Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
File: 9BB8B7044997B7AAF52B54E757F998927956EC38.mft (raw, json)
Hash identifier: CjWDbvCBri9vCn30aewETJcBAlle6niZLSG3sj4ql/E=
Subject key identifier: 93:E2:72:D5:C6:C7:70:4C:59:66:E1:78:8C:36:56:D5:5A:00:CA:61
Authority key identifier: 9B:B8:B7:04:49:97:B7:AA:F5:2B:54:E7:57:F9:98:92:79:56:EC:38
Certificate issuer: /CN=9bb8b7044997b7aaf52b54e757f998927956ec38
Certificate serial: 5A46FD379C201F382067F8442D4CCEFC3A5069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
Manifest number: 58
Signing time: Wed 25 Mar 2026 05:40:50 +0000
Manifest this update: Wed 25 Mar 2026 05:35:50 +0000
Manifest next update: Thu 26 Mar 2026 09:26:50 +0000
Files and hashes: 1: 9BB8B7044997B7AAF52B54E757F998927956EC38.crl (hash: mRdML0jmD2Y4Tp+lEkU1icYUgFJQUwXVmjkzLOzSnVk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.crl
rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 09:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:46:fd:37:9c:20:1f:38:20:67:f8:44:2d:4c:ce:fc:3a:50:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb8b7044997b7aaf52b54e757f998927956ec38
Validity
Not Before: Mar 25 05:35:50 2026 GMT
Not After : Mar 26 09:26:50 2026 GMT
Subject: CN=93E272D5C6C7704C5966E1788C3656D55A00CA61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d6:ed:d4:9b:39:60:d5:c5:d6:e0:1d:61:c2:
59:50:4f:57:59:6a:9f:7f:86:b1:40:65:f3:78:46:
47:a8:05:2f:7d:c1:58:b2:50:8a:f1:84:7d:00:61:
7a:f4:7d:a0:fa:13:25:45:99:c7:35:22:82:11:d7:
03:a7:90:e8:a7:98:70:7c:25:11:73:92:8d:b0:aa:
eb:1f:f8:21:68:df:3e:75:c7:4c:83:cb:6a:e4:fa:
f6:7a:f0:81:61:56:2c:c7:81:ca:31:cf:16:79:f6:
c1:07:8e:b3:89:52:86:5e:d2:f2:2a:e4:c3:6c:61:
ec:ae:0c:52:a6:dc:f9:9d:6e:63:62:1d:ca:63:a9:
da:51:e1:ab:11:4d:a0:98:43:80:33:c0:c7:ff:e6:
e7:a6:d8:1b:a0:0e:c5:2b:70:58:f6:01:b7:8a:32:
0e:e6:71:8e:3a:66:18:a0:71:47:55:79:60:dc:dd:
64:0f:2c:8a:4e:3b:55:88:8e:73:2f:55:44:1a:83:
f8:56:bc:03:5f:a2:c6:3f:1f:61:d5:f8:22:a3:33:
2a:18:bc:0c:9a:c1:66:58:aa:da:63:3a:44:22:46:
9d:c0:87:e7:20:c0:5d:da:d2:f4:9e:23:f9:69:22:
46:7d:29:92:5d:b5:8f:4d:84:6a:d5:4c:15:e3:8f:
88:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E2:72:D5:C6:C7:70:4C:59:66:E1:78:8C:36:56:D5:5A:00:CA:61
X509v3 Authority Key Identifier:
keyid:9B:B8:B7:04:49:97:B7:AA:F5:2B:54:E7:57:F9:98:92:79:56:EC:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:24:d3:d8:94:10:b7:1e:f6:05:f8:73:ea:01:56:19:55:62:
fa:8d:08:2d:ec:ad:eb:97:71:bc:2e:2d:2f:d1:6c:f5:77:e9:
78:c9:b5:5a:65:35:87:c5:0a:a4:d5:75:df:42:ae:f8:98:bc:
fe:8c:9c:d1:52:22:30:cf:a2:ff:aa:7b:6d:ee:4a:cf:56:61:
67:69:8b:e7:9a:f6:ce:a0:72:0f:19:f7:84:ee:e0:f7:5f:56:
fd:70:ac:a8:0e:48:6f:68:9f:65:9e:8c:c5:3c:7f:47:a0:95:
6c:0e:ca:7f:fd:7e:da:d2:b4:2a:2f:a4:25:23:e3:3a:fe:3b:
eb:c1:36:63:4d:a9:35:0a:2f:3c:e9:8a:53:a7:6e:76:b6:23:
19:50:11:83:b1:5a:68:52:89:3f:b9:4c:11:7c:4f:3a:9b:ae:
12:9d:bb:db:5e:26:f0:c1:13:fd:b7:4e:a5:47:38:ba:bc:86:
fa:f7:df:97:a0:85:6c:1a:a9:12:e9:53:f7:22:c0:e8:d0:a8:
37:fd:ea:39:34:29:dd:5f:58:cb:c3:46:b3:0c:c5:cb:36:0e:
cf:aa:12:e6:f2:33:e9:2d:58:46:b9:0f:11:13:fb:cc:a2:c8:
5c:5a:42:da:19:f4:1a:7b:2f:5f:cf:71:fe:7c:67:f3:5f:71:
49:bd:d7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:59:04 2026 by rpki-client