Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
File: 9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json)
Hash identifier: meU/MfoKQupaPVrDXzEVu4oFdKNbhQKqUSODI+rHVeQ=
Subject key identifier: D0:58:9C:1A:EB:A3:93:E9:8B:7C:DF:32:29:D7:07:6B:DB:41:B4:F2
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Certificate issuer: /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial: 019D28F273C3C93BDA3FE2178DF1F174242F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 07:01:11 +0000
Manifest this update: Thu 26 Mar 2026 07:01:11 +0000
Manifest next update: Fri 27 Mar 2026 07:01:11 +0000
Files and hashes: 1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: CbpC/tk6hrhWKK1WIoBa0AnxYMdacoKlDHDjauYUNNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:73:c3:c9:3b:da:3f:e2:17:8d:f1:f1:74:24:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Validity
Not Before: Mar 26 07:01:11 2026 GMT
Not After : Mar 27 07:01:11 2026 GMT
Subject: CN=d0589c1aeba393e98b7cdf3229d7076bdb41b4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:e4:38:39:07:d7:93:70:33:17:9e:bf:df:
1f:6e:9d:e0:80:bc:3b:06:a1:d6:9c:7e:28:8d:bc:
6b:4a:4d:a3:ec:b8:87:8e:2e:16:29:65:9e:d1:1b:
5f:09:cb:1e:dc:0e:e0:6a:8b:e7:6e:38:6b:4b:09:
e4:3f:a3:3b:02:67:c8:04:3a:90:1b:7f:25:c7:49:
c5:0f:6d:32:10:f4:cc:a8:aa:35:e4:dc:a3:cb:e9:
05:58:c5:88:1e:1a:dc:d8:4b:01:72:2e:66:89:a2:
e0:50:f3:5f:4f:96:af:e0:95:76:24:92:0c:48:70:
ad:c4:ec:56:b2:d9:ac:eb:d1:a2:80:14:f9:36:29:
10:d4:27:90:c5:db:db:fc:16:ec:db:39:af:36:ab:
b0:1e:91:58:9e:57:0b:7d:47:13:d2:9e:64:ab:73:
0c:4c:a3:68:6b:47:5e:9d:35:dd:9f:cb:da:67:72:
91:6a:92:28:f0:26:67:db:e8:e6:97:50:7d:77:54:
04:aa:58:79:2f:aa:53:c5:da:29:aa:85:3b:7d:df:
e9:2f:34:f4:20:9c:f8:4a:4d:6a:9b:df:bc:28:74:
5c:ae:5a:97:50:6f:36:af:64:9b:06:6f:2d:c8:fd:
1a:cb:99:6a:ec:95:c0:99:ae:02:c2:ce:f2:d6:3f:
89:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:58:9C:1A:EB:A3:93:E9:8B:7C:DF:32:29:D7:07:6B:DB:41:B4:F2
X509v3 Authority Key Identifier:
keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:76:26:73:aa:bd:a8:08:80:c4:e3:10:80:e0:c6:17:38:b3:
34:11:e4:f6:d8:72:dc:25:04:45:57:91:66:30:08:65:ce:df:
23:0d:97:02:d1:93:9c:e0:0f:9d:5b:0c:c9:f6:1a:80:56:76:
1d:73:6f:5e:b2:b5:72:c2:c4:b4:79:e9:f3:e2:c9:7c:ec:3e:
af:58:88:db:b1:e0:01:42:eb:79:44:3d:65:37:bb:db:18:0d:
5b:80:9e:f3:21:80:df:5f:8f:92:00:99:b2:0c:ee:a0:d2:cd:
ba:b5:0c:3a:40:b2:36:c8:ca:41:f2:c2:df:14:10:8c:e5:bc:
4f:a7:e6:dd:37:98:23:1a:13:d9:4e:17:16:67:f0:d7:bb:db:
50:c5:05:8b:9f:e6:b4:19:d3:7f:19:32:75:fa:8e:7a:b9:fa:
76:05:54:02:ca:7b:8f:d5:53:3c:81:2c:45:b2:31:8d:a8:58:
fa:f6:19:73:f1:cc:1c:15:dc:c4:d6:ef:1b:23:46:f1:1d:28:
b4:c7:f9:91:45:1c:64:2a:2c:49:f3:79:60:8b:ef:fa:e0:88:
51:e3:8f:45:e2:bc:ab:c2:b6:d6:e1:ce:4c:b8:fc:25:a0:d5:
07:8e:d3:d1:50:b8:73:18:10:2b:de:39:ea:23:df:32:8e:07:
6e:49:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:53 2026 by rpki-client