Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
File: 1-c9m7XQoo55j8NJzYDf0McQao08.mft (raw, json)
Hash identifier: EhigeVzMH8ncGwYtQgENXugQj5h4FbBJLbTZ9pgJoEw=
Subject key identifier: 51:97:49:23:8C:FA:45:7C:6E:CB:16:0A:37:0B:FD:85:51:1C:78:51
Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Certificate serial: 019D28BB4455E87E8F5E58350212DF7A86B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:00:54 +0000
Manifest this update: Thu 26 Mar 2026 06:00:54 +0000
Manifest next update: Fri 27 Mar 2026 06:00:54 +0000
Files and hashes: 1: 1-c9m7XQoo55j8NJzYDf0McQao08.crl (hash: p/5I2N48R8niZrrI6qRZJqSxUNJQphuR2Yr2aYIonGo=)
2: 9Oi-skDqT11YOFGA1xXs-LnJ9RY.roa (hash: rHObD1OASYFGq7YdeSfBqKYMqx4XVn3mmaRGeO1liZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:44:55:e8:7e:8f:5e:58:35:02:12:df:7a:86:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Validity
Not Before: Mar 26 06:00:54 2026 GMT
Not After : Mar 27 06:00:54 2026 GMT
Subject: CN=519749238cfa457c6ecb160a370bfd85511c7851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:e8:6f:22:1f:d9:8e:c8:94:bf:f5:ed:80:
16:dd:ba:1b:6a:0e:1a:31:97:ca:04:4f:23:3a:20:
46:9b:1d:a4:84:d5:ea:c2:01:c0:e6:38:96:c9:d2:
0c:bc:43:31:58:b4:63:7a:6e:82:eb:78:2c:49:7c:
bd:bd:5a:bd:70:39:ac:9e:e9:25:48:58:2c:44:c6:
25:2f:e8:62:60:4f:ee:c9:99:37:4c:f0:53:79:b3:
fa:c6:db:d0:71:d0:8d:4a:04:43:5d:56:c6:ba:20:
3a:ec:6c:20:d7:02:58:bb:d7:77:6f:46:5e:54:43:
98:68:30:e0:5f:82:cb:f2:96:bf:ce:a5:4b:3c:22:
ff:fc:a3:77:3a:67:c9:14:4a:d2:72:d9:18:3d:ec:
2e:32:08:8b:2a:d3:a9:dd:6c:fa:aa:ef:d4:03:42:
85:3a:c0:65:78:66:c1:70:0b:e7:b2:44:95:ec:ef:
bd:69:04:5c:45:d9:5f:fd:b0:34:38:83:c7:ff:bb:
ea:81:ed:e0:5e:f4:9d:2f:7c:54:e7:79:99:27:d2:
d9:ce:35:4e:64:fe:17:70:37:3a:7e:70:42:98:e3:
22:cd:5d:0f:2e:8a:a3:ee:9e:53:1d:09:37:2c:d7:
06:32:e5:76:d0:29:f9:57:8a:60:c4:06:3b:d9:87:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:97:49:23:8C:FA:45:7C:6E:CB:16:0A:37:0B:FD:85:51:1C:78:51
X509v3 Authority Key Identifier:
keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:00:3b:8a:8e:56:41:4c:a2:3c:79:82:22:0a:bc:b7:ae:bb:
1f:91:25:3f:d8:0f:dc:a4:77:46:e8:5c:f3:74:4c:a4:4a:51:
f4:bf:58:88:45:9f:8f:f7:2d:64:f8:ef:19:6b:a9:6f:af:09:
2b:8d:24:8a:ef:c2:ab:6d:ae:b3:a1:24:44:fc:f7:95:78:96:
5a:7a:21:1e:f6:6c:ee:44:bc:81:ae:54:6d:66:3e:00:a2:5b:
48:a3:15:f9:ee:d8:62:cb:4f:5c:5d:9b:03:5e:0a:d7:35:15:
80:ac:7c:fc:d1:8a:7c:45:ef:88:8d:eb:09:34:f2:eb:d0:99:
3e:27:50:85:5b:42:ab:f9:45:f4:b4:73:4f:fe:b9:54:3f:12:
93:72:df:95:fe:31:cc:39:40:e2:88:8c:90:b9:89:94:f3:ad:
46:c6:80:3c:2f:13:ae:d7:d8:8a:c4:8f:8e:56:55:e5:8a:a5:
23:e8:c8:77:bf:5e:d6:d5:3e:14:9f:35:41:8a:9a:03:02:eb:
22:92:68:4c:3e:5c:e0:8a:e8:ed:67:c3:06:67:bb:5b:48:d7:
e0:05:f3:b3:f1:70:a0:36:35:63:08:17:a4:2c:32:ed:88:da:
f9:1c:58:bb:e3:dd:22:07:ef:b4:13:0d:f0:09:ee:a5:44:8a:
15:c3:06:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:18:57 2026 by rpki-client