Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
File: 9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft (raw, json)
Hash identifier: /cZhM3ZiWOLgeEj8NGv0HVj1enWxOGeYfgsa6VmKitk=
Subject key identifier: 94:3F:0D:6A:FC:9D:A3:1C:40:AC:3B:05:3B:A5:6E:7A:DD:2E:F8:19
Authority key identifier: F6:09:32:C7:B8:94:51:9D:34:62:47:30:2E:B3:65:F5:C4:09:B0:3C
Certificate issuer: /CN=f60932c7b894519d346247302eb365f5c409b03c
Certificate serial: 019D273AAD3DFC5EEE49945493D5B88BECBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
Manifest number: 01C2
Signing time: Wed 25 Mar 2026 23:00:49 +0000
Manifest this update: Wed 25 Mar 2026 23:00:49 +0000
Manifest next update: Thu 26 Mar 2026 23:00:49 +0000
Files and hashes: 1: 9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl (hash: vwWfo56kBaN0tw6a8QQrhJqIMyfXXgEqJv1NowpTOZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ad:3d:fc:5e:ee:49:94:54:93:d5:b8:8b:ec:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60932c7b894519d346247302eb365f5c409b03c
Validity
Not Before: Mar 25 23:00:49 2026 GMT
Not After : Mar 26 23:00:49 2026 GMT
Subject: CN=943f0d6afc9da31c40ac3b053ba56e7add2ef819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:91:14:05:b7:5a:1d:9e:a4:23:2b:6c:d2:c9:
62:23:71:37:f9:d7:2e:86:c4:3e:4f:fe:ea:42:e6:
96:8b:7e:7f:86:12:bc:b7:9f:09:82:87:c8:28:49:
e5:cd:7c:5c:d9:7f:ba:6a:b7:ba:45:9b:12:fa:03:
e5:d3:f6:4d:0c:c2:fa:a5:1c:79:73:b2:74:05:5a:
c7:f9:37:47:c3:68:d7:ed:7c:78:d1:0f:e1:f7:da:
35:cd:70:a4:f8:00:24:58:f3:2e:e3:f2:74:7d:9a:
f2:92:51:4d:e6:d3:18:1c:bc:4e:e2:cd:00:7f:74:
e0:41:e5:e8:85:80:7a:f4:c4:7b:e2:46:12:94:d5:
f7:fd:c2:91:de:d6:df:c2:72:22:24:36:a8:65:c4:
32:86:d3:85:07:01:60:f4:63:b8:da:71:0a:16:8b:
65:4f:17:6e:7c:db:44:2c:16:75:07:ff:cd:0f:0e:
7e:aa:3d:dc:fe:b2:2d:eb:75:0b:b8:16:71:f0:26:
cf:ba:f8:38:87:49:4a:ca:73:2c:d8:a5:5a:ca:35:
19:81:26:fd:1c:23:b6:19:92:8c:09:9b:21:55:76:
42:e0:58:01:6f:ec:e5:08:ff:b1:7a:5c:ea:41:09:
95:ae:96:34:63:db:95:40:b7:21:2d:c3:9f:7c:57:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3F:0D:6A:FC:9D:A3:1C:40:AC:3B:05:3B:A5:6E:7A:DD:2E:F8:19
X509v3 Authority Key Identifier:
keyid:F6:09:32:C7:B8:94:51:9D:34:62:47:30:2E:B3:65:F5:C4:09:B0:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1f:43:6b:13:05:60:84:2a:5f:56:f1:14:ff:c4:de:0c:eb:
43:6d:bb:7c:a9:75:64:1d:71:dd:35:a4:8a:44:46:05:e3:37:
f7:cc:66:68:59:6c:40:73:35:20:3c:35:cc:9d:08:c4:6f:f5:
9a:f8:35:04:25:a3:38:05:ca:81:cc:a2:1a:2b:e4:cf:5c:cd:
c3:af:f7:6d:c6:da:a7:ff:66:25:dc:8d:c4:5e:00:19:b4:98:
26:0e:11:65:48:89:b5:06:b7:37:a9:c2:35:38:6b:e3:b7:e0:
79:3e:74:7c:54:81:e8:02:6f:7b:d6:71:30:43:1e:47:33:8e:
77:3b:ab:74:5b:97:69:74:c9:f7:89:4e:6e:be:0f:28:18:18:
aa:71:3c:f2:99:e3:7b:fd:61:ea:0a:c2:3e:df:b7:7c:9f:1c:
80:51:a7:42:9c:5a:d6:57:56:09:3c:e7:19:6d:fa:99:50:8c:
a8:1f:24:d1:c8:28:2b:37:3d:80:1c:14:99:0f:0f:6d:85:32:
80:d1:4f:be:18:bb:64:50:e4:32:34:43:ef:cf:1e:b7:71:43:
25:ac:3e:59:a5:5a:91:77:27:76:be:22:30:d3:6b:6f:f1:46:
2b:bb:f2:df:0f:ca:f3:c7:c2:71:27:2c:20:c3:c3:71:3b:69:
50:6e:8f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:03 2026 by rpki-client