Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
File: 9mKtW4G4BxPe0-__RCmfzXZfKrE.mft (raw, json)
Hash identifier: ApWuRq9Vr/82W0k4q9LwGwtQ7xtrog5XmOOhfDVs9tg=
Subject key identifier: 3A:11:CB:31:CC:88:01:30:4A:C5:BA:E6:DD:D4:8F:4F:52:69:1F:4F
Authority key identifier: F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1
Certificate issuer: /CN=f662ad5b81b80713ded3efff44299fcd765f2ab1
Certificate serial: 019D24A7ED7D8C17826B0E636277176FAC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
Manifest number: 01F7
Signing time: Wed 25 Mar 2026 11:01:18 +0000
Manifest this update: Wed 25 Mar 2026 11:01:18 +0000
Manifest next update: Thu 26 Mar 2026 11:01:18 +0000
Files and hashes: 1: 9mKtW4G4BxPe0-__RCmfzXZfKrE.crl (hash: nhj74uKbZDLnYxfQK/aGkxHTPDx9Fniy/IarIYS97XM=)
2: jO3T1-EOvm7phVXV6edT90rIeh0.asa (hash: 6/Ul++o9f4AGDv6T10uaHtnXB8UK/eOuxrUr++EWOSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a7:ed:7d:8c:17:82:6b:0e:63:62:77:17:6f:ac:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f662ad5b81b80713ded3efff44299fcd765f2ab1
Validity
Not Before: Mar 25 11:01:18 2026 GMT
Not After : Mar 26 11:01:18 2026 GMT
Subject: CN=3a11cb31cc8801304ac5bae6ddd48f4f52691f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:46:99:f5:a3:d7:31:fa:90:0d:6d:4b:9e:
92:09:2b:54:00:58:ce:92:3e:a2:c0:37:19:d6:64:
97:59:13:fb:75:13:6a:a5:d7:48:59:37:a2:3f:44:
6b:5c:7a:62:20:96:76:22:12:e9:28:67:15:1a:10:
f0:f1:83:9c:fa:b9:f6:2c:a6:ee:e9:3a:fe:ef:41:
d9:01:a7:d2:24:cc:6e:91:a4:26:c6:44:b2:e3:53:
ca:4b:41:7e:bd:88:74:54:5f:52:d2:dd:f5:16:65:
b7:1d:93:c0:87:49:2b:01:02:1c:cd:e5:7a:5d:c6:
1e:9b:d0:0c:01:bf:fb:8f:51:93:ff:85:5c:38:3c:
ed:50:0c:5e:1e:56:5e:97:a4:fb:3b:d6:ea:b6:d4:
d9:a7:c0:43:f7:09:92:18:01:d5:21:5e:49:66:6d:
c7:30:3c:bc:db:b3:7e:78:aa:84:f7:17:77:7b:af:
0b:81:bd:e1:69:74:d3:78:d4:6a:ea:47:3c:de:f3:
c1:79:f9:ac:c4:c4:93:2c:b8:d4:4d:b0:ce:d5:ac:
25:83:91:03:79:69:46:65:26:e3:cb:1b:ef:f8:34:
be:2e:b9:69:90:7b:33:4b:93:51:7c:3a:27:52:0f:
ac:63:b4:1e:a5:47:72:49:34:3d:48:48:79:ea:6e:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:11:CB:31:CC:88:01:30:4A:C5:BA:E6:DD:D4:8F:4F:52:69:1F:4F
X509v3 Authority Key Identifier:
keyid:F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:27:7c:24:eb:94:57:6b:94:29:d1:7e:43:32:21:58:e0:fa:
d1:ad:89:b8:20:68:9c:4d:a0:23:25:81:b1:5d:b4:b6:d4:4d:
08:57:63:9d:e6:e2:33:98:95:78:1b:39:2f:b5:c6:c4:40:6f:
f1:40:1c:6a:f1:0b:e5:5f:a7:b9:80:f9:cf:94:a9:8c:91:9d:
73:32:63:c2:cf:dd:4d:f6:9a:1a:46:fd:7b:20:e1:9a:dc:c5:
1a:34:39:8e:07:73:2f:77:8f:5a:a4:50:21:b8:23:70:f6:4a:
85:64:a4:e8:38:9d:fa:6b:57:5b:4e:b9:3e:b1:cb:ce:2f:b8:
c9:51:41:16:bc:92:06:c5:c5:75:d6:5b:5f:7f:63:b7:84:3d:
6f:e7:1a:ba:5e:a7:68:a8:2c:ad:40:ae:b4:23:8b:81:e6:28:
89:d1:5b:ef:2b:ba:f1:78:cd:73:c2:c1:6b:81:1b:4e:da:73:
d7:08:02:ee:dc:69:7d:dd:e7:9f:34:4a:08:84:ae:bf:25:c8:
3c:ad:70:f6:10:d9:1f:18:71:99:40:e4:6c:22:44:d6:7b:b0:
94:90:c5:ec:0b:2e:27:95:f6:c7:c0:d2:21:a1:62:15:1a:3e:
33:45:f9:9f:3d:94:7a:9c:4a:a2:4c:87:ce:99:f4:33:a0:78:
8f:39:74:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:31:43 2026 by rpki-client