjUxjdfFvtFZSuYSdybOIme8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:d9:38:8e:a7:20:d3:6a:02:33:f2:2f:16:1d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7143e857e215430fe0cb52c2df4cbed1b34738d
Validity
Not Before: Mar 25 20:00:47 2026 GMT
Not After : Mar 26 20:00:47 2026 GMT
Subject: CN=1d7c98c5f33d7b605598f8b938de91aaae805c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:20:74:82:5a:aa:c7:33:a3:e8:a7:f6:67:
39:71:b5:38:94:47:cf:85:15:33:8d:4f:95:84:2b:
80:1b:bf:e0:6b:ab:11:c9:a8:7c:84:87:ad:9a:5f:
41:a1:17:67:2d:ef:9f:f6:58:2f:0f:85:ac:db:d5:
ef:fb:cc:fd:e0:d2:35:b8:13:eb:99:80:0a:9f:2f:
d5:71:3d:44:df:81:14:9a:5e:0c:ac:af:f7:98:e8:
f0:98:5e:50:00:f8:50:3b:70:97:ce:4f:3b:86:f8:
77:f9:fa:2f:90:fd:02:10:63:5f:cd:b0:f2:95:86:
91:d2:67:0c:94:00:fa:fe:cb:a0:fd:91:d7:02:6f:
dd:aa:07:12:92:8e:72:2c:3c:a7:63:e1:ff:33:ea:
26:f1:e9:17:9f:b7:e1:de:6a:0c:b1:94:a5:ae:03:
98:64:db:a1:61:3e:cd:ab:17:26:20:5d:5d:69:41:
6b:97:45:9b:7e:f8:fa:e9:41:c5:45:27:ad:ca:9e:
c2:53:00:4a:ab:df:ec:47:04:ac:c6:3d:3d:ca:ae:
c7:1b:09:68:97:1c:6d:1b:5b:5a:f5:78:d6:6c:43:
94:62:ef:ea:a0:75:52:53:90:91:56:f3:1e:5d:4f:
20:06:b4:6f:31:98:9b:96:7e:d1:0d:ad:4c:c1:e3:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7C:98:C5:F3:3D:7B:60:55:98:F8:B9:38:DE:91:AA:AE:80:5C:0A
X509v3 Authority Key Identifier:
keyid:F7:14:3E:85:7E:21:54:30:FE:0C:B5:2C:2D:F4:CB:ED:1B:34:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7a:11:d7:6e:b0:d0:0e:f6:91:f7:64:d6:82:2b:07:b4:3c:
76:ad:07:24:b5:0a:03:2f:2b:12:47:14:4e:0e:4a:38:70:7f:
67:53:47:cd:b4:c6:64:8c:8c:4e:0b:ff:82:e8:40:39:6f:c6:
f1:7a:d0:a7:65:63:b0:62:c2:ec:74:5d:59:29:59:ee:8e:ab:
e9:7d:14:0c:cb:72:2e:9c:ba:c1:46:e6:7f:49:83:85:fb:35:
bd:11:51:73:e9:3d:43:b1:12:83:3d:1f:7b:9e:f7:87:74:28:
a2:ca:a6:9c:37:81:eb:61:61:f8:72:e6:55:09:86:f9:c6:4a:
14:61:f2:1f:84:31:d5:a0:0c:37:d8:b8:25:de:08:c6:ca:b8:
76:64:a6:30:fb:a6:c1:f4:84:c6:c5:3d:4d:de:f8:26:25:08:
c0:23:81:08:dd:21:29:b5:22:63:ef:db:13:bf:dc:cc:3e:39:
df:63:3e:fb:38:91:7c:98:11:e4:48:b8:46:4d:b5:42:54:66:
cd:c2:b6:67:c0:f0:d8:9e:d7:ea:4e:8c:92:34:5b:fd:01:b0:
d8:79:4d:02:38:1d:1a:41:cc:83:3c:62:5a:da:08:9e:db:b7:
e6:8b:6a:91:4e:d6:91:a2:e8:d6:83:d7:4a:73:b8:bd:87:79:
7b:f6:e2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:52 2026 by rpki-client