Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft
File: 9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft (raw, json)
Hash identifier: a0Zw8r1VrW6sbimAHAwJPsY8T0pVeh/mC47xLNooBgU=
Subject key identifier: F0:63:2C:C7:3A:C7:3C:70:5A:EA:B6:99:93:9E:DE:AB:B9:10:1F:9C
Authority key identifier: 9C:9C:8D:51:85:D8:12:5C:9D:65:49:0A:0E:E0:60:1C:99:7F:DA:A5
Certificate issuer: /CN=9c9c8d5185d8125c9d65490a0ee0601c997fdaa5
Certificate serial: 7482A8A38517521937A8C67AC14B067A3213409C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJyNUYXYElydZUkKDuBgHJl_2qU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft
Manifest number: 0181
Signing time: Wed 25 Mar 2026 22:31:37 +0000
Manifest this update: Wed 25 Mar 2026 22:26:37 +0000
Manifest next update: Fri 27 Mar 2026 00:23:37 +0000
Files and hashes: 1: 9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.crl (hash: rzTR6bG23GX63A+P6fc/ElXNTA9PdJuW1Wm8+fpzOOw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJyNUYXYElydZUkKDuBgHJl_2qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:82:a8:a3:85:17:52:19:37:a8:c6:7a:c1:4b:06:7a:32:13:40:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9c8d5185d8125c9d65490a0ee0601c997fdaa5
Validity
Not Before: Mar 25 22:26:37 2026 GMT
Not After : Mar 27 00:23:37 2026 GMT
Subject: CN=F0632CC73AC73C705AEAB699939EDEABB9101F9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:34:61:7e:52:d3:ae:7c:0f:9e:ff:2c:d9:
a3:5c:57:b4:0f:da:46:06:1b:29:1d:66:0d:01:0e:
74:fe:da:29:2b:6b:c0:e3:c8:f9:1f:c6:c2:ac:59:
a0:48:78:99:b1:87:cb:59:7b:41:bd:5b:89:90:3c:
53:66:4d:c9:b9:18:f9:80:b6:c1:89:45:6e:81:fb:
a4:36:01:00:ec:5f:32:0e:2a:72:05:f2:88:79:49:
6c:ef:a5:04:5d:29:af:ea:c3:c7:ac:3a:f2:70:cd:
d3:07:6f:61:aa:c2:ae:bd:5b:aa:0d:fe:68:5b:61:
44:c2:03:7d:79:32:16:43:48:5e:ff:a3:d2:5d:87:
d1:15:c1:d2:93:96:cb:8b:a9:96:02:6d:d2:95:a4:
88:84:9f:e5:b3:85:e5:fd:fe:d8:17:e5:49:70:30:
5b:1a:9d:c1:d3:68:17:33:e0:3c:03:95:87:37:5f:
03:c8:50:f1:f5:77:b0:9a:bb:4b:f6:88:39:c4:14:
c8:1f:7e:7c:a0:df:2a:c2:81:9b:a0:b5:61:72:52:
45:61:a7:f4:5e:7d:34:d5:22:e0:e8:71:31:b1:62:
3a:bd:fd:4e:48:75:37:92:1b:a6:70:36:b7:05:33:
c2:af:3f:ba:f8:95:c4:b9:ee:b3:87:9c:04:49:ab:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:63:2C:C7:3A:C7:3C:70:5A:EA:B6:99:93:9E:DE:AB:B9:10:1F:9C
X509v3 Authority Key Identifier:
keyid:9C:9C:8D:51:85:D8:12:5C:9D:65:49:0A:0E:E0:60:1C:99:7F:DA:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJyNUYXYElydZUkKDuBgHJl_2qU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:48:f2:0d:57:60:ab:f3:40:4a:0e:32:5c:5c:26:8c:01:6a:
bf:05:be:49:60:ff:97:3c:7c:2d:34:6b:89:ba:8f:c1:8b:d8:
8b:48:b0:c7:46:f5:e0:f1:73:7b:5d:76:47:60:80:0b:c8:0d:
6a:ce:67:09:2f:bb:e3:17:be:65:0c:99:9a:8b:69:21:cd:5b:
8b:2b:93:53:23:3d:28:b2:65:1f:13:0e:aa:ef:86:02:fd:2f:
41:43:f6:64:06:d6:74:75:80:91:c1:65:39:10:39:60:50:ba:
d2:c5:9c:1d:84:93:3f:5e:3a:e5:78:dc:e9:d1:9a:48:01:26:
4d:1e:c3:cb:7f:de:57:2e:c2:54:27:85:a2:0c:18:41:9a:c3:
d6:54:d1:91:c6:5e:e3:93:23:9c:22:6c:22:2f:5a:2d:56:2d:
5c:07:92:fa:9a:e2:bf:51:db:b3:fa:c8:7d:23:19:0a:38:42:
a3:5c:1a:48:eb:1a:d0:4d:48:4e:98:48:d8:6d:bb:7b:44:bd:
4c:7f:95:cf:51:b4:9e:40:74:aa:05:9c:8e:82:8b:1a:04:2b:
7c:54:bf:7a:c2:49:75:0e:52:54:2c:f7:69:6d:26:cc:89:9d:
47:b6:c9:53:8e:79:3d:d8:2a:ae:ad:11:8b:24:77:d0:86:98:
b0:b7:48:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:16:30 2026 by rpki-client