Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
File: m9LNu_XMLYOp2PExgRJx8DLSFFA.mft (raw, json)
Hash identifier: m0jViKmcZJy5g0ab2lWZgpjRQA69uNd4eyX94xQtaKA=
Subject key identifier: 1B:80:DE:14:13:D2:E9:B3:07:76:D0:6D:20:8C:FC:F8:C9:1B:61:B3
Authority key identifier: 9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50
Certificate issuer: /CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
Certificate serial: 019D29CEE00FCEE185C27B9DE6507F62B1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
Manifest number: 1D
Signing time: Thu 26 Mar 2026 11:01:56 +0000
Manifest this update: Thu 26 Mar 2026 11:01:56 +0000
Manifest next update: Fri 27 Mar 2026 11:01:56 +0000
Files and hashes: 1: m9LNu_XMLYOp2PExgRJx8DLSFFA.crl (hash: jEZq72j/d0+vtTvV8GdiWMl7hcRe7Rhvm1bcVUTRS7Y=)
2: sRIRtm1WlkJMryRVLofyBLDhtX0.roa (hash: Ho8VKDeLdI3OgV2j2givaKlNGpZaNoqeOK7mD/4wmSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:e0:0f:ce:e1:85:c2:7b:9d:e6:50:7f:62:b1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
Validity
Not Before: Mar 26 11:01:56 2026 GMT
Not After : Mar 27 11:01:56 2026 GMT
Subject: CN=1b80de1413d2e9b30776d06d208cfcf8c91b61b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9e:37:cc:fe:35:89:54:9f:8e:b7:0e:10:0c:
8b:56:05:ec:99:73:22:a1:c1:24:72:2c:33:d9:55:
cf:fa:8e:ae:dd:5f:b0:05:a0:d7:e5:42:c2:53:e0:
36:df:ea:11:d8:1f:5f:78:90:61:48:f4:fb:76:bd:
30:45:22:c8:20:eb:fe:50:0e:c3:0d:9a:48:0e:ee:
ed:53:bf:a3:ac:bb:60:a4:7c:a4:f0:cd:5c:3b:08:
6d:9e:e4:57:e5:1e:06:50:15:0f:9f:d2:b8:95:1f:
43:e6:1e:43:5f:01:31:fa:ec:2e:b9:c1:20:ea:27:
46:1c:ed:68:3c:e3:f5:af:ab:87:c7:74:d1:ef:04:
94:e1:40:d3:3a:fe:95:e3:cf:26:46:4b:7b:06:fc:
2a:33:56:c2:fb:f7:81:6c:ca:7d:82:08:c0:79:4f:
1c:2a:99:0d:c6:09:f5:5c:cc:83:b4:0c:9d:34:85:
d7:d8:24:10:ca:82:49:38:d2:79:1d:06:57:dd:23:
07:3f:cb:9d:e4:9c:38:94:16:74:b7:63:ef:5e:c6:
a4:b2:72:6a:c0:ab:b1:16:1d:01:3d:b4:4c:54:ed:
a9:27:93:0c:34:37:e9:aa:2a:4c:34:06:d5:f0:bd:
14:d2:04:df:5a:1b:c2:d6:5f:85:b0:9a:31:5d:99:
b7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:80:DE:14:13:D2:E9:B3:07:76:D0:6D:20:8C:FC:F8:C9:1B:61:B3
X509v3 Authority Key Identifier:
keyid:9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:eb:34:86:b4:2b:f9:13:f2:e7:7d:11:16:d1:0d:3d:8b:53:
31:8d:0f:b2:b0:56:56:2e:12:81:b5:08:d4:c0:16:ab:20:a9:
e0:b1:0e:46:c5:28:e9:5d:10:3d:83:6f:3a:5d:bd:d3:7b:e2:
fd:93:6b:3c:2c:4d:9a:8a:c7:bc:a2:54:01:39:05:b1:5b:69:
8b:41:64:91:ff:17:72:85:37:ba:8f:c5:a3:66:44:78:91:68:
19:28:a9:79:1d:40:76:15:83:2c:a7:fc:50:1a:07:5e:49:10:
0e:cb:f0:53:bd:b1:cc:33:92:cd:1c:60:89:60:f4:1f:09:92:
06:d1:c2:5a:7d:60:db:7b:84:a0:65:cf:53:d9:74:7c:59:ba:
bf:a8:c5:8f:bb:63:56:a6:5a:01:ce:d0:32:d2:9f:95:8d:41:
5f:48:ba:99:6e:17:d4:70:d7:b4:43:89:4f:28:1a:9f:08:15:
85:e5:30:13:63:0e:fd:d0:c6:28:f2:17:0e:5b:1b:17:a2:e9:
d9:ad:1d:e0:0f:9f:e2:e5:3d:0a:42:d0:89:3a:f4:35:9a:73:
95:d7:00:1b:b1:45:e3:8f:28:c0:c0:41:d2:5c:54:e0:c5:df:
48:20:07:ae:5a:66:6d:f7:30:24:8c:b9:55:8a:fe:23:af:3c:
3f:d9:57:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:15:38 2026 by rpki-client