Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
File: 9IFCCQRj_g9JoTDRUYZql3F9RCo.mft (raw, json)
Hash identifier: FbokEiVdRYCFf3tLYXQuVkyiEAdkOY2p+icGyI9AEGQ=
Subject key identifier: 51:09:85:89:CB:0F:1D:1C:E8:04:A9:4B:55:7B:5B:FC:9F:EF:CE:0C
Authority key identifier: F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
Certificate issuer: /CN=f48142090463fe0f49a130d151866a97717d442a
Certificate serial: 019D2929935AE23F220DA4EB7B1D118F5462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
Manifest number: 05D6
Signing time: Thu 26 Mar 2026 08:01:23 +0000
Manifest this update: Thu 26 Mar 2026 08:01:23 +0000
Manifest next update: Fri 27 Mar 2026 08:01:23 +0000
Files and hashes: 1: 9IFCCQRj_g9JoTDRUYZql3F9RCo.crl (hash: yXb3Az3EJN+2n04DHrea/ixpkbKVdAcM0YMq77bgyms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:93:5a:e2:3f:22:0d:a4:eb:7b:1d:11:8f:54:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48142090463fe0f49a130d151866a97717d442a
Validity
Not Before: Mar 26 08:01:23 2026 GMT
Not After : Mar 27 08:01:23 2026 GMT
Subject: CN=51098589cb0f1d1ce804a94b557b5bfc9fefce0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:f9:4e:8d:7a:f0:b5:47:60:c8:46:c9:54:
84:f6:6f:e1:d5:1c:2e:16:52:58:16:d6:e6:24:f1:
49:1d:01:4e:d5:70:e1:0c:b0:8a:b1:af:86:7b:f5:
d2:8c:31:14:a9:53:66:04:af:6c:87:97:31:55:6e:
9c:fb:a7:41:d7:1a:c4:cb:a1:a9:de:91:b2:07:1b:
54:ca:82:bd:52:b1:17:76:6f:37:d3:37:c9:b0:6e:
2f:b1:38:c6:75:71:57:d7:27:3c:cb:16:e5:ad:94:
d6:7b:ec:f5:72:7a:d8:17:66:1f:23:f6:08:14:33:
d1:7e:86:3b:d2:1b:fd:81:2c:98:b4:6e:fe:83:65:
a6:c7:27:21:a3:a1:83:ee:5c:b4:26:7b:4d:82:e8:
4b:a0:88:ae:97:d0:01:ba:b9:07:f1:d6:a8:58:a2:
66:f8:9d:3e:06:38:ce:3d:bf:a6:51:1a:e6:cb:26:
1a:6b:ae:ae:4e:d0:f9:db:4f:e9:64:6b:d1:27:1f:
ce:0d:ae:cb:1a:e1:1b:e1:ed:66:cf:3a:a0:f7:be:
c3:74:4c:33:c7:9e:2c:db:43:47:27:b7:f3:af:a0:
a2:7c:30:f3:6a:a4:02:99:c5:2a:2f:39:0f:9b:d2:
be:2b:4a:55:70:12:8d:7c:f7:82:bf:bf:be:e5:1a:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:09:85:89:CB:0F:1D:1C:E8:04:A9:4B:55:7B:5B:FC:9F:EF:CE:0C
X509v3 Authority Key Identifier:
keyid:F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:04:d4:8a:c7:fc:33:32:ac:44:d7:3f:b1:15:b1:34:a9:7e:
16:95:80:92:8d:2c:63:a5:0d:e7:aa:f7:a0:4f:04:a6:76:12:
19:95:8c:c8:1e:51:09:04:9e:57:e3:ae:8d:34:59:db:d8:df:
d0:20:64:ca:ac:0a:a0:2c:2c:60:4e:5b:70:c7:ec:65:59:81:
12:d8:b3:bd:02:bc:d0:f1:fa:bb:5a:fb:de:f4:59:75:a4:0c:
69:7a:5e:da:93:1f:39:ab:fd:67:af:d1:5b:59:9e:ac:59:37:
fe:e3:49:a7:64:9d:4a:61:a8:dc:6d:c2:ab:44:e3:5c:f1:54:
d3:fa:2e:66:07:10:9b:b2:e3:b3:3f:a3:8b:82:e4:e2:cd:ca:
8a:8d:1b:da:82:69:07:69:bf:78:c8:85:a8:9a:6d:14:15:04:
a2:02:75:8d:50:19:30:9e:e6:d0:99:6c:fd:4d:10:02:3a:7e:
f6:05:b6:24:99:55:53:19:0f:86:32:b2:db:75:b3:78:1a:53:
3d:c3:c3:88:32:e0:27:79:ae:a0:a0:bf:83:f1:19:57:af:ac:
1e:68:b6:6c:a5:82:47:18:4c:6e:4f:4b:de:b6:72:04:bc:4c:
c9:f4:9f:2d:b5:5e:fd:ff:0e:97:29:dc:a3:b5:94:8f:db:fb:
f5:eb:95:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:47 2026 by rpki-client