Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
File: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft (raw, json)
Hash identifier: IXxQfkO0N6DZIpxpKNqSUubIJlbzBza6aBA9IDUqF00=
Subject key identifier: 36:A7:90:13:36:F5:83:58:C5:F7:16:6E:19:AE:F3:FE:29:A3:84:06
Authority key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
Certificate issuer: /CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Certificate serial: 019D284D97509C2B2D527BB6F3A8219559CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
Manifest number: 072D
Signing time: Thu 26 Mar 2026 04:01:06 +0000
Manifest this update: Thu 26 Mar 2026 04:01:06 +0000
Manifest next update: Fri 27 Mar 2026 04:01:06 +0000
Files and hashes: 1: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl (hash: XksjRZTmYyeXByEh6mw37jslrAi82ICF8U+PRQPJujo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:97:50:9c:2b:2d:52:7b:b6:f3:a8:21:95:59:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Validity
Not Before: Mar 26 04:01:06 2026 GMT
Not After : Mar 27 04:01:06 2026 GMT
Subject: CN=36a7901336f58358c5f7166e19aef3fe29a38406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:64:34:27:f7:7f:e7:5d:7c:05:0b:46:7b:
50:46:2b:2b:d6:46:aa:4c:95:a2:50:73:b4:87:f8:
ed:2a:6a:fc:63:9d:e2:c4:ea:42:02:d6:d4:c3:18:
e4:9d:17:64:3a:48:06:2f:37:51:4f:05:79:da:73:
b5:e5:40:af:11:6f:06:ef:30:d9:aa:cd:44:18:05:
72:42:7c:25:5e:57:4f:d1:71:2e:44:c7:c3:c5:26:
76:f0:fa:cf:ca:66:67:79:60:13:2d:4d:de:f7:4d:
90:23:75:43:42:72:d9:ec:51:00:40:2e:d3:2c:47:
fd:28:7c:5e:9e:4c:08:78:5a:79:97:2c:47:b0:d5:
af:4b:00:af:56:08:05:8b:f9:77:97:09:c8:c2:25:
68:68:94:db:22:49:9f:2d:2a:3c:fa:c7:f8:be:0a:
b2:19:84:8c:78:e3:16:21:f9:3c:d9:8a:67:30:e2:
44:00:c1:51:c9:61:5d:d0:fa:98:d8:c9:1b:20:34:
c7:46:f1:b4:55:fe:48:6f:f3:b9:b2:09:50:a9:2e:
ce:7c:90:95:f1:78:69:9f:3d:11:85:01:3f:d3:0a:
c3:d0:56:aa:82:cd:37:a8:fa:f2:6f:4f:30:a9:a9:
98:8f:91:45:99:06:41:5d:91:17:1f:5d:49:0a:e9:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A7:90:13:36:F5:83:58:C5:F7:16:6E:19:AE:F3:FE:29:A3:84:06
X509v3 Authority Key Identifier:
keyid:9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9f:e5:c4:64:e9:91:31:fb:22:69:66:46:21:50:8a:dc:0e:
00:31:1f:5e:f2:78:b0:1f:75:2b:f4:ad:de:c2:3c:51:a0:a2:
3e:02:f5:1a:3c:7b:4d:42:5e:41:ce:4b:13:a1:78:14:8d:21:
7a:c9:c5:f2:14:3c:20:b9:de:d6:49:32:f3:85:ba:15:6e:4b:
9f:69:05:f4:98:f4:6c:53:55:a7:a1:10:2b:15:61:2e:f2:fe:
38:b6:96:35:33:dc:de:cf:f0:1b:48:09:54:ff:8f:cf:74:88:
0d:0c:51:ae:2a:f4:f5:b6:94:80:0d:e1:60:7a:56:40:d1:90:
03:51:cf:16:54:41:65:57:72:d0:4d:ea:72:3b:4b:f7:38:95:
2a:ef:7a:bd:74:c9:fa:7d:82:3a:2c:bf:85:fd:1a:fa:40:f8:
2f:5f:83:67:46:d7:db:6d:a1:23:ac:e8:36:37:06:f9:59:72:
01:44:38:36:b8:da:cf:ea:0e:c3:9b:69:67:33:74:88:d1:5a:
a7:04:db:19:ae:b2:43:3c:79:c3:52:40:f3:11:90:54:da:b9:
89:b2:77:4b:f8:55:b9:46:fa:ca:22:7b:63:a3:02:97:f8:67:
16:99:0f:b3:89:b4:92:5d:ee:3a:d0:c2:f7:3c:9d:74:22:79:
cb:32:83:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:06 2026 by rpki-client