Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
File: V9minRgOgZpHgvtsbqFtOn0ykQA.mft (raw, json)
Hash identifier: jc+0XXLrGyeJpMtY+t9OUJcZGFPC9ACAz6rxAgeX3YU=
Subject key identifier: D8:BF:04:09:09:A1:4D:0D:D8:94:1C:61:01:9E:88:F4:82:0E:91:2D
Authority key identifier: 57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
Certificate issuer: /CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Certificate serial: 019D27039789CA4DD670B499838E1BB65C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
Manifest number: 0A9B
Signing time: Wed 25 Mar 2026 22:00:39 +0000
Manifest this update: Wed 25 Mar 2026 22:00:39 +0000
Manifest next update: Thu 26 Mar 2026 22:00:39 +0000
Files and hashes: 1: V9minRgOgZpHgvtsbqFtOn0ykQA.crl (hash: Zmhn2QpMuCUjcefy6Jt11al8igDBfaijrdwJmlNJ+Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:97:89:ca:4d:d6:70:b4:99:83:8e:1b:b6:5c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Validity
Not Before: Mar 25 22:00:39 2026 GMT
Not After : Mar 26 22:00:39 2026 GMT
Subject: CN=d8bf040909a14d0dd8941c61019e88f4820e912d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:42:f2:fd:fd:76:ed:20:c7:c0:37:c6:f0:
d4:22:17:55:c5:5f:1f:bc:dd:96:f6:75:96:95:e9:
55:a8:59:b0:43:f4:99:c4:6e:27:95:ff:9e:90:35:
bf:89:8e:86:a2:de:be:43:88:44:30:09:83:a0:3c:
97:2e:0c:41:c2:0d:f5:a5:d5:cb:43:89:60:0b:58:
1b:7b:77:68:5b:3d:11:be:4b:06:ca:0c:f5:b5:5e:
07:9a:c2:b4:be:e9:91:c4:9d:ad:49:c8:63:c8:de:
1b:3d:24:d8:71:15:52:e2:7e:73:4d:2a:6b:36:a3:
ec:1b:61:ce:5a:51:33:2b:e8:7f:8e:dd:91:76:0a:
76:00:e0:eb:c0:3f:00:33:12:1b:cc:39:6f:89:b8:
d1:be:4e:93:d4:48:d3:e6:79:a0:70:e5:b1:c2:40:
02:08:7b:44:92:09:7f:c1:3a:f4:a3:a0:49:14:0c:
1f:72:61:d1:4b:4d:3d:94:85:db:36:b0:13:ed:4b:
eb:a6:99:c6:f7:97:75:12:2e:ca:e8:29:1f:34:87:
06:e8:9d:06:20:43:9f:7b:0d:d7:a0:0a:3d:5d:f5:
b8:62:09:49:f4:b5:80:64:56:98:8f:34:77:54:68:
f4:5e:33:0b:68:35:82:ef:89:f8:d8:70:bb:a0:f4:
b9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BF:04:09:09:A1:4D:0D:D8:94:1C:61:01:9E:88:F4:82:0E:91:2D
X509v3 Authority Key Identifier:
keyid:57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a3:67:e1:bf:59:06:5e:52:56:de:a5:83:1a:3c:06:7c:a1:
ec:3b:8e:2b:ee:f4:32:e6:c6:32:9e:5f:b4:5d:63:cd:58:58:
54:db:87:c9:51:75:68:30:3e:b5:8f:53:da:57:df:17:5b:6f:
78:6e:ce:6b:04:b8:37:d4:c9:3b:19:40:11:f7:19:9b:25:bd:
c9:0f:9e:ea:f7:01:d7:b6:0f:d2:16:f7:c7:44:24:55:2b:a3:
b2:29:6c:4e:d3:ae:38:d7:89:03:88:4b:13:d7:4b:38:71:a1:
51:82:57:c9:fd:96:a2:13:26:ef:10:24:d8:42:e7:a5:db:25:
e7:13:86:ea:4f:84:62:94:a0:a5:2a:77:a6:ee:ef:1d:76:fe:
b5:95:ea:9a:81:1e:3f:30:91:2d:da:7e:ce:b0:4c:a3:cb:98:
03:56:48:2c:bb:ac:c3:b8:43:81:2f:19:69:e9:99:13:d1:2d:
54:d8:d3:f1:a6:d7:7b:2e:30:0b:50:d5:94:d5:b7:6b:6d:7a:
1a:1c:1d:94:23:44:f9:3b:03:01:5a:55:12:fc:a8:65:3c:56:
5e:10:a3:e7:71:eb:0d:1f:a4:c4:2d:a0:8b:7e:d5:2a:53:8a:
f6:2b:63:06:c8:3b:3b:a1:ba:90:e9:2e:ff:f8:a5:6b:bd:90:
3a:22:1c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:45 2026 by rpki-client