Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
File: 9H1LS48bGIg-rDtJnA8EKsomsKk.mft (raw, json)
Hash identifier: 4kek/8Pw5Hv05odlizrJ9UFb6gIXNHRayVXaytjAMOQ=
Subject key identifier: F1:28:A2:21:CF:65:D8:77:50:C5:81:62:17:B5:0B:6F:62:68:16:88
Authority key identifier: F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
Certificate issuer: /CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Certificate serial: 019D28BB2B797A28FCA5B773A1BD4092F866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
Manifest number: 0BB9
Signing time: Thu 26 Mar 2026 06:00:48 +0000
Manifest this update: Thu 26 Mar 2026 06:00:48 +0000
Manifest next update: Fri 27 Mar 2026 06:00:48 +0000
Files and hashes: 1: 9H1LS48bGIg-rDtJnA8EKsomsKk.crl (hash: PF+K5OmuYkMHXRjtl0GT34o03ENM0Ftggd3DSeh5REs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:2b:79:7a:28:fc:a5:b7:73:a1:bd:40:92:f8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Validity
Not Before: Mar 26 06:00:48 2026 GMT
Not After : Mar 27 06:00:48 2026 GMT
Subject: CN=f128a221cf65d87750c5816217b50b6f62681688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:35:bc:73:86:2a:95:23:ca:aa:3d:19:aa:08:
6c:31:35:d8:70:4d:18:80:87:62:18:76:0b:ec:a0:
bd:24:c0:20:2f:d4:4e:e0:0b:7e:05:50:5a:e7:65:
76:31:75:55:c2:a3:ff:f3:b7:af:71:d3:0d:f0:bb:
7c:82:16:19:b9:bb:b4:93:70:87:26:93:d2:33:a3:
d6:e8:a5:2e:e5:77:b2:d6:72:32:53:8f:50:ee:bb:
f0:23:57:50:bb:46:b5:4e:38:d3:0f:f1:1e:61:17:
0e:00:d5:13:f1:3c:9f:bd:f0:ca:ed:b5:78:ee:cf:
6a:5f:09:6b:d9:d7:14:24:2a:02:dc:13:64:80:9a:
98:6f:77:2d:74:09:04:cb:5b:bf:6e:92:c6:89:82:
62:de:1c:ac:88:27:10:8e:15:94:85:02:f7:dd:5b:
aa:5b:6f:41:16:d5:eb:13:d6:25:58:47:7d:5b:08:
0b:61:4b:b4:37:2d:04:e8:5b:78:d6:8a:09:b6:3f:
c5:40:58:4c:92:5a:5c:99:2b:5a:95:31:c8:d3:4b:
d6:34:c3:5a:ad:50:0b:3a:1d:b9:6e:3a:17:10:3e:
be:4f:fd:29:15:e7:f5:35:0e:16:f9:34:68:16:d1:
42:a2:44:bd:68:b0:38:dc:e2:a1:8d:5b:d7:8f:24:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:28:A2:21:CF:65:D8:77:50:C5:81:62:17:B5:0B:6F:62:68:16:88
X509v3 Authority Key Identifier:
keyid:F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:db:a5:00:00:80:4c:9b:ba:39:5d:47:e3:d8:56:16:bb:1b:
aa:c5:45:be:23:bc:52:6d:0b:40:00:2b:86:4f:9a:3f:24:23:
a5:83:e3:f8:1e:8a:f1:15:77:15:61:54:7c:cc:50:9a:1a:78:
e7:68:52:46:d4:37:98:11:fd:23:a0:49:97:8e:c4:8f:85:0c:
8d:29:3d:c7:9f:50:26:20:5b:62:2a:38:ba:ce:64:d1:e3:4f:
32:7e:dc:3f:d1:34:6e:31:2e:2c:f9:81:43:cc:64:72:02:d9:
8d:a0:af:f4:43:4f:4c:e3:78:20:3c:b3:55:75:c4:af:bf:23:
cd:24:e0:0c:49:80:91:d0:99:7d:54:b5:36:44:c1:dc:68:34:
0f:11:37:c5:ff:53:fa:5e:34:59:eb:c1:d7:45:18:8f:df:e0:
1b:f2:3a:7a:9b:f9:21:e5:06:08:d3:67:98:65:36:f7:d5:6b:
b8:48:38:75:f2:72:c3:08:ef:b6:77:2f:d8:35:15:16:e1:45:
c1:e7:e6:39:93:c1:b3:2f:f9:ae:55:de:2e:61:56:bc:7a:f0:
c7:92:39:fe:75:48:53:f1:11:36:df:39:c1:60:fc:22:2e:dd:
f0:af:c8:71:6b:df:fe:3b:b3:4f:c7:61:ff:54:10:40:ff:22:
93:40:b8:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouyt5eij8pbdzob1AkvhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0N2Q0YjRiOGYxYjE4ODgzZWFjM2I0OTljMGYwNDJhY2Ey
NmIwYTkwHhcNMjYwMzI2MDYwMDQ4WhcNMjYwMzI3MDYwMDQ4WjAzMTEwLwYDVQQD
EyhmMTI4YTIyMWNmNjVkODc3NTBjNTgxNjIxN2I1MGI2ZjYyNjgxNjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzW8c4YqlSPKqj0ZqghsMTXYcE0Y
gIdiGHYL7KC9JMAgL9RO4At+BVBa52V2MXVVwqP/87evcdMN8Lt8ghYZubu0k3CH
JpPSM6PW6KUu5Xey1nIyU49Q7rvwI1dQu0a1TjjTD/EeYRcOANUT8TyfvfDK7bV4
7s9qXwlr2dcUJCoC3BNkgJqYb3ctdAkEy1u/bpLGiYJi3hysiCcQjhWUhQL33Vuq
W29BFtXrE9YlWEd9WwgLYUu0Ny0E6Ft41ooJtj/FQFhMklpcmStalTHI00vWNMNa
rVALOh25bjoXED6+T/0pFef1NQ4W+TRoFtFCokS9aLA43OKhjVvXjyQx7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEooiHPZdh3UMWBYhe1C29iaBaIMB8GA1UdIwQY
MBaAFPR9S0uPGxiIPqw7SZwPBCrKJrCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzZkMWYtZWVkZi00YTRkLTg5NWIt
MjcxNjY3NTNkZjA4LzEvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNzZkMWYtZWVkZi00YTRkLTg5NWItMjcxNjY3NTNkZjA4
LzEvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdulAACA
TJu6OV1H49hWFrsbqsVFviO8Um0LQAArhk+aPyQjpYPj+B6K8RV3FWFUfMxQmhp4
52hSRtQ3mBH9I6BJl47Ej4UMjSk9x59QJiBbYio4us5k0eNPMn7cP9E0bjEuLPmB
Q8xkcgLZjaCv9ENPTON4IDyzVXXEr78jzSTgDEmAkdCZfVS1NkTB3Gg0DxE3xf9T
+l40WevB10UYj9/gG/I6epv5IeUGCNNnmGU299VruEg4dfJywwjvtncv2DUVFuFF
wefmOZPBsy/5rlXeLmFWvHrwx5I5/nVIU/ERNt85wWD8Ii7d8K/IcWvf/juzT8dh
/1QQQP8ik0C4Ug==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:23:50 2026 by rpki-client