Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
File: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft (raw, json)
Hash identifier: P32fq0+6btmRV9KIBKbGk3z8oCEZe7ZHwdNK4sq6wqA=
Subject key identifier: 1D:B3:3E:36:45:01:32:D2:AA:2F:24:91:0D:EF:C8:E2:68:36:61:A8
Authority key identifier: F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
Certificate issuer: /CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Certificate serial: 019D2A048536FEE816D0CA0DC34EA65532BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
Manifest number: 067B
Signing time: Thu 26 Mar 2026 12:00:32 +0000
Manifest this update: Thu 26 Mar 2026 12:00:32 +0000
Manifest next update: Fri 27 Mar 2026 12:00:32 +0000
Files and hashes: 1: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl (hash: iJpNe9yU9EsLMag9FnNuze0eCV8RPMnRQwaU5fflV08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:85:36:fe:e8:16:d0:ca:0d:c3:4e:a6:55:32:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Validity
Not Before: Mar 26 12:00:32 2026 GMT
Not After : Mar 27 12:00:32 2026 GMT
Subject: CN=1db33e36450132d2aa2f24910defc8e2683661a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:c0:13:66:d4:da:79:56:2a:b8:71:09:78:
57:86:e0:09:f8:43:10:65:9b:b8:c9:c4:75:e0:24:
37:48:02:c2:a3:b3:4d:e1:3f:8d:b1:3a:ab:32:e5:
d5:fc:8b:da:d6:95:e4:d6:14:9a:9d:a7:53:72:0f:
ee:36:d4:76:31:ea:fc:35:9d:db:2c:3a:61:28:e8:
20:ec:75:4e:f1:ca:14:be:b3:bf:0c:7a:b2:cd:55:
7e:db:4a:98:89:44:81:62:b9:d9:fd:97:5f:81:2b:
20:8c:ed:e0:1a:9e:2b:04:28:87:29:4f:7d:27:8e:
df:ee:3c:f8:d5:a7:47:f9:7e:04:8e:f8:28:df:3f:
4a:3f:e0:8f:e6:43:7f:2f:c0:49:4c:70:21:34:46:
8e:45:1a:16:f8:78:9b:0e:a1:dc:a5:69:8b:de:21:
27:ff:cd:42:30:09:c4:72:38:6f:58:b7:f3:f5:18:
22:08:7d:5d:18:a2:b7:f6:12:dd:dd:b9:63:81:7e:
a0:dc:aa:1d:46:56:11:9d:f9:af:d3:4e:16:39:ad:
f8:38:17:61:61:11:94:7e:b8:23:25:64:44:f9:72:
47:2e:63:5c:df:b7:a4:59:ca:07:25:eb:30:df:75:
37:2e:88:fd:85:23:00:19:be:17:88:c5:ca:dc:27:
cf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B3:3E:36:45:01:32:D2:AA:2F:24:91:0D:EF:C8:E2:68:36:61:A8
X509v3 Authority Key Identifier:
keyid:F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d0:fe:42:41:87:51:92:09:ee:83:e2:2b:ff:72:bb:2c:61:
87:8c:4a:4e:36:b3:55:39:aa:4f:14:63:9c:e6:c4:40:4f:b4:
10:ea:ab:12:29:9f:b1:79:84:6b:2b:bc:ab:28:47:70:3c:31:
3d:6a:7c:7d:29:5f:df:9f:2b:68:ad:ad:cf:e3:86:98:ef:ef:
df:56:5a:92:92:06:a5:e9:78:cf:e0:42:8b:c7:46:1d:06:96:
8b:1b:fa:48:57:9f:73:82:29:17:f6:57:bc:ee:ab:15:54:21:
04:b0:1b:a7:c7:e6:8f:3f:6b:b8:02:4e:3e:6e:24:89:30:8a:
03:31:e4:e1:b1:1f:4f:4f:e3:df:a0:62:6b:fd:24:cc:a6:61:
be:8d:ff:75:e1:bc:9f:55:03:ec:33:56:77:3a:dc:4e:04:f5:
d2:a3:16:d8:f2:4d:8f:70:a2:04:35:eb:5e:17:fc:1c:ce:17:
61:da:0e:02:1a:1f:ac:14:26:e6:9f:fe:1e:38:40:4d:ba:d3:
01:2a:91:a8:d1:13:ec:6d:64:e9:ed:57:91:b9:ee:1b:20:10:
5a:cb:26:c0:62:fb:45:eb:a7:fa:75:f1:15:14:7c:2e:cc:8d:
7c:83:55:6c:43:d1:67:5a:d4:34:6c:ff:1b:fc:b2:db:c2:69:
b6:40:0a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:29 2026 by rpki-client