Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
File: 9yjCKwJQJ1-m63NLoA55D343pVA.mft (raw, json)
Hash identifier: GcJ2TCiggaEpIlIjxS0WmWyNA2ue2y4cXDtPNGIoYk8=
Subject key identifier: B5:4F:71:D4:FC:FC:41:B6:1F:C8:3A:75:B4:42:92:C0:44:E3:69:EE
Authority key identifier: F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
Certificate issuer: /CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Certificate serial: 019D329AEF4D7F4DC30E77763019F5B58476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
Manifest number: 0BB9
Signing time: Sat 28 Mar 2026 04:01:47 +0000
Manifest this update: Sat 28 Mar 2026 04:01:47 +0000
Manifest next update: Sun 29 Mar 2026 04:01:47 +0000
Files and hashes: 1: 9yjCKwJQJ1-m63NLoA55D343pVA.crl (hash: gDPbSxh8g++qo2DszEb2EmBsAqQCo+vidaUVk0ZXOko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:ef:4d:7f:4d:c3:0e:77:76:30:19:f5:b5:84:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Validity
Not Before: Mar 28 04:01:47 2026 GMT
Not After : Mar 29 04:01:47 2026 GMT
Subject: CN=b54f71d4fcfc41b61fc83a75b44292c044e369ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:87:44:25:75:96:2b:c9:86:b9:d1:90:16:ed:
73:55:89:f4:77:47:04:49:44:6a:f5:95:f1:06:fa:
3b:8e:55:bf:b6:f9:6a:63:4f:b9:e4:2f:c0:80:8b:
a2:e9:02:9b:5e:af:4e:da:42:62:cb:33:ae:27:d2:
d5:28:19:61:30:ae:81:96:37:2c:e4:37:ff:2a:73:
5f:77:b3:bc:0e:ff:46:1e:cf:38:42:29:07:ad:5a:
80:43:27:fb:a8:f9:4e:9e:ac:45:31:79:b5:00:60:
76:0f:e7:53:9e:2e:44:4e:8d:d0:d4:42:1b:11:f8:
64:87:ef:8d:72:e3:5f:6f:94:dc:bf:9f:dc:35:05:
b6:9f:31:42:97:42:ed:89:82:fd:3c:8d:ed:03:02:
2c:11:d3:85:62:82:13:18:79:51:7b:0a:b0:a5:e5:
ff:23:4f:9f:1a:c1:b0:c0:b6:21:54:35:2d:d5:42:
b2:90:72:2a:d9:cf:de:98:16:43:36:66:3b:c7:48:
b0:03:be:9c:da:fe:dc:d4:98:6f:65:2c:fc:d6:b7:
6c:8d:67:80:68:d7:d6:f3:62:3e:53:2a:d2:f2:87:
65:f8:52:29:a3:15:33:31:17:39:e1:c8:b1:2c:c0:
6c:8b:51:0f:67:6c:65:10:ee:25:5c:0a:2c:db:e2:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4F:71:D4:FC:FC:41:B6:1F:C8:3A:75:B4:42:92:C0:44:E3:69:EE
X509v3 Authority Key Identifier:
keyid:F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:71:2f:af:a0:8c:ea:f6:38:03:8c:e2:70:33:e1:a2:c7:53:
99:f6:02:6c:9d:25:03:b0:bc:8d:fb:fe:76:ff:d0:f9:46:7b:
bb:52:9a:bb:c9:df:4b:67:3a:34:dc:9a:09:c0:a4:5a:cf:36:
79:a6:c6:b3:e7:b2:74:e0:b0:f3:05:21:82:d8:1a:e3:eb:a1:
b1:6c:01:4f:b2:ea:96:98:d3:d6:2a:e9:cb:47:9e:ce:52:69:
bd:69:01:a1:5c:99:6f:96:30:17:42:31:3d:ee:28:3f:87:b1:
15:30:a7:9e:0f:8e:87:ae:73:d0:0a:21:16:56:e3:08:80:e4:
45:ea:44:6e:c8:ed:fe:43:de:cc:0b:89:8a:9b:a6:35:6c:80:
dd:68:1f:12:bd:4e:b0:ec:58:fc:15:dd:08:22:08:ad:14:cf:
6c:75:4c:00:d5:3a:2a:1f:9a:57:5d:76:9a:31:eb:a4:db:05:
74:58:a8:ed:c7:d1:a0:7a:49:a2:1c:5f:50:20:75:b9:4f:0a:
5e:b6:ff:5f:ec:d4:9e:dd:df:41:c6:fc:6f:4a:65:bc:76:9e:
ca:a8:40:bd:fd:77:c4:1a:c7:e4:2c:52:29:fd:54:46:ff:9b:
03:79:f7:0c:c7:e4:05:a5:a1:4c:22:a1:e5:73:04:e8:b4:eb:
87:e0:69:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:28 2026 by rpki-client