Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
File: 9jOGnDZCtefqAii_DgspXO_MTd8.mft (raw, json)
Hash identifier: 9uOXR+jXbEYoagHy2JTndeuJCXdyg6YXDGuR6FA+6rE=
Subject key identifier: EA:A7:F3:32:14:BE:FB:FF:BE:17:B2:48:7B:BE:08:AB:74:D3:DB:44
Authority key identifier: F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
Certificate issuer: /CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Certificate serial: 019D2B84DFCD123E156BBD3E8CDECCB16439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
Manifest number: 12FE
Signing time: Thu 26 Mar 2026 19:00:21 +0000
Manifest this update: Thu 26 Mar 2026 19:00:21 +0000
Manifest next update: Fri 27 Mar 2026 19:00:21 +0000
Files and hashes: 1: 9jOGnDZCtefqAii_DgspXO_MTd8.crl (hash: mz5C+Ogq+KMt2XbP3YS8pqn17Hvkt9jIT95rd9epN3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:84:df:cd:12:3e:15:6b:bd:3e:8c:de:cc:b1:64:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Validity
Not Before: Mar 26 19:00:21 2026 GMT
Not After : Mar 27 19:00:21 2026 GMT
Subject: CN=eaa7f33214befbffbe17b2487bbe08ab74d3db44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:81:6d:aa:38:77:85:a1:26:fd:d8:16:e5:ca:
64:43:77:48:04:e0:26:f7:b1:8f:74:05:8f:ec:a7:
93:90:dd:7b:2e:cd:46:6a:8f:17:2f:7f:fb:be:08:
3d:de:d8:8b:9b:87:8c:e9:70:43:16:38:bd:91:e5:
a5:57:31:65:24:d3:f2:23:a7:ee:16:62:b2:72:04:
95:e6:25:27:ba:39:6b:4a:6d:af:11:60:44:99:0a:
56:e9:d8:4a:9f:c2:ba:00:75:08:0b:e6:87:af:8f:
9e:7a:27:fb:e9:05:40:92:13:14:fd:01:b7:65:4b:
eb:62:e4:a3:e0:9f:7d:dd:d2:65:80:bf:03:82:5a:
3c:75:5e:da:5e:9a:da:d2:72:94:db:81:ee:b9:66:
91:f4:99:74:cd:9d:8e:9e:9e:1f:11:c8:a5:f8:bc:
8f:61:5f:80:84:f8:11:1d:36:2d:a0:57:1b:b2:be:
a6:41:c5:4a:9a:94:f2:f0:6f:00:7f:d7:ba:3c:6a:
ed:c7:47:05:f0:d5:d8:f3:59:77:c3:ff:f4:4d:30:
74:76:b3:75:3b:dd:93:4a:91:62:76:d7:6d:57:30:
ea:7c:5c:d5:e2:97:c4:93:16:ca:e5:90:e8:8b:fb:
13:88:97:28:fb:f4:4c:e9:08:f5:7d:bf:b9:ed:5b:
9a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A7:F3:32:14:BE:FB:FF:BE:17:B2:48:7B:BE:08:AB:74:D3:DB:44
X509v3 Authority Key Identifier:
keyid:F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5d:7a:47:6c:4e:59:c1:6d:cc:47:26:e5:6d:47:ea:cb:cb:
91:33:63:0e:77:14:2b:62:15:1a:df:df:73:6b:d0:19:64:9a:
88:e1:0f:75:7c:66:8e:a1:9f:ba:fc:38:83:69:74:e6:6d:c9:
8a:e1:f3:16:e2:09:2b:6a:ee:e1:bc:31:d1:9f:6a:9d:28:34:
69:9d:88:78:00:a5:f9:04:2c:3e:a4:3a:73:4a:25:87:8f:a3:
37:05:40:7b:6a:7e:9c:e5:14:af:c2:ae:81:83:f4:09:06:7c:
0f:bf:22:31:41:2d:54:3c:54:2e:03:34:8e:f5:9e:e6:16:24:
4e:9d:6d:22:ba:94:18:a8:55:14:18:21:13:a7:d4:7c:22:61:
3a:c4:9a:3f:f7:8b:20:c0:f7:a8:a5:bb:d5:7f:0c:56:87:e6:
50:6d:59:c8:c0:66:e7:64:4a:b3:9c:5c:0a:ab:04:d3:bc:9a:
c4:3b:d6:10:64:2c:b8:e5:08:1e:49:e6:1f:7a:05:ca:a7:9b:
67:bb:e8:30:7b:5d:b5:cb:c0:b1:65:9b:1f:bf:b2:c2:fc:76:
50:04:82:3c:60:a7:b5:e8:b3:ab:7f:a3:6a:41:7a:bd:61:39:
47:b5:e6:b1:ae:5b:fe:83:06:ae:51:a4:b4:f2:73:83:aa:19:
be:89:04:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:38:47 2026 by rpki-client