Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
File: mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft (raw, json)
Hash identifier: 0ITjCqyiVdvu2R4omXEF2YMljXfbonI746WZhqlNo9A=
Subject key identifier: 38:D6:63:61:7D:4D:40:C0:95:59:93:42:7F:00:09:2F:FE:B5:59:54
Authority key identifier: 9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8
Certificate issuer: /CN=9b134b6e9024064b9057283489bf2c436f4075e8
Certificate serial: 019D28F2861191951678BDB3E8C183E56E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
Manifest number: 09E2
Signing time: Thu 26 Mar 2026 07:01:15 +0000
Manifest this update: Thu 26 Mar 2026 07:01:15 +0000
Manifest next update: Fri 27 Mar 2026 07:01:15 +0000
Files and hashes: 1: mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl (hash: FTPFTpsHuSKQDC0xoKTvVdCjTphXOuwnHpB+5Ao/vvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:86:11:91:95:16:78:bd:b3:e8:c1:83:e5:6e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b134b6e9024064b9057283489bf2c436f4075e8
Validity
Not Before: Mar 26 07:01:15 2026 GMT
Not After : Mar 27 07:01:15 2026 GMT
Subject: CN=38d663617d4d40c0955993427f00092ffeb55954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:31:73:e0:a3:65:6e:8f:4a:7d:8e:9a:73:ce:
a4:14:f1:87:8b:29:a2:ef:1d:cf:b2:16:ce:bf:39:
37:46:70:6a:6c:6d:f3:d3:14:c6:a5:83:64:ca:c3:
7a:0a:21:1e:ac:ff:64:58:85:a5:07:cd:4c:cb:9e:
4a:59:5d:0b:0e:89:c5:b5:f3:cd:f8:20:6b:e5:08:
bf:0c:29:bb:d5:f4:37:cc:c9:04:b5:9e:aa:f4:80:
df:35:27:23:c1:ae:b2:22:f7:d0:3c:04:b4:07:49:
be:fd:f6:10:60:4d:e9:9e:f2:63:8d:78:ef:72:54:
77:b8:c6:65:49:ef:2e:50:34:30:73:2e:0d:ed:db:
56:0b:a1:dd:b0:b9:b3:4a:9b:79:88:0d:9d:38:c1:
d2:64:77:6b:34:81:19:69:e6:f0:74:6e:dd:3e:ce:
26:37:cc:48:68:8d:9c:1d:a0:46:64:6a:64:80:f3:
2d:08:72:39:28:35:5a:3e:a4:c4:2e:e2:10:b9:9b:
d3:b9:7d:68:b5:07:dd:d8:50:a0:05:ac:d0:d1:f4:
b4:6e:54:ed:3f:81:bf:99:22:dc:f4:7f:6a:da:7e:
15:1c:01:fe:02:2c:f2:ac:cd:29:56:4d:8b:ee:f8:
a4:98:a3:72:fa:05:59:8f:9b:9a:1b:e5:e4:00:e6:
18:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D6:63:61:7D:4D:40:C0:95:59:93:42:7F:00:09:2F:FE:B5:59:54
X509v3 Authority Key Identifier:
keyid:9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:75:7b:35:29:04:c8:1a:78:03:51:62:ae:a9:45:a1:6c:ea:
e5:f2:75:a4:45:6d:09:0b:28:c3:69:7f:95:d5:c7:34:53:f4:
61:db:d0:5e:03:cc:f0:40:10:95:96:29:23:74:c6:db:68:a4:
76:8d:ad:f9:b0:8a:16:c0:74:ee:93:07:ec:fd:24:ab:e7:06:
94:d0:a8:42:01:df:3f:53:1f:f9:54:a8:80:f3:68:34:12:cf:
cb:4a:b6:b3:1e:63:8e:1e:0a:bb:8e:07:b7:4e:5c:2a:f3:f5:
15:dc:02:42:dd:e5:bd:15:b6:9d:61:fb:41:ec:93:6b:d7:8f:
b8:7a:6f:20:83:60:1f:cb:b5:df:0c:c3:34:df:18:77:6b:b6:
64:c0:cf:fa:9b:e5:45:d0:0b:13:fe:4b:61:96:71:80:ca:8f:
35:1b:8f:f6:45:5f:bd:f0:97:3d:14:8b:80:e2:cf:d0:c5:f5:
8c:30:eb:aa:9e:bb:5b:03:b3:b8:77:fc:1e:29:16:39:3c:35:
e5:b6:f3:bb:e3:fa:98:41:6d:30:70:bf:17:66:40:9b:59:aa:
70:00:37:eb:90:5c:9b:1f:7a:75:57:3e:e5:5f:15:89:54:57:
d6:1f:8b:cc:83:41:6e:25:7e:66:8d:65:56:05:7f:01:02:c1:
9a:2c:6d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:13 2026 by rpki-client