Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier: u/mXaq0UEyQA7AMMI3Di0pmQD19wXLgEJcFSw/gJSmQ=
Subject key identifier: CB:D6:18:93:32:57:E1:23:E0:EA:B2:DB:62:EF:D9:92:7E:9C:29:30
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial: 019DA3E630AE5BDD7016C57C5B46C443000B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number: 1816
Signing time: Sun 19 Apr 2026 04:01:05 +0000
Manifest this update: Sun 19 Apr 2026 04:01:05 +0000
Manifest next update: Mon 20 Apr 2026 04:01:05 +0000
Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: DCB0YFXx9DUz7MGHR0pCq+rFNd5ErKqssIbC/0ppAIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:30:ae:5b:dd:70:16:c5:7c:5b:46:c4:43:00:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
Validity
Not Before: Apr 19 04:01:05 2026 GMT
Not After : Apr 20 04:01:05 2026 GMT
Subject: CN=cbd618933257e123e0eab2db62efd9927e9c2930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:83:e8:68:d2:86:0b:92:b3:21:c5:2d:91:
35:44:a4:a0:96:76:56:67:e6:38:39:68:31:70:6e:
c5:e1:b8:04:17:aa:68:cf:2d:8d:04:70:4a:8b:7d:
8f:43:cb:af:6f:81:56:d8:d9:6a:33:1e:81:6b:d8:
d3:a3:ca:d1:40:12:a7:14:e8:1c:c9:c0:fe:ee:e8:
c3:cb:03:b7:d1:8c:e1:ef:d9:96:51:de:fa:45:16:
c5:5e:c6:a5:aa:57:aa:a3:56:c1:a2:98:89:e9:03:
ba:87:a7:55:ee:39:4e:20:af:9a:59:99:c9:30:ca:
17:9b:c4:93:45:e9:82:84:75:63:dc:e0:1f:dd:9a:
4b:eb:3f:87:7d:15:57:b1:7a:2f:b0:4c:c4:2f:51:
aa:33:db:43:f8:a3:92:85:6f:3b:97:2b:b4:14:28:
7c:ec:5d:4b:7b:cf:7d:05:82:09:28:49:b1:cc:8c:
f5:c1:38:4f:ae:74:dd:52:05:cb:d8:5d:1c:16:63:
1b:bc:c4:78:32:54:e4:f0:9f:53:85:9d:1f:4d:a7:
de:cc:82:43:91:a0:9c:19:db:f5:75:22:42:c5:57:
95:ec:39:d3:5f:18:80:19:2c:b9:ee:86:e2:28:a0:
f4:78:15:6b:a9:f1:39:67:30:3f:56:6e:74:15:12:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D6:18:93:32:57:E1:23:E0:EA:B2:DB:62:EF:D9:92:7E:9C:29:30
X509v3 Authority Key Identifier:
keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:63:38:f0:da:4d:2d:a1:cc:23:db:e3:1e:ab:83:42:6d:33:
77:07:1e:7c:52:cb:11:83:20:88:67:d9:e3:a1:5a:f0:5c:a6:
d6:0c:75:65:a0:1d:a2:03:71:20:86:46:9a:b4:fc:18:0a:2b:
eb:1b:f4:71:b0:a9:8e:3f:62:79:de:ba:a5:7e:1e:94:d9:c0:
a2:b6:7b:37:88:81:34:e6:77:de:4d:80:8f:5d:cb:8f:fb:19:
1f:2a:f8:1d:09:db:15:7e:58:de:44:9a:13:7f:50:f9:52:2d:
d2:4e:b1:a7:c8:38:60:48:bc:15:ac:52:0f:c1:e9:64:93:e1:
30:f3:4e:38:54:aa:d1:9b:28:a2:bc:95:ae:b8:3a:12:0a:4c:
d6:b4:e4:4f:24:44:d9:6a:ef:29:37:cc:d2:f8:cc:9e:23:d3:
6e:4f:6f:2c:48:e6:49:aa:65:27:dd:66:48:75:d4:64:88:96:
66:25:4e:5e:af:40:8e:4f:13:76:a4:2e:f3:d4:fa:20:28:c5:
8f:d3:80:54:ad:34:7b:bb:be:a7:d8:97:41:dc:58:87:ee:7c:
6b:8a:53:87:c3:18:0c:32:b5:59:f2:61:17:5a:ce:9d:7d:47:
f4:d7:1c:4e:68:40:5d:45:4a:47:34:e5:ac:4a:80:57:d2:b5:
39:9b:fe:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:57:15 2026 by rpki-client