Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft
File: 9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft (raw, json)
Hash identifier: zbrXFMrIXTWrgm7sMo7F5UM2gdDwtmLyo8ONDiYYiPQ=
Subject key identifier: 12:45:0B:32:EA:EA:3D:2F:CE:96:88:1D:F8:EF:81:D2:AA:07:F7:90
Authority key identifier: 9C:2C:B2:B4:BE:C6:01:B3:E9:A4:74:02:15:E1:DE:D2:11:72:2D:64
Certificate issuer: /CN=9c2cb2b4bec601b3e9a4740215e1ded211722d64
Certificate serial: 2060B8B4331C9E4DCE8ED5FE15AD0833BB5E010C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCyytL7GAbPppHQCFeHe0hFyLWQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft
Manifest number: D9
Signing time: Wed 25 Mar 2026 13:20:36 +0000
Manifest this update: Wed 25 Mar 2026 13:15:36 +0000
Manifest next update: Thu 26 Mar 2026 16:36:36 +0000
Files and hashes: 1: 9C2CB2B4BEC601B3E9A4740215E1DED211722D64.crl (hash: rFJy1DCmqo3o1rBqTJcMk+2AOaWrsDY1gt5GuslXxVc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.crl
rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCyytL7GAbPppHQCFeHe0hFyLWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:60:b8:b4:33:1c:9e:4d:ce:8e:d5:fe:15:ad:08:33:bb:5e:01:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb2b4bec601b3e9a4740215e1ded211722d64
Validity
Not Before: Mar 25 13:15:36 2026 GMT
Not After : Mar 26 16:36:36 2026 GMT
Subject: CN=12450B32EAEA3D2FCE96881DF8EF81D2AA07F790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e7:03:5e:e8:89:05:4a:39:65:e3:0a:6e:84:
31:5f:de:74:20:32:a4:1d:32:a0:e6:11:30:63:e1:
92:5c:72:e2:e7:da:79:6c:41:1d:18:34:f9:83:1e:
59:34:c9:7e:39:df:b1:3e:1b:d7:89:d1:25:22:ba:
20:67:fd:4c:67:a1:38:26:bd:69:a2:f5:9d:0a:ca:
e0:fc:44:35:05:37:3c:46:24:79:1d:30:5f:e1:2e:
10:f8:0e:df:5b:a7:f7:af:c7:4c:2f:f5:91:d3:b7:
01:04:88:17:56:93:a2:08:0d:45:2a:e1:e5:0c:6d:
ab:1a:82:bb:0a:61:bc:9d:74:bc:0f:e2:23:84:fc:
d2:ef:4b:af:9b:3f:69:9c:c2:96:56:fa:82:12:32:
b8:22:a8:46:29:10:8a:bb:76:db:0e:bc:64:7e:6c:
62:6e:5d:a1:b9:64:aa:f6:90:8a:5e:89:1e:3e:85:
92:88:f3:f1:71:7d:29:ee:7f:68:02:17:fc:be:48:
9c:b9:02:3e:76:11:87:34:ba:1a:df:7f:51:a9:04:
80:90:96:38:d5:13:ca:0c:49:e3:88:55:d4:f1:6c:
15:03:9a:a1:e4:44:ab:74:d8:de:e6:8d:89:cb:b9:
3d:84:22:78:ac:78:a8:ed:b6:ca:3c:87:c5:19:cd:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:45:0B:32:EA:EA:3D:2F:CE:96:88:1D:F8:EF:81:D2:AA:07:F7:90
X509v3 Authority Key Identifier:
keyid:9C:2C:B2:B4:BE:C6:01:B3:E9:A4:74:02:15:E1:DE:D2:11:72:2D:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCyytL7GAbPppHQCFeHe0hFyLWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b5:c0:ce:28:64:f8:0c:65:7c:ab:5b:ff:19:fa:42:ba:8d:
5b:06:03:63:e1:79:83:97:f2:cf:8a:c0:fc:ff:1e:43:ed:9f:
aa:82:36:81:03:0c:4a:7d:4c:64:1b:aa:3e:9f:5b:12:f5:2c:
cf:5b:5a:05:5a:c9:dc:93:21:bf:44:1e:aa:0c:3c:e5:78:24:
d3:73:ac:bb:91:57:6c:df:7f:f4:a9:fd:03:21:69:60:62:93:
d2:b5:04:6a:5b:35:b2:af:2a:96:ef:df:52:e9:b9:72:41:50:
a6:b2:d8:8a:c6:3b:a3:21:b0:db:c0:2e:7f:21:3f:c4:dc:d3:
09:02:c8:de:7f:3c:78:5f:30:a6:23:6a:92:2d:ee:b0:9d:35:
29:ea:bf:7b:a3:aa:b9:12:bc:57:a8:fe:d4:64:fb:8f:ca:cd:
bb:91:c0:c7:15:b2:f1:5a:63:08:86:ad:dc:37:82:2f:e1:3c:
79:6d:01:19:ce:6d:6b:57:98:cf:82:fb:3d:8a:14:96:14:15:
ea:27:21:b5:9d:96:c1:78:87:54:40:89:9a:88:58:d5:d9:f1:
29:3d:2f:97:ad:19:a0:70:8e:b3:78:3f:d2:d7:36:50:d0:e5:
48:78:f2:5f:cf:af:8a:1f:c6:00:39:45:e0:b0:f0:c7:5c:cb:
09:f3:61:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:32 2026 by rpki-client