Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
File: 9M3Ux8i_hxhwMKZEcCColvQeSZM.mft (raw, json)
Hash identifier: 4TWEFF0b0CgJ4Wve+bpw10HtVsLfyMzDYXPHlq5dDh0=
Subject key identifier: 1B:53:3A:53:82:02:E6:74:0A:CA:4E:EA:6A:62:B9:93:C1:E2:4D:BB
Authority key identifier: F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
Certificate issuer: /CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Certificate serial: 019D27043FE0386DCAD40A2236AD33CF9A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
Manifest number: 1514
Signing time: Wed 25 Mar 2026 22:01:23 +0000
Manifest this update: Wed 25 Mar 2026 22:01:23 +0000
Manifest next update: Thu 26 Mar 2026 22:01:23 +0000
Files and hashes: 1: 9M3Ux8i_hxhwMKZEcCColvQeSZM.crl (hash: Wvt1hCPMUQ72oBTAY/gfMcqmtyrmt2JoClA43aKi2nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:3f:e0:38:6d:ca:d4:0a:22:36:ad:33:cf:9a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Validity
Not Before: Mar 25 22:01:23 2026 GMT
Not After : Mar 26 22:01:23 2026 GMT
Subject: CN=1b533a538202e6740aca4eea6a62b993c1e24dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:13:95:65:64:62:fe:f1:94:24:61:82:cf:a1:
10:ce:5a:a4:c0:72:fe:cf:0a:a3:39:30:be:72:45:
1c:62:76:16:f6:1d:7d:c9:2d:4f:1a:e6:aa:f3:44:
72:ee:c1:c4:ae:a7:7a:43:f5:c0:d7:d6:9f:17:56:
df:dc:64:b8:07:c2:b8:7f:f0:36:18:cb:a3:15:e1:
93:6d:b0:b4:8a:a5:3b:89:0b:8e:61:a8:db:0f:c7:
ec:3e:f5:36:f9:c0:c2:7c:ed:c6:f7:c3:df:da:d0:
15:25:aa:e4:4b:9f:24:4a:6b:69:b3:c0:36:87:67:
b5:00:f7:fb:dd:03:59:f8:e0:97:00:9c:79:62:61:
35:36:e9:73:16:18:b3:e9:22:ae:f9:5f:12:ba:ba:
9e:c3:6b:80:6d:30:f9:ed:ac:a4:e8:af:2b:4d:bd:
27:17:1a:37:78:f2:d4:15:82:c7:1b:e1:4f:23:bc:
bb:20:fd:cf:04:14:46:9e:03:b8:f4:5e:40:0f:d1:
07:af:f3:7a:2e:f5:bf:df:1b:b6:58:91:16:db:1e:
05:3f:83:14:91:56:f3:67:e6:54:a3:78:11:ef:64:
77:26:17:eb:33:57:5a:16:b0:ad:1d:2b:d5:c8:ff:
5f:27:8d:a0:dd:fc:83:2e:04:4b:04:45:b7:61:a2:
19:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:53:3A:53:82:02:E6:74:0A:CA:4E:EA:6A:62:B9:93:C1:E2:4D:BB
X509v3 Authority Key Identifier:
keyid:F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a4:1e:67:6b:96:17:c4:c6:0b:1e:81:29:50:ae:47:01:08:
f6:05:b2:03:13:78:1c:6b:a7:64:b0:f5:3a:db:71:25:ca:54:
fb:95:ee:d9:2b:04:b4:96:2d:d1:cf:f9:26:bc:5b:f3:41:7d:
3b:49:1a:54:4c:64:05:75:f4:d2:92:b0:90:c8:ba:ca:e1:1c:
c4:69:fc:a6:58:b6:34:e4:ea:22:cd:4e:a7:3c:54:ea:8f:b7:
8d:90:2b:3f:78:55:0b:d3:a7:67:d4:ca:57:0b:8a:2f:9c:84:
b7:7f:1b:57:bd:0f:a7:41:ee:76:be:8f:be:c7:15:04:5b:1d:
89:68:c9:64:42:57:dd:8c:80:58:68:08:c9:bf:3e:35:82:86:
a2:56:8d:ab:21:c2:78:ad:33:bc:d3:06:6e:31:75:5c:56:13:
44:6f:3d:58:a6:b4:ae:26:00:54:8f:94:1a:ad:86:ff:31:ca:
df:f3:a8:58:d6:13:b1:0f:8f:a7:5b:66:4d:08:49:dc:a7:f2:
aa:26:3d:a4:fb:66:cd:ac:46:ce:8b:b9:69:48:ff:e9:9b:bd:
68:e4:a0:3e:75:ed:7f:eb:2d:e1:9a:3f:0d:97:65:a1:b5:88:
f5:9f:5f:09:d8:e3:69:83:4b:0a:03:2b:c1:26:9e:84:74:13:
d4:ac:d9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:07 2026 by rpki-client