Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
File: 9IOBPbTT97DwLDH4W1JDww9F4lI.mft (raw, json)
Hash identifier: mBAEkhTf6Y/O5+L6HJ+OQfg5GgusRUSIAhHyg1P5JVQ=
Subject key identifier: 6D:FD:CF:9F:7B:8C:B0:24:2B:84:53:70:CD:A8:63:5C:71:42:11:EC
Authority key identifier: F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
Certificate issuer: /CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Certificate serial: 019D270485EF2B175B5E892AFABB45AC0D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:40 +0000
Manifest this update: Wed 25 Mar 2026 22:01:40 +0000
Manifest next update: Thu 26 Mar 2026 22:01:40 +0000
Files and hashes: 1: 9IOBPbTT97DwLDH4W1JDww9F4lI.crl (hash: sCjHtKaBXzoljR/hjjNso8gt87G1GPt/IEMP2MH4mUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:85:ef:2b:17:5b:5e:89:2a:fa:bb:45:ac:0d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Validity
Not Before: Mar 25 22:01:40 2026 GMT
Not After : Mar 26 22:01:40 2026 GMT
Subject: CN=6dfdcf9f7b8cb0242b845370cda8635c714211ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:ba:00:ad:b1:7e:fc:d2:0c:c8:65:83:15:
e4:1a:1c:b5:d1:a1:8e:48:10:ad:77:13:af:ac:d3:
7c:0a:81:3f:f5:fc:c7:94:44:00:c1:44:af:59:19:
82:b6:74:4b:38:6b:1d:c1:0e:5e:34:38:b2:d2:da:
ea:17:f0:e3:4d:54:9f:43:bf:f6:f7:19:d5:68:16:
87:71:e0:b7:29:54:f9:12:3d:8d:46:3f:e2:a2:59:
f6:15:5b:7c:39:35:13:68:f3:55:b7:0d:f2:61:fc:
8d:ae:25:e6:9e:ea:ce:6f:6c:73:35:9b:a5:a5:2a:
17:92:62:5b:e5:61:a7:82:6b:63:2f:a6:89:ad:e7:
4e:e5:1a:78:9d:f1:c9:33:e7:f4:25:65:9c:9d:44:
04:e5:da:a0:3f:98:ee:41:87:01:f3:8a:42:72:0b:
05:68:af:79:21:0f:05:25:a4:00:3a:41:64:d8:6f:
52:4b:77:20:b6:e0:22:d9:45:f5:db:ae:f9:36:44:
d7:e6:bb:4b:a2:9b:18:3f:f9:90:a4:3e:db:a1:80:
11:34:da:50:04:29:c1:b9:da:60:3d:cb:f9:51:2b:
5d:01:f5:a2:90:4e:f2:12:db:09:98:96:67:27:b2:
c5:00:cc:54:b4:28:d2:d8:be:e7:15:04:26:36:a6:
d2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FD:CF:9F:7B:8C:B0:24:2B:84:53:70:CD:A8:63:5C:71:42:11:EC
X509v3 Authority Key Identifier:
keyid:F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2c:90:db:78:37:0d:47:5f:a1:fb:05:f7:80:9b:1a:24:13:
8f:3e:e2:9f:b7:a9:bf:d5:b0:9e:e5:1f:2b:b3:4f:e7:49:95:
90:48:55:55:9d:b6:25:c1:66:b7:80:0f:94:d8:48:e2:c4:84:
9a:85:63:60:5f:10:d5:4c:84:d6:eb:1b:51:0b:64:0d:ce:23:
3b:61:97:02:2e:e2:92:0a:d0:d1:0f:5b:a2:9d:af:cb:c6:9f:
f3:9a:21:54:a1:74:d5:85:1f:5f:d3:cd:87:3e:66:89:98:32:
72:6e:f9:89:e8:6e:52:a3:90:92:77:13:8a:3f:a9:15:43:a1:
78:9e:ae:24:39:8a:e4:76:3e:38:5a:64:57:40:c3:dd:18:0d:
40:d3:c0:ec:5c:6d:39:a3:cb:f7:15:9f:a2:ab:ae:9d:1c:b6:
b2:2b:13:67:2a:c8:eb:92:96:08:db:78:8c:c9:89:31:4b:0d:
d6:d9:3b:d1:9c:bd:da:40:e8:7e:2c:b9:4e:ec:4b:56:c6:4b:
20:29:6b:3a:f9:9d:f9:59:f5:b6:28:85:1c:29:48:d5:7f:c1:
ab:0a:8d:51:0c:69:68:13:4b:b2:8b:48:74:fb:31:aa:94:76:
0e:7f:94:f5:1c:f3:b3:30:84:c5:99:e3:32:89:b4:24:30:c1:
33:fb:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:49:52 2026 by rpki-client