Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/93faf8-862e-4d97-b2b5-676db4cd3540/1/mytwoo9kNGxDgfJr-ZPS8WNbBO0.mft
File: mytwoo9kNGxDgfJr-ZPS8WNbBO0.mft (raw, json)
Hash identifier: 4mmtOiD/nw0v0TGDfzA14+FqmxIllMYdPmnKeATwyEI=
Subject key identifier: 1C:E0:43:08:ED:98:06:DB:E8:0B:0D:FC:B9:30:CA:23:12:FF:81:2F
Authority key identifier: 9B:2B:70:A2:8F:64:34:6C:43:81:F2:6B:F9:93:D2:F1:63:5B:04:ED
Certificate issuer: /CN=9b2b70a28f64346c4381f26bf993d2f1635b04ed
Certificate serial: 019D2929752C2BB81BB563B06B3FC314CFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mytwoo9kNGxDgfJr-ZPS8WNbBO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/93faf8-862e-4d97-b2b5-676db4cd3540/1/mytwoo9kNGxDgfJr-ZPS8WNbBO0.mft
Manifest number: 014E
Signing time: Thu 26 Mar 2026 08:01:15 +0000
Manifest this update: Thu 26 Mar 2026 08:01:15 +0000
Manifest next update: Fri 27 Mar 2026 08:01:15 +0000
Files and hashes: 1: mytwoo9kNGxDgfJr-ZPS8WNbBO0.crl (hash: JRYeYBshPG4Ap3FCacC365dI88UEFiQjApUk5SynUCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/93faf8-862e-4d97-b2b5-676db4cd3540/1/mytwoo9kNGxDgfJr-ZPS8WNbBO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/93faf8-862e-4d97-b2b5-676db4cd3540/1/mytwoo9kNGxDgfJr-ZPS8WNbBO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mytwoo9kNGxDgfJr-ZPS8WNbBO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:75:2c:2b:b8:1b:b5:63:b0:6b:3f:c3:14:cf:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2b70a28f64346c4381f26bf993d2f1635b04ed
Validity
Not Before: Mar 26 08:01:15 2026 GMT
Not After : Mar 27 08:01:15 2026 GMT
Subject: CN=1ce04308ed9806dbe80b0dfcb930ca2312ff812f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4d:84:06:04:e1:0d:0a:ca:a9:e9:f3:d3:ee:
4e:7d:37:70:ac:ae:d8:35:db:fd:05:80:0e:da:1b:
01:aa:e7:2b:96:26:c1:75:d5:86:f0:84:f1:6a:65:
36:27:b2:ff:64:a7:e4:ae:da:82:68:7f:17:29:84:
18:ce:b4:b1:ef:5e:a6:0d:f3:02:42:bb:8c:46:40:
65:39:bd:4a:a1:89:3d:3e:12:03:9d:45:7f:22:b9:
88:f2:ad:09:7b:5b:0a:26:fa:03:f7:7c:5e:17:55:
de:0d:9c:de:c6:7e:7f:6e:1e:8f:68:99:dd:f4:3c:
13:84:97:7c:f9:5b:bc:51:f2:e4:31:0c:51:02:97:
3b:ad:e4:ed:03:fc:ad:26:8f:0e:21:93:d9:e0:7f:
f3:4b:bb:2b:5e:47:62:ef:57:77:a0:83:bc:34:b8:
b7:51:96:9c:dc:67:ba:38:e3:19:04:b6:f9:42:98:
bc:c2:8c:18:52:a8:fc:d0:18:ff:4d:0a:57:a7:95:
d9:d9:af:7c:cf:10:38:3f:7b:35:6b:5e:80:0c:18:
37:be:bf:db:1e:26:cb:3a:c2:74:23:d8:6f:3c:88:
02:bf:6a:6f:53:29:18:64:94:73:4c:bc:01:6f:c6:
61:3e:58:7a:9d:03:8f:73:d3:3b:22:b2:bb:0d:25:
82:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E0:43:08:ED:98:06:DB:E8:0B:0D:FC:B9:30:CA:23:12:FF:81:2F
X509v3 Authority Key Identifier:
keyid:9B:2B:70:A2:8F:64:34:6C:43:81:F2:6B:F9:93:D2:F1:63:5B:04:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mytwoo9kNGxDgfJr-ZPS8WNbBO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/93faf8-862e-4d97-b2b5-676db4cd3540/1/mytwoo9kNGxDgfJr-ZPS8WNbBO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/93faf8-862e-4d97-b2b5-676db4cd3540/1/mytwoo9kNGxDgfJr-ZPS8WNbBO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:47:04:e1:06:2a:d9:46:31:7a:20:90:e4:7a:83:b2:9f:67:
f8:fd:74:c3:be:9c:8c:d1:65:38:5e:d9:8e:4d:6f:ed:a0:7c:
3a:a3:45:08:40:68:27:12:f6:b8:37:d7:67:9e:29:4a:47:ee:
fa:e6:08:5f:c3:93:76:15:2a:52:61:3e:18:41:b8:5b:8f:f0:
61:34:c9:3e:ce:bb:50:cd:66:6c:0b:8c:a6:7a:86:32:cf:d4:
ab:99:59:90:8d:1b:0c:bc:1f:f3:61:47:cb:f5:be:a5:cf:8d:
27:f8:a6:1e:d9:14:c1:8d:82:25:e8:ee:4f:f9:e3:88:9d:54:
4d:73:54:c3:88:a7:21:9d:aa:d0:c7:de:07:a1:df:09:32:c0:
05:00:e0:37:e5:67:9e:25:3b:09:a0:4d:f0:ec:f4:78:6b:85:
4b:55:8e:0b:af:ba:c8:94:ae:74:c0:e1:b1:f3:40:82:80:c0:
b2:61:c5:ed:7a:39:15:46:07:ce:e7:ec:29:ea:1e:b6:f7:37:
ea:01:f7:45:d2:d6:c5:f2:c1:26:6e:01:af:69:6c:35:6c:f8:
7f:ea:e0:e6:3e:5c:ef:2b:a5:07:dc:a1:f6:df:22:e5:29:0f:
9d:d5:d6:53:54:24:d3:58:f4:9e:29:c3:b9:87:5d:76:61:10:
79:28:32:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:17:19 2026 by rpki-client