Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
File: 9bdVrRo8ekUCu8PqNMdba85hyUw.mft (raw, json)
Hash identifier: Coo3IE9UHNUGZkI685Dkls1YgV7Jk6uicbG/pJw2PKc=
Subject key identifier: F5:A4:BA:86:C0:12:ED:6B:77:88:36:A5:BF:EC:C2:74:47:17:F6:05
Authority key identifier: F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
Certificate issuer: /CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Certificate serial: 019D27E0564EEE1580625B329196FEC2E770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 02:01:46 +0000
Manifest this update: Thu 26 Mar 2026 02:01:46 +0000
Manifest next update: Fri 27 Mar 2026 02:01:46 +0000
Files and hashes: 1: 9bdVrRo8ekUCu8PqNMdba85hyUw.crl (hash: qadpGK5ld+C3cCDr5QMpnT3KqLnb858TkA3MKfRbjPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:56:4e:ee:15:80:62:5b:32:91:96:fe:c2:e7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Validity
Not Before: Mar 26 02:01:46 2026 GMT
Not After : Mar 27 02:01:46 2026 GMT
Subject: CN=f5a4ba86c012ed6b778836a5bfecc2744717f605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:07:1b:dd:dc:f4:bb:97:52:d2:c6:aa:b9:d9:
c5:2d:e6:21:56:d9:00:3e:ca:2c:6d:e9:c5:5c:ce:
dd:e1:a7:cc:4d:f7:48:8e:05:af:52:ae:88:9f:a3:
99:23:4f:b5:55:9c:e8:b6:ac:cf:d0:85:50:dd:a5:
6f:8e:46:e7:a2:2b:96:62:fd:07:d1:ad:b3:d6:c1:
bd:70:71:e3:c3:dc:64:fe:03:ba:f7:ff:25:24:f3:
90:9b:dc:4b:f6:5a:5d:cd:dc:7c:6e:17:51:ab:71:
bc:02:18:24:2f:6f:d1:c6:29:2d:d8:15:50:0c:63:
81:6a:1c:7f:95:21:8e:3f:09:6d:04:fd:89:11:aa:
67:fd:53:e1:4c:53:a9:3a:a3:c5:10:76:33:d4:f8:
a0:cd:5c:b5:d1:0f:3a:ee:be:4f:8a:69:53:be:04:
66:5b:fc:5f:80:cd:1f:41:11:c1:18:30:86:0a:c1:
47:1b:ca:91:66:24:07:1e:aa:6c:33:5d:ce:60:3a:
70:e6:f5:75:ea:8d:56:80:ec:95:92:86:c9:2c:6e:
e9:a5:8e:26:a1:5b:90:cd:54:51:be:fa:e9:87:7b:
b0:3c:29:57:fb:1a:26:66:2c:35:af:5f:39:ff:c6:
3c:04:29:3a:64:73:b1:ba:c6:fa:02:15:82:a9:de:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A4:BA:86:C0:12:ED:6B:77:88:36:A5:BF:EC:C2:74:47:17:F6:05
X509v3 Authority Key Identifier:
keyid:F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:88:55:5a:a8:43:4d:10:e0:dd:67:11:99:2a:f7:7a:8c:34:
17:af:02:a0:e2:8f:4b:1a:a0:2f:49:d0:aa:a5:87:35:aa:63:
9a:3d:b3:eb:44:21:11:a0:86:72:90:34:c0:25:70:b4:29:a2:
d7:a4:d6:55:95:8d:7f:9e:bc:a6:02:04:85:44:0d:cb:9f:b6:
88:13:f1:24:c3:c0:72:d4:33:b6:7f:0d:4b:31:d0:33:25:fb:
6c:e2:9c:2a:63:11:88:b1:5d:f8:90:05:4f:a8:91:74:09:6e:
5b:80:5a:cb:41:60:50:a2:43:b3:ea:de:9e:14:60:a9:5b:ac:
22:52:56:dd:30:70:bd:e5:d2:b6:98:b0:8d:5d:f1:47:c1:7c:
f8:bf:5c:14:4a:4f:94:02:69:2b:9a:c1:d0:6c:5d:1e:57:0d:
71:54:75:a9:c9:5b:29:66:e5:d6:e5:8e:8b:a5:18:3f:31:b6:
fe:d4:dc:46:13:81:53:b0:25:0e:20:be:82:94:06:0c:31:0f:
f3:da:90:f3:8c:7d:a3:92:19:ad:c3:7d:2e:cd:bf:d0:a0:87:
a2:92:cb:16:e4:21:97:24:e7:e1:5c:9b:21:67:e1:64:a0:0d:
1f:d8:03:42:5a:41:db:44:13:d4:93:f6:df:52:1d:8a:08:6b:
dd:38:da:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:38 2026 by rpki-client